Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa
File: 3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa (raw, json)
Hash identifier: WhlCR9gfw3+Th986as1QJPv07zJUUE/VQfTrke1W0u8=
Subject key identifier: 04:AA:00:1F:75:F4:48:34:69:78:7A:CB:1E:B9:57:4F:55:B8:E4:BD
Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial: 1EFC1D1403596793C920AEC9B632E529E9C2C3DF
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa
Signing time: Wed 15 Feb 2023 15:00:02 +0000
ROA not before: Wed 15 Feb 2023 14:55:02 +0000
ROA not after: Wed 14 Feb 2024 15:00:02 +0000
asID: 149373
IP address blocks: 103.180.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fc:1d:14:03:59:67:93:c9:20:ae:c9:b6:32:e5:29:e9:c2:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Validity
Not Before: Feb 15 14:55:02 2023 GMT
Not After : Feb 14 15:00:02 2024 GMT
Subject: CN=04AA001F75F4483469787ACB1EB9574F55B8E4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:c1:2e:be:6f:5e:2b:cf:eb:29:2c:b3:77:
7e:d4:85:c0:c1:28:8e:48:4e:25:f5:68:18:a4:c6:
72:0e:04:a5:28:2c:7a:e6:9c:ba:f0:5a:6a:0e:96:
22:f0:b2:b8:e6:a8:7c:bd:0b:71:cb:53:17:68:16:
e1:1c:28:f5:ac:37:9b:47:40:70:0e:90:48:4c:bf:
a2:f0:3b:ec:4e:65:d1:34:80:70:a5:80:a1:3b:8d:
0b:27:07:d9:25:b9:ab:4e:35:c6:a2:8e:f7:0b:62:
01:9e:a3:08:f6:d1:cc:5d:96:f7:1e:bf:42:66:1f:
3b:2f:25:05:aa:e9:79:11:d8:f2:d2:a0:c2:ef:da:
cb:43:c3:58:c3:f0:13:fc:20:a1:d1:2b:f0:55:39:
f9:7b:46:38:6d:3b:0d:f9:f0:55:b4:48:46:49:a2:
37:0e:06:3d:66:56:23:26:88:44:47:ad:ff:05:68:
a9:76:8f:e0:5a:14:5f:58:98:f6:6a:23:95:1c:87:
cd:88:e5:81:cf:62:44:50:b4:8f:32:b1:e4:41:5f:
48:bb:96:2c:de:a0:53:db:22:21:60:e1:af:97:c2:
6a:a2:2f:8d:28:72:2b:2e:9c:bc:00:0d:09:d2:62:
7e:80:d3:fe:90:4c:97:f4:96:03:43:4e:f1:74:14:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:00:1F:75:F4:48:34:69:78:7A:CB:1E:B9:57:4F:55:B8:E4:BD
X509v3 Authority Key Identifier:
keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3233203d3e20313439333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:fb:17:ab:8a:52:47:cf:45:c4:b1:f0:d8:a9:bf:f6:9d:ad:
42:da:84:3a:fc:8e:ec:79:f4:27:24:cc:17:53:cc:ce:e4:65:
b0:bc:a9:09:9a:71:35:82:95:fd:33:e1:38:55:93:37:cf:ec:
89:b9:7c:c9:aa:90:e8:a7:05:67:dc:5d:48:b5:46:53:cc:ed:
6d:3d:18:01:40:70:6b:16:f4:78:65:d3:a5:ee:c2:ea:ff:3e:
1d:82:6f:7c:d5:42:be:37:7b:76:4f:3d:e6:f2:4f:59:28:17:
46:1c:7f:d9:1c:f9:2f:45:70:33:b2:6c:88:d7:bc:95:7e:86:
d0:bd:93:e2:39:47:c4:7d:95:53:99:4f:fd:dc:19:bc:1c:55:
70:cf:47:7c:68:33:ef:83:26:c3:eb:a1:ba:88:a9:2d:10:89:
5b:e7:39:99:86:f0:88:42:a9:23:11:97:40:b8:3d:64:c6:47:
82:d9:aa:fa:e6:af:f5:8f:e1:c5:db:48:05:2f:2b:29:d3:ea:
1d:79:b6:44:6d:9e:23:ce:eb:24:51:07:5c:71:83:b8:c8:a2:
ce:e3:36:dd:e3:ca:70:c5:87:02:db:ed:23:ba:ac:f5:ed:a2:
cb:83:b4:e4:ae:ab:83:d1:e4:07:f4:33:50:c2:ba:78:0d:0f:
e2:3c:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org