Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313338313238.roa
File: 3130332e3138342e31372e302f32342d3234203d3e20313338313238.roa (raw, json)
Hash identifier: qpp/bYvGhSlhMQuAagsOHUbInl+kJpY/eUBAPR+ZLUQ=
Subject key identifier: 98:A9:07:B9:97:0D:8B:0C:54:9F:E5:CB:B5:D7:4B:F6:99:D3:21:C6
Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial: 407385496990D6EF86C0A8DBCB4A9234D45C8D69
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313338313238.roa
Signing time: Sun 05 Mar 2023 16:00:01 +0000
ROA not before: Sun 05 Mar 2023 15:55:01 +0000
ROA not after: Sun 03 Mar 2024 16:00:01 +0000
asID: 138128
IP address blocks: 103.184.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:73:85:49:69:90:d6:ef:86:c0:a8:db:cb:4a:92:34:d4:5c:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Validity
Not Before: Mar 5 15:55:01 2023 GMT
Not After : Mar 3 16:00:01 2024 GMT
Subject: CN=98A907B9970D8B0C549FE5CBB5D74BF699D321C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:3d:f2:fd:18:a9:23:87:50:10:07:5d:a5:
92:a1:47:ba:ba:35:bd:b2:1e:9e:7d:ae:b9:b4:d8:
28:dc:bd:7d:b3:a1:c8:a8:a9:2d:f6:94:12:c4:b4:
6a:bc:ba:ac:de:73:ea:3e:16:ef:8b:3e:b9:6a:30:
be:5d:97:17:37:71:bd:1c:ae:a9:f9:c7:e2:5f:37:
61:4b:b4:ba:b9:fb:bd:0d:50:07:85:f0:6c:51:00:
57:2a:ea:de:85:d3:f0:3a:5b:62:10:61:eb:d8:38:
46:23:8c:78:75:25:69:a8:15:37:e1:47:c3:f4:82:
c5:d4:cf:98:61:f4:b8:57:35:db:c5:9b:93:b6:02:
3a:90:9e:06:55:79:0c:21:97:65:d4:12:2b:28:c8:
b0:cc:49:04:60:02:29:7a:a5:45:ed:97:97:f9:11:
2a:96:fb:c3:67:b5:8a:a3:45:f8:39:94:c4:df:d9:
1e:b9:1a:40:ea:49:73:f3:2b:72:87:4a:8b:8d:f2:
f1:7c:04:6a:05:55:ac:22:41:ae:e7:9c:84:81:fc:
98:82:89:57:6a:ea:24:59:1c:d2:2b:96:81:6e:9e:
b4:2a:b8:75:bd:74:72:1a:1e:14:0d:b0:0f:2f:03:
03:ef:b0:91:9b:4d:38:23:c7:bc:e5:94:0c:5b:53:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:07:B9:97:0D:8B:0C:54:9F:E5:CB:B5:D7:4B:F6:99:D3:21:C6
X509v3 Authority Key Identifier:
keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313338313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:07:36:4b:33:c5:c4:22:3f:bf:0e:c6:a5:f2:60:08:67:fd:
e7:01:26:74:4b:f3:32:e9:61:e1:6e:bc:cf:22:4e:8a:05:60:
19:1d:a8:e7:34:25:1f:98:e5:56:f4:92:35:f3:ee:5d:f1:c5:
b7:79:61:8f:4e:36:32:97:1d:85:45:79:60:3c:d8:62:7d:ef:
c7:4c:c2:32:23:13:75:d2:06:17:25:9a:05:6a:bc:7b:0a:71:
29:d0:5e:5c:6e:7f:ed:7c:2a:21:2c:5c:11:c3:bb:0c:a5:c7:
46:69:08:17:c9:28:d2:f4:1d:60:eb:26:cb:75:30:bb:0f:0a:
80:fa:95:db:9d:a9:22:e8:19:a3:63:4f:ac:db:e5:6c:8f:25:
da:23:90:94:d4:cf:ee:80:63:f5:c4:38:c1:fb:d3:35:22:ff:
3e:9a:d5:c6:6f:15:88:3f:5a:51:e6:3a:11:74:a5:8c:65:f0:
07:32:a6:34:6a:94:e1:2e:63:f3:53:5f:28:16:59:91:66:18:
ea:d1:2e:a0:ce:5d:cc:fb:0d:3a:5b:a4:d8:3d:4c:df:f6:26:
18:c6:ba:09:1b:20:29:5b:6d:f9:b0:56:dc:af:65:0b:1a:f4:
68:bd:99:10:06:77:a4:fc:1c:79:2c:e8:81:55:6f:96:7d:66:
a4:86:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:05 2025 by rpki-client