Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313439333437.roa
File: 3130332e3137392e3231392e302f32342d3234203d3e20313439333437.roa (raw, json)
Hash identifier: Nra94mvPylLj6ZtKcYgFX/Oa7RUupDh6+pRH7qztgko=
Subject key identifier: 3A:E7:F4:E3:72:32:93:F0:21:8D:4D:21:D6:03:19:22:45:EF:F8:50
Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial: 513AFB42B5F20D75137EB05A1FDE0CD9042659EB
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313439333437.roa
Signing time: Sat 11 Feb 2023 09:00:01 +0000
ROA not before: Sat 11 Feb 2023 08:55:01 +0000
ROA not after: Sat 10 Feb 2024 09:00:01 +0000
asID: 149347
IP address blocks: 103.179.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3a:fb:42:b5:f2:0d:75:13:7e:b0:5a:1f:de:0c:d9:04:26:59:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
Validity
Not Before: Feb 11 08:55:01 2023 GMT
Not After : Feb 10 09:00:01 2024 GMT
Subject: CN=3AE7F4E3723293F0218D4D21D603192245EFF850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:18:c9:72:aa:a1:29:2f:08:9e:79:dc:0b:
69:9c:ff:91:25:c7:19:dd:f3:03:30:c8:b4:fb:d5:
36:c0:e1:df:ad:d1:23:40:ed:d9:d2:da:0e:fe:fd:
c6:73:91:60:2d:5a:76:2f:3e:df:de:d4:28:b9:0f:
0f:f3:36:25:d4:7c:e4:b3:3b:dc:f0:45:3a:77:98:
7c:03:2e:96:ed:c5:f0:ea:13:9b:4d:e8:b8:6b:57:
5b:35:ba:1a:ce:95:7a:e3:eb:50:c7:28:15:17:fa:
59:3e:a0:30:9b:4d:2c:70:fb:2f:b4:d8:49:b5:b3:
4e:2e:ee:a7:86:16:58:ac:6e:0a:35:92:00:46:36:
c7:b7:c9:13:9a:a8:fb:10:49:6c:67:1a:ba:75:49:
93:49:a4:70:9f:d5:4d:8a:32:16:6e:44:21:6d:83:
30:ec:6c:08:20:ca:3e:41:dc:fb:03:6e:b0:4d:89:
1e:22:4d:16:61:de:64:89:63:97:30:29:2e:29:e8:
85:01:88:9e:18:3b:d4:58:33:b6:4c:39:07:95:d8:
e6:6d:1a:de:0e:ea:a8:91:10:41:e1:2d:53:bf:e7:
9e:96:1f:5b:d3:41:72:f2:80:87:4d:c4:2e:08:85:
d5:0b:15:69:68:a4:4f:01:ef:40:19:9f:a2:50:43:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:F4:E3:72:32:93:F0:21:8D:4D:21:D6:03:19:22:45:EF:F8:50
X509v3 Authority Key Identifier:
keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231392e302f32342d3234203d3e20313439333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:00:a4:9c:86:18:3f:9e:4e:79:90:bd:fc:4f:86:1c:b6:24:
c6:98:32:ad:b4:ee:72:a3:6a:58:a8:40:20:02:24:6f:5c:a8:
1d:ad:af:b6:1d:1b:27:b0:42:99:58:4c:0c:17:0b:64:a7:95:
77:b7:6d:48:6d:10:83:30:e2:78:3e:f7:96:0a:1c:54:79:24:
aa:0e:39:09:73:0c:54:21:61:26:db:04:95:32:cb:9d:7e:cc:
ed:5e:56:48:31:62:68:f2:6f:a1:32:f1:dd:bf:e1:66:a0:a1:
7b:bf:a5:5c:76:1a:12:9d:96:02:8d:18:75:0d:d5:dd:4f:3d:
e7:46:29:c4:a0:87:5c:29:1a:f1:f1:79:85:06:bb:e9:8e:7f:
87:2a:ea:0c:35:ed:13:1d:36:27:37:95:7f:c6:d6:01:04:a3:
6b:98:ec:91:2b:04:cd:79:f2:27:43:38:f1:2b:6d:40:75:74:
4e:2c:38:6d:ac:09:89:f7:c5:39:a5:d9:a0:84:10:1b:47:e8:
96:c4:51:b2:57:38:55:50:2a:3d:cf:26:e4:f1:be:dd:61:4e:
fc:b9:f9:ed:36:0a:a5:bd:b9:ea:ee:84:c1:04:de:fd:da:bb:
7f:79:ae:0f:dc:fd:80:be:7a:74:29:87:f8:37:e5:ab:9f:1b:
59:f8:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org