Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/3130332e38392e3234322e302f32332d3234203d3e20313530393133.roa
File: 3130332e38392e3234322e302f32332d3234203d3e20313530393133.roa (raw, json)
Hash identifier: y8dj/VxFoNM+SdIOWI00FA+RF2rbq/VHn5uJEEwJqk4=
Subject key identifier: E6:0D:01:66:55:88:47:CE:CE:42:E0:52:DF:CB:70:41:59:F5:86:BA
Certificate issuer: /CN=E377371E82C6C53C7A5796B49B085190AFB64B4C
Certificate serial: 33F2468C4A424F3B484028DE6A614BC5CF7A8BB9
Authority key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/3130332e38392e3234322e302f32332d3234203d3e20313530393133.roa
Signing time: Wed 08 Mar 2023 13:57:03 +0000
ROA not before: Wed 08 Mar 2023 13:52:03 +0000
ROA not after: Wed 06 Mar 2024 13:57:03 +0000
asID: 150913
IP address blocks: 103.89.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f2:46:8c:4a:42:4f:3b:48:40:28:de:6a:61:4b:c5:cf:7a:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C
Validity
Not Before: Mar 8 13:52:03 2023 GMT
Not After : Mar 6 13:57:03 2024 GMT
Subject: CN=E60D0166558847CECE42E052DFCB704159F586BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:40:9c:2f:e8:24:f3:fe:7c:56:65:6a:9e:
21:2d:07:f8:e3:1a:cc:2d:41:a7:3e:16:d8:b2:56:
7f:8b:94:b2:5d:e2:ea:5c:53:9d:57:f7:ea:9f:ff:
b5:bb:98:0f:04:8d:6f:b9:8c:3a:fb:ca:6b:12:84:
c3:5b:8e:c7:4d:99:b0:98:e2:70:dd:d8:a0:bd:a1:
cf:93:9b:14:cb:34:f2:60:ef:e3:4a:8d:ba:6c:16:
bd:9c:3b:20:ad:1f:be:dc:0f:ab:7c:a9:58:09:3d:
65:f4:9b:8d:e1:1f:b5:00:2a:00:37:32:a4:59:9e:
d4:e9:25:b3:65:d8:af:d7:8a:c8:0c:d2:22:9a:ea:
cf:4d:26:7a:24:ac:41:b3:2a:89:3f:30:8e:cf:5b:
65:48:33:31:cd:15:56:29:2a:44:66:b7:e8:ac:5e:
d2:49:85:34:82:7d:3e:9c:13:3e:fe:09:f4:88:17:
f1:e3:9b:03:f6:60:1a:4f:5e:05:76:e2:8e:c3:34:
9b:a7:70:c5:53:78:e5:c0:fb:c1:57:44:21:51:ff:
f3:8c:14:1a:a2:dc:e6:81:b2:0c:9f:08:42:51:90:
f3:c5:1a:83:4d:48:df:76:35:8e:43:53:56:1b:7a:
f3:04:b6:cb:6a:5f:2f:26:44:30:fb:c2:f3:6e:0d:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0D:01:66:55:88:47:CE:CE:42:E0:52:DF:CB:70:41:59:F5:86:BA
X509v3 Authority Key Identifier:
keyid:E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/3130332e38392e3234322e302f32332d3234203d3e20313530393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.242.0/23
Signature Algorithm: sha256WithRSAEncryption
92:ef:15:a9:e7:60:2b:19:da:8e:9d:d4:79:80:c6:67:7e:21:
bb:0e:8d:77:5f:aa:04:19:50:45:5e:9f:96:b9:80:7b:e1:d4:
3c:8f:7a:6d:ec:bc:5e:92:c4:60:20:47:31:46:c8:d5:21:87:
c9:5e:7a:3f:a8:37:ad:af:d3:a6:f9:69:81:fd:c7:c4:64:06:
be:c0:cd:0a:e4:0a:f3:d6:66:df:e1:30:be:06:70:fc:2d:96:
3f:25:c0:b7:bb:ff:a7:f0:bc:80:6c:a8:7f:fe:b5:8f:6b:0e:
e1:47:40:57:e2:e7:34:34:30:c0:09:8a:dc:50:28:ab:14:9d:
9b:91:3d:c7:0e:ba:5e:cf:42:b0:35:46:ae:a8:3d:cb:90:03:
39:dc:ce:58:3c:a1:da:71:d8:1a:18:0a:bd:3a:2e:2d:ce:27:
71:c6:d3:15:0f:5b:7b:80:4e:a2:c0:26:d7:8a:e2:d2:94:35:
0d:2a:7b:0b:10:85:d6:e0:d2:cb:95:6b:17:c9:4d:cf:0b:dc:
64:23:17:16:38:b5:de:cd:cf:86:86:9f:6c:3d:1b:0d:5d:1e:
be:c8:6f:d7:9e:b7:86:ff:e4:ab:01:b6:96:ab:0e:da:db:bf:
92:13:2e:ef:84:92:69:a4:36:54:92:28:d2:a5:a7:a9:a1:9a:
30:fa:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org