Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313439333437.roa
File: 3130332e3137392e3231382e302f32332d3233203d3e20313439333437.roa (raw, json)
Hash identifier: ad/DbXFQfrsYEbzv5Ows5gNn5qdfmqSRnG/lJlNPuzs=
Subject key identifier: EE:B9:81:18:8B:AE:27:27:58:BC:36:C8:BA:FB:4A:9B:FE:5F:4B:8E
Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial: 68C3402078E465108A436D582B2CBFAB65162D29
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313439333437.roa
Signing time: Sat 11 Feb 2023 09:00:00 +0000
ROA not before: Sat 11 Feb 2023 08:55:00 +0000
ROA not after: Sat 10 Feb 2024 09:00:00 +0000
asID: 149347
IP address blocks: 103.179.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c3:40:20:78:e4:65:10:8a:43:6d:58:2b:2c:bf:ab:65:16:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
Validity
Not Before: Feb 11 08:55:00 2023 GMT
Not After : Feb 10 09:00:00 2024 GMT
Subject: CN=EEB981188BAE272758BC36C8BAFB4A9BFE5F4B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:66:2a:4d:8c:a8:0c:33:c4:db:3a:51:a6:
b1:9f:58:be:2d:eb:cd:55:f8:0e:c6:10:f7:d4:f9:
cc:27:86:df:45:12:4e:1b:67:7f:4b:d9:f4:10:3e:
25:07:4c:fb:23:47:de:c5:66:15:e6:4b:d6:0d:c9:
e5:b8:74:7c:a3:a4:b4:92:8d:53:c5:04:b9:4b:64:
a0:0a:ab:6f:c2:0c:29:0f:66:00:9b:76:f1:12:a1:
88:1a:b1:72:7a:d9:12:79:19:3a:87:22:c6:6b:be:
a1:06:86:b6:bb:4a:71:96:52:9f:d6:26:14:34:2c:
65:b9:9b:28:ae:41:38:cc:34:f4:1d:85:9b:cf:84:
18:b6:d6:53:64:79:6d:c9:ba:d5:0c:51:ea:2b:41:
57:be:ba:0f:56:b0:48:8d:82:39:4f:98:ac:c1:b4:
f7:65:97:54:0a:07:c9:eb:a4:83:94:fa:67:3f:b9:
93:f1:5f:14:c4:7a:cd:63:85:39:9c:af:54:36:27:
8a:67:6d:43:de:63:29:7b:a1:c6:fa:85:fc:31:6b:
57:a7:dc:5c:ab:c1:e6:53:8e:e4:85:1e:3b:f0:82:
c8:f9:81:64:49:33:71:c0:3e:40:34:d1:da:a4:de:
63:7e:37:a2:e2:90:3d:f7:a4:bf:bd:1e:cc:00:8f:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:81:18:8B:AE:27:27:58:BC:36:C8:BA:FB:4A:9B:FE:5F:4B:8E
X509v3 Authority Key Identifier:
keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313439333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:e5:3a:b2:f3:e1:0e:d6:9f:ae:cb:2f:7b:53:bf:eb:d2:23:
9e:c3:72:48:d5:32:7d:14:e8:55:32:56:f0:a8:30:49:c2:a4:
29:28:ba:da:20:8d:d9:e6:72:4a:1d:e7:6e:76:3a:8b:6f:78:
5d:a9:29:4c:c4:64:7e:a5:26:b8:f0:59:7b:04:0b:30:56:93:
6a:02:19:bf:93:bb:43:20:6b:cf:90:25:42:57:47:b1:b0:f8:
ba:dd:f1:ef:3d:00:56:e3:e2:a2:a0:b2:2f:b0:b4:0c:12:b8:
a6:96:26:d6:8e:0e:95:0c:ed:f3:37:23:e2:90:76:fd:7f:23:
b0:08:d6:17:ce:8a:d2:fa:e1:f9:2a:93:9d:89:5f:c5:b1:9c:
73:8e:6e:93:90:11:d5:84:f1:a2:c7:67:28:e8:fd:14:a4:7f:
51:86:ad:36:bb:15:82:d0:fd:97:6a:f3:bf:eb:6a:fc:94:f6:
80:c8:e0:41:26:07:dc:c1:f1:f1:1b:03:40:27:e7:ab:59:11:
14:2b:78:b0:70:74:66:35:55:6e:f4:e4:af:c9:37:50:13:96:
52:39:1e:a3:47:ed:08:dd:1a:87:21:0f:5f:10:37:7e:bc:47:
1d:36:64:c2:9d:50:59:76:01:b2:41:37:48:b2:03:81:71:06:
7b:96:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org