Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa
File: 3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa (raw, json)
Hash identifier: 3xwAp+BUFMcJuFMkKB8dzeb8310sDp/13eirYmCq+ns=
Subject key identifier: 38:A2:E8:22:3A:67:A3:A5:46:23:66:DE:BF:AB:21:94:FC:66:F2:95
Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial: 07C528AF536914C1D9450BF5E6AD866AAC9D7A80
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa
Signing time: Wed 05 Oct 2022 03:46:52 +0000
ROA not before: Wed 05 Oct 2022 03:41:52 +0000
ROA not after: Wed 04 Oct 2023 03:46:52 +0000
asID: 138072
IP address blocks: 103.123.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c5:28:af:53:69:14:c1:d9:45:0b:f5:e6:ad:86:6a:ac:9d:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Validity
Not Before: Oct 5 03:41:52 2022 GMT
Not After : Oct 4 03:46:52 2023 GMT
Subject: CN=38A2E8223A67A3A5462366DEBFAB2194FC66F295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:93:de:2a:3b:d9:5f:a5:8b:18:80:d0:ec:
be:15:9e:b5:27:31:54:af:90:6e:95:b5:14:79:02:
41:96:d7:8f:4f:f4:2f:c2:7f:1e:4b:9d:ab:ce:9b:
38:1e:ad:aa:63:8c:08:23:e2:d7:0f:75:d6:be:22:
23:c6:da:ee:c9:90:d4:10:b1:94:b3:86:a8:0a:72:
d5:81:11:8a:ed:db:1f:f0:c2:ee:95:95:cb:5e:55:
60:81:cd:3f:f0:28:cb:49:6c:7c:61:4f:03:eb:52:
69:76:19:2d:62:d4:4e:88:11:95:8e:ec:29:15:c6:
5c:f0:1a:f3:40:6f:14:c3:17:c3:80:3e:45:9e:24:
f4:82:fb:b9:4b:d9:a9:ca:30:db:c3:e9:db:b7:b5:
c0:e5:fc:8d:79:49:3a:c3:45:26:19:8b:77:16:87:
c6:36:41:8c:22:b2:9e:da:15:b4:e9:d6:81:d5:82:
be:d1:81:48:23:fe:45:ce:6c:e3:59:54:bf:a7:87:
6f:9b:86:81:13:8d:30:68:37:06:58:1d:c5:0f:fe:
cb:c6:91:f9:f4:86:d6:0f:7a:8d:b0:43:58:ac:ae:
fb:8b:cf:62:62:4a:61:71:63:56:47:50:48:df:8c:
1e:f6:c6:24:15:63:be:68:bd:e7:ce:96:ab:63:54:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:E8:22:3A:67:A3:A5:46:23:66:DE:BF:AB:21:94:FC:66:F2:95
X509v3 Authority Key Identifier:
keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.120.0/22
Signature Algorithm: sha256WithRSAEncryption
37:54:a9:9a:13:00:f6:d4:bf:32:c8:7f:cd:80:df:39:f8:c8:
f2:13:15:37:85:69:cb:94:09:03:5f:7a:e6:ec:17:6b:a9:e8:
f3:71:7f:f9:43:5e:8d:56:95:c0:d7:57:74:2f:55:95:4b:cf:
e6:5f:60:29:eb:e6:b0:b0:6a:c0:66:2f:3f:f8:ac:15:bc:f2:
77:ce:9d:11:e8:9a:8d:32:d1:eb:88:55:78:f8:ff:1d:fd:b3:
b0:d3:49:81:32:79:e6:fc:ec:22:76:75:9f:3a:49:16:05:b3:
49:ea:fb:30:ac:93:59:af:d5:7c:56:2b:c3:5f:e2:59:43:b7:
d9:a0:07:9e:b0:72:78:7e:cc:c2:69:1f:0b:df:e4:37:cf:93:
ba:2f:e6:0e:36:1a:db:ed:bc:7d:5f:32:3e:14:41:ce:51:29:
a0:b3:a8:fe:1c:79:ae:64:28:f4:4d:5d:6a:e3:35:8e:ef:a3:
21:72:ef:7f:a2:86:f2:bb:78:05:e8:26:be:de:00:3a:e5:75:
d8:17:26:98:81:d0:0e:7e:b3:08:45:3d:e0:71:aa:b6:da:a0:
7d:57:e8:03:95:04:d5:a5:2d:c6:ba:9d:5e:a4:19:73:bb:c3:
d1:42:9c:2e:29:c6:cd:48:09:d1:45:48:60:a1:48:17:fa:e5:
79:95:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org