Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32322d3232203d3e203633343838.roa
File: 3130332e3233332e3130382e302f32322d3232203d3e203633343838.roa (raw, json)
Hash identifier: GnATSsWQGwL+zOZvo/oy8/gIasAH0riWiKCS/HcjMCU=
Subject key identifier: 85:C7:DC:A2:DF:3C:18:FF:12:61:6E:80:E2:5F:5F:78:01:B9:25:EF
Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial: 119D5D53037F887C38BB6A0D24B5F21F25A99E23
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32322d3232203d3e203633343838.roa
Signing time: Wed 16 Nov 2022 12:00:01 +0000
ROA not before: Wed 16 Nov 2022 11:55:01 +0000
ROA not after: Wed 15 Nov 2023 12:00:01 +0000
asID: 63488
IP address blocks: 103.233.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9d:5d:53:03:7f:88:7c:38:bb:6a:0d:24:b5:f2:1f:25:a9:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Validity
Not Before: Nov 16 11:55:01 2022 GMT
Not After : Nov 15 12:00:01 2023 GMT
Subject: CN=85C7DCA2DF3C18FF12616E80E25F5F7801B925EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:b2:f9:11:43:0b:18:61:6a:b5:36:3c:4d:
b7:ee:54:7c:81:34:85:57:fd:ca:89:9b:76:30:e2:
31:ef:e3:68:e2:bf:dd:08:80:0a:92:78:64:45:af:
41:c7:f6:f7:7b:d4:91:d7:bf:5e:c6:31:12:4b:71:
0e:32:24:dc:dc:41:24:b8:e0:c9:0d:8a:d3:e6:b5:
1e:67:10:66:d4:ff:b7:c2:d4:d5:19:8f:fa:ea:ba:
9f:27:c4:70:e9:6c:b1:a0:a5:28:4a:57:df:6b:56:
cb:2a:9a:99:c0:22:b7:f4:d5:52:f6:c9:73:4c:ec:
c1:7c:80:d7:c6:c9:c5:47:95:b5:85:49:6a:7a:31:
2f:82:71:4a:3f:58:d1:00:67:9f:74:05:cb:26:e5:
cb:dc:43:07:e4:52:3c:11:58:52:29:e7:ab:02:75:
21:ce:0d:54:c4:a6:47:3e:d4:05:21:c0:10:77:cf:
f2:24:f3:5a:3d:52:3c:9a:29:cf:77:00:6a:06:1f:
92:8f:97:04:1b:30:a6:3b:26:80:47:74:86:3f:c7:
ad:2e:49:87:99:e1:e8:65:67:c6:1a:71:42:93:32:
fd:18:75:a0:8e:53:c0:38:a5:df:ab:c1:be:eb:52:
22:cb:6c:14:9e:90:17:64:e1:08:6a:ed:e7:1e:0d:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:DC:A2:DF:3C:18:FF:12:61:6E:80:E2:5F:5F:78:01:B9:25:EF
X509v3 Authority Key Identifier:
keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32322d3232203d3e203633343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
53:1f:0b:15:2b:48:ee:83:2d:67:8a:89:ab:8b:70:c6:ef:6d:
c3:a5:70:4b:e2:eb:bb:30:12:7d:a6:1a:9b:8b:22:3f:a9:ec:
44:58:49:03:b1:67:f2:2f:f3:0d:a7:d9:05:88:32:fe:d7:22:
f2:ab:92:7d:8b:0d:10:86:ca:67:df:4d:57:e8:03:41:14:34:
cf:7a:57:a5:33:90:7c:77:0a:e8:f5:11:89:b2:76:62:36:a7:
b7:8e:69:5c:25:84:2d:45:e6:ce:ae:d9:b8:b4:b7:2a:f8:11:
73:51:b2:42:c0:5b:29:b5:c1:19:2e:96:e2:3a:51:4c:34:f5:
f5:2d:ef:d7:d4:d9:b1:8b:70:2a:1e:96:b2:33:88:77:ff:9a:
12:88:74:ce:9d:b2:07:4a:d4:7e:e0:d5:e0:b8:ae:20:5e:4f:
47:6f:b2:f5:88:9f:94:11:cf:ac:c8:46:c7:3f:31:92:dd:57:
91:e2:d2:db:f3:35:bd:0f:7b:1b:c2:74:20:af:9f:a3:d4:3c:
92:98:f1:fc:b2:47:91:a4:16:be:cb:6d:22:e3:76:23:ac:60:
97:74:bf:9e:27:d6:61:79:77:f3:4d:ac:4f:7a:7e:72:07:cc:
4b:33:9f:72:a0:9c:45:e9:28:a1:8f:9b:80:85:34:50:6e:96:
c9:a6:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org