Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32322d3234203d3e20313335363336.roa
File: 3130332e3132352e31322e302f32322d3234203d3e20313335363336.roa (raw, json)
Hash identifier: GrzeRTvwdb01eruzon5J6C30QFDCGT+RATZgiZhvX9A=
Subject key identifier: F4:3A:A5:36:38:B6:10:10:DC:3A:3D:6E:3A:EB:8E:05:71:CB:E6:9D
Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Certificate serial: 3264499B792D6E8DC2D579B0C890B04103044384
Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32322d3234203d3e20313335363336.roa
Signing time: Fri 21 Oct 2022 10:01:41 +0000
ROA not before: Fri 21 Oct 2022 09:56:41 +0000
ROA not after: Fri 20 Oct 2023 10:01:41 +0000
asID: 135636
IP address blocks: 103.125.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:64:49:9b:79:2d:6e:8d:c2:d5:79:b0:c8:90:b0:41:03:04:43:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Validity
Not Before: Oct 21 09:56:41 2022 GMT
Not After : Oct 20 10:01:41 2023 GMT
Subject: CN=F43AA53638B61010DC3A3D6E3AEB8E0571CBE69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:4e:af:d6:b8:d1:48:47:f2:95:68:e7:f9:
44:e8:fc:8e:47:07:61:5e:7a:34:f7:d2:95:ff:d3:
de:1d:16:c5:ff:02:4c:b5:b0:ed:09:72:41:88:0b:
85:0a:c9:a9:5c:c3:eb:0e:58:c3:56:bc:da:2f:d5:
65:d9:04:d5:4b:ac:ae:14:46:54:21:3d:ce:60:71:
ec:c8:14:7a:ac:61:71:cf:d2:e4:98:05:0c:12:09:
39:18:3c:f0:e3:37:98:52:0f:1f:f5:40:61:80:67:
73:22:88:f5:fd:20:db:fa:e1:e9:6d:8c:59:09:d1:
5c:b6:8b:d9:5c:5b:7d:e2:33:91:7d:cd:3c:74:c6:
81:b9:30:cc:b2:4f:ee:9b:31:59:ed:05:fd:a8:7b:
0f:eb:a1:72:2d:27:96:39:06:d6:b0:5e:a2:7d:fd:
d3:cd:19:f4:55:5d:37:d1:f7:1f:47:cd:46:b2:7f:
2e:24:9b:3b:46:bf:f7:0f:25:1c:d1:28:60:d4:34:
5c:9f:a6:bd:40:8d:72:79:d6:1f:19:df:6f:88:53:
19:4b:e3:c4:7c:c9:45:10:68:a7:ea:6b:7e:92:75:
f4:c4:35:c8:44:95:99:50:80:6c:bb:1f:5e:6a:4b:
c9:dd:54:1d:e9:f9:11:27:a8:26:d3:c9:51:ed:79:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:A5:36:38:B6:10:10:DC:3A:3D:6E:3A:EB:8E:05:71:CB:E6:9D
X509v3 Authority Key Identifier:
keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32322d3234203d3e20313335363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.12.0/22
Signature Algorithm: sha256WithRSAEncryption
18:bb:49:41:10:97:75:41:72:d4:6b:94:47:95:7d:5c:f6:c5:
fe:73:66:24:1e:59:f9:f7:52:9d:5c:db:e5:5a:c5:b8:33:69:
3b:17:be:8b:3e:b2:cd:86:ed:50:ef:1a:5e:53:aa:57:d9:5b:
e8:03:1a:d1:31:5e:51:15:fb:ba:6a:1f:de:2e:5a:f0:e9:91:
73:49:6b:dd:5c:94:c3:a1:ce:28:d5:cc:0b:2f:b9:e9:78:b6:
80:db:91:53:6c:84:8d:07:bd:fd:6b:d8:0f:9f:95:f1:a0:c9:
c3:e5:dc:d0:db:fb:2a:cd:8b:41:3b:97:d3:a9:c8:47:4f:c0:
2f:d1:fe:64:ab:a3:d1:3a:76:2c:17:3c:51:d6:2c:2f:09:aa:
33:0c:34:5d:41:a7:1e:92:c2:d2:db:50:a3:2e:50:7a:68:2c:
7e:a1:25:7f:48:42:50:f1:c6:ad:6a:37:d6:2e:71:01:a0:00:
29:ad:5b:27:2b:2f:45:bf:45:73:00:f5:fe:88:4f:3e:9f:3b:
89:86:72:66:fd:9d:92:41:60:27:cb:94:aa:fe:dc:e7:88:00:
81:4c:96:59:cc:a6:ed:30:5c:34:e5:7d:21:d8:06:df:df:6d:
23:bd:c8:76:c9:01:b9:76:9d:51:02:34:fb:75:5d:5e:4e:76:
5d:5d:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org