Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313338313331.roa
File: 3130332e3132352e31332e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier: 5yqmZdISvXkSn7qr1VyKT2zHVzV3auB3HwDsPc9flpU=
Subject key identifier: E5:25:92:CE:CB:83:F4:DE:5A:61:7A:C0:66:0C:C7:E1:42:74:FC:38
Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Certificate serial: 2DC7773E27B15EB4D54D73796F451246CC98E5F4
Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313338313331.roa
Signing time: Tue 29 Aug 2023 02:55:30 +0000
ROA not before: Tue 29 Aug 2023 02:50:30 +0000
ROA not after: Tue 27 Aug 2024 02:55:30 +0000
asID: 138131
IP address blocks: 103.125.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c7:77:3e:27:b1:5e:b4:d5:4d:73:79:6f:45:12:46:cc:98:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Validity
Not Before: Aug 29 02:50:30 2023 GMT
Not After : Aug 27 02:55:30 2024 GMT
Subject: CN=E52592CECB83F4DE5A617AC0660CC7E14274FC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:64:d3:76:b7:d9:a1:30:58:cb:9b:f6:ba:
25:34:99:5b:d7:11:a7:6d:20:35:31:b1:43:d4:c4:
30:a5:1c:c1:2a:a2:47:bf:68:3f:ca:49:df:5c:cd:
e1:de:80:1e:78:a9:19:4b:e3:50:80:ae:23:6e:7b:
06:2d:19:e4:41:60:22:26:6f:2d:80:f1:ba:be:48:
2b:e9:89:c4:60:66:1e:39:da:52:2a:86:0e:48:e5:
45:0a:12:31:2f:24:35:68:ee:8b:0b:a6:54:7f:80:
6c:a9:35:31:12:5b:f4:b8:36:d2:28:a6:44:b2:38:
cc:76:6f:36:1b:28:95:4b:bf:55:ca:0f:40:71:82:
c9:60:68:31:13:ba:f1:eb:89:69:02:ab:3a:d5:c9:
8f:e1:a2:c3:9d:80:bc:3e:25:5e:31:71:10:8d:61:
6c:12:be:6a:1c:60:cd:22:d3:6b:ad:5f:eb:73:3d:
b3:46:8f:66:72:76:78:30:e5:d7:9e:56:96:a3:56:
26:1a:65:f0:6d:7f:a5:e8:3e:f6:77:b2:ad:07:72:
36:b9:e5:d3:8a:3a:68:8c:e8:8f:50:03:21:69:97:
e2:8c:04:ad:c9:ee:2f:f6:72:75:d0:97:71:f9:a0:
38:15:f9:87:c6:a0:56:c6:5b:dd:e8:2a:23:f2:87:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:92:CE:CB:83:F4:DE:5A:61:7A:C0:66:0C:C7:E1:42:74:FC:38
X509v3 Authority Key Identifier:
keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313338313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.13.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3e:6b:14:69:e3:7c:1b:ef:92:82:a5:9f:70:e6:18:88:bd:
b2:2b:3b:06:55:5b:39:85:78:99:d0:01:f1:e8:4b:95:e9:ca:
13:78:8c:13:4f:53:06:f7:14:4a:cd:0f:5c:d8:47:94:1c:c9:
65:f6:e4:31:ee:a5:33:c9:44:ff:12:2e:5d:23:c1:8d:62:ef:
5d:d6:09:fe:9e:92:a5:14:4b:f3:e5:b7:5b:fc:97:1e:cb:0f:
12:6c:df:9a:33:73:16:32:d9:c0:23:fe:e7:36:d4:ca:52:36:
02:e2:35:3e:48:be:51:bd:d6:17:a5:e8:3f:65:aa:16:8f:d3:
f7:37:6e:bf:28:34:d0:f5:ce:6a:4a:11:27:14:ae:5a:44:55:
8b:bb:f2:7b:5d:95:ab:d3:fc:c4:a5:5b:ed:a5:3b:55:2a:af:
4c:c2:c1:d5:dc:8c:57:fa:9d:ad:22:45:d5:cf:f7:9f:51:ba:
fc:be:8d:d8:a6:b6:bf:40:58:0f:3b:47:fa:be:39:27:77:aa:
d4:ba:8f:bf:f3:3e:d9:e6:9e:97:9b:65:c5:20:f9:0a:9b:23:
61:ab:16:e5:d3:c1:4d:b5:a9:2c:38:83:b4:bf:2e:88:45:4b:
a4:fd:e5:e9:71:b4:d7:bd:aa:e2:37:b2:36:56:5a:18:45:3d:
fd:96:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:40 2025 by rpki-client