Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313338303936.roa
File: 3130332e3136302e31342e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier: x20e/TAT9N4JtYBQZ1tt8mr1hA5Miv3ktkXzy6qMOV4=
Subject key identifier: 8E:0F:D7:95:EE:7A:BB:7F:C4:06:37:24:E2:35:75:B0:48:F0:DB:86
Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7
Certificate serial: 1C7CDDEA82B634703C1B71756F749B3358DAC403
Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313338303936.roa
Signing time: Mon 15 Aug 2022 05:01:27 +0000
ROA not before: Mon 15 Aug 2022 04:56:27 +0000
ROA not after: Mon 14 Aug 2023 05:01:27 +0000
asID: 138096
IP address blocks: 103.160.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7c:dd:ea:82:b6:34:70:3c:1b:71:75:6f:74:9b:33:58:da:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7
Validity
Not Before: Aug 15 04:56:27 2022 GMT
Not After : Aug 14 05:01:27 2023 GMT
Subject: CN=8E0FD795EE7ABB7FC4063724E23575B048F0DB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:48:84:4f:0d:2b:0e:d6:dd:d0:7f:d7:f6:
81:26:a9:0d:e0:ae:cf:a4:c4:cc:19:3e:82:d8:c6:
f9:e6:d3:a5:98:ea:cc:fc:b2:4d:92:63:ea:8e:4a:
e9:47:e0:0a:55:cf:64:c8:70:c4:39:0e:04:a5:5d:
c7:e1:db:49:d2:21:07:00:fc:db:64:09:1d:25:87:
14:b1:3a:0c:78:fb:37:eb:c5:5c:3d:c2:77:0e:a0:
c1:fc:7d:b3:29:ae:40:15:f4:b3:ee:32:9b:ba:d2:
5e:70:e6:98:d3:fd:47:79:9c:6f:f7:cd:a8:38:3f:
46:43:28:f9:03:5b:e4:f7:f3:26:86:53:6b:f3:94:
33:df:d7:aa:67:fa:d7:a6:df:b9:0b:1d:7b:13:97:
01:aa:fe:c4:8a:ae:3d:82:19:91:6f:ba:46:2a:1d:
3c:4e:57:d6:0f:a5:d4:af:19:4d:d1:e5:6f:a3:49:
f0:ba:66:9e:6e:72:3c:92:34:55:17:04:a7:bf:88:
e6:88:ca:a0:ca:7e:43:dd:7d:6e:fd:19:15:94:d7:
75:80:35:ae:58:08:a4:c1:64:a0:67:d1:4e:52:3e:
a4:0e:14:0b:0f:a8:c7:88:aa:f9:af:90:25:b7:d6:
8a:c4:c7:d4:1b:59:e9:2e:b4:38:3f:3b:8f:ce:74:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:D7:95:EE:7A:BB:7F:C4:06:37:24:E2:35:75:B0:48:F0:DB:86
X509v3 Authority Key Identifier:
keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31342e302f32342d3234203d3e20313338303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.14.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8d:15:f5:e7:ef:50:6c:17:7d:3b:df:8b:f6:1e:4b:df:7c:
f9:bc:83:d3:35:03:1a:5d:29:d8:93:13:83:73:32:e6:29:07:
7f:b6:07:24:c2:27:89:5e:fa:b1:05:87:11:16:1c:0a:67:eb:
47:6e:42:66:de:43:9d:a7:09:85:64:5e:05:d7:c5:e1:3f:50:
55:59:1e:71:1e:a5:c8:89:5e:6c:bc:c0:81:b9:aa:2d:b2:f3:
a3:95:be:de:b5:be:5b:84:fd:63:35:41:b8:14:6b:8e:ec:66:
fa:4c:b0:02:14:8d:8b:0b:58:e6:44:36:67:d4:15:41:e0:f6:
5f:e7:93:13:18:a4:29:7c:d0:52:63:1d:0a:36:de:cd:05:d0:
ca:1f:bb:2a:f0:76:9c:7b:48:74:61:e3:ad:08:a7:3a:f1:ce:
79:f5:69:ca:ba:9f:9c:50:09:c4:3f:bb:24:a9:3b:5f:86:6e:
46:37:94:6e:ec:16:20:ab:55:d8:08:64:6f:a9:b2:31:5f:f4:
7f:c7:a3:ba:36:0a:98:e2:66:8e:b8:9d:79:30:36:ef:cd:97:
89:34:f0:17:f9:1f:9d:8c:4b:69:c2:2b:36:c2:08:5d:29:c9:
c8:6c:43:89:88:ff:1c:f0:3e:08:5c:c6:7b:e7:bc:a3:a1:3c:
cb:e4:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:35 2025 by rpki-client