Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e2039343232.roa
File: 3130332e3138342e31372e302f32342d3234203d3e2039343232.roa (raw, json)
Hash identifier: aCGUWM0SJXM5YwjGkINrQM+PmZj+LnGCuSl4VEUX+fU=
Subject key identifier: D7:62:CC:2A:9C:98:6A:32:EF:1E:4A:A5:B5:E7:91:05:F6:79:05:A7
Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial: 6EC622D40787FE593D5978D9D2728D90007B8EFB
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e2039343232.roa
Signing time: Wed 23 Mar 2022 13:40:14 +0000
ROA not before: Wed 23 Mar 2022 13:35:14 +0000
ROA not after: Wed 22 Mar 2023 13:40:14 +0000
asID: 9422
IP address blocks: 103.184.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:22:d4:07:87:fe:59:3d:59:78:d9:d2:72:8d:90:00:7b:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Validity
Not Before: Mar 23 13:35:14 2022 GMT
Not After : Mar 22 13:40:14 2023 GMT
Subject: CN=D762CC2A9C986A32EF1E4AA5B5E79105F67905A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:e9:70:5a:e8:32:4f:2f:f0:74:4b:4f:d8:
71:b9:a1:73:44:72:e9:a8:23:79:63:04:e3:0f:27:
ad:67:de:9d:d9:bb:dd:09:35:b4:c4:2f:8a:67:b6:
93:56:7e:9d:7f:31:e6:f9:c3:20:42:d4:63:1e:1c:
45:1e:cb:cf:39:1b:f9:37:93:3e:10:98:dc:29:77:
c3:fd:08:99:f0:b4:3b:cd:6d:f6:a6:b7:30:e2:14:
3b:00:97:d0:cf:e8:db:74:90:31:94:3c:d0:aa:4a:
07:fe:68:68:40:ea:a2:be:4c:64:09:a7:0a:8e:24:
62:57:3c:23:d9:d6:2d:55:ee:87:58:f1:e0:a2:e5:
57:86:2b:81:17:e2:d5:ba:74:33:82:12:71:bf:9d:
41:de:7f:99:a7:41:48:c3:5e:e5:52:f9:a2:97:70:
f2:22:f1:1c:e8:69:ef:d0:3b:f3:80:6c:86:38:16:
fb:9f:00:15:a2:3a:17:bb:2a:36:fc:5f:6c:f7:b1:
60:0e:40:a2:40:9b:cf:b3:b3:84:97:ee:00:03:bf:
41:18:d2:6b:9c:28:2a:ce:15:7e:0f:80:93:e8:fd:
54:51:45:20:ca:11:c5:d0:91:f3:c5:95:c4:fc:4e:
d2:88:66:33:87:3f:7d:56:7b:50:84:28:81:ba:09:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:CC:2A:9C:98:6A:32:EF:1E:4A:A5:B5:E7:91:05:F6:79:05:A7
X509v3 Authority Key Identifier:
keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e2039343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.17.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8f:79:63:1d:d6:38:cf:8d:c2:c9:c3:7f:30:a6:ce:3b:b9:
7c:41:57:5a:e5:39:63:44:2b:9f:8b:c5:9c:da:d1:dc:c9:88:
b0:ff:50:b2:3f:3f:40:56:67:c8:c9:ec:f4:29:71:7d:10:70:
8b:81:0f:51:0d:8f:35:f2:c7:53:36:9e:56:b1:eb:a3:75:a0:
71:76:b5:fc:32:2b:e0:5f:c8:b2:f3:dc:ef:79:83:b3:af:5e:
25:5b:9a:27:0d:08:c0:70:54:5e:8e:8b:4e:38:00:3c:c8:58:
ac:c0:f5:d7:d3:c7:be:08:7b:0b:49:c8:e4:a5:48:2d:54:19:
98:c8:fc:54:28:6a:80:42:9e:68:90:3f:2f:4c:44:d0:07:20:
2a:42:28:de:f0:22:71:b1:32:0b:94:d8:b3:ed:5c:d9:d5:5c:
1d:c7:2f:1c:eb:b5:c4:9f:49:ae:82:aa:2a:ed:aa:7b:72:46:
a8:c8:a2:91:08:e7:b3:5e:29:a8:07:af:50:78:7e:0a:09:9b:
b5:e6:90:40:9b:89:78:2c:f9:52:b4:2a:e4:86:af:4b:ce:ea:
b7:db:4b:33:60:8e:c1:d8:50:29:3e:f3:b8:1d:d6:94:5f:87:
a5:51:e9:30:d9:4c:0a:e0:36:a3:5c:f3:42:c9:4e:a5:4e:9c:
23:75:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:25 2025 by rpki-client