Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3234203d3e20313530353233.roa
File: 3130332e37352e3133362e302f32332d3234203d3e20313530353233.roa (raw, json)
Hash identifier: jfQtGSPnmXxgI/hkBrX5aEl+HyAKoWrEqdrLAffhN2M=
Subject key identifier: 0E:B5:FB:93:8A:ED:34:17:02:9A:10:09:E2:36:39:AE:78:5B:7A:A4
Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Certificate serial: 2B755F96BBE9F24EADBD50C094AA54CE8DDDD81C
Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3234203d3e20313530353233.roa
Signing time: Mon 30 Jan 2023 10:41:17 +0000
ROA not before: Mon 30 Jan 2023 10:36:17 +0000
ROA not after: Mon 29 Jan 2024 10:41:17 +0000
asID: 150523
IP address blocks: 103.75.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:75:5f:96:bb:e9:f2:4e:ad:bd:50:c0:94:aa:54:ce:8d:dd:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Validity
Not Before: Jan 30 10:36:17 2023 GMT
Not After : Jan 29 10:41:17 2024 GMT
Subject: CN=0EB5FB938AED3417029A1009E23639AE785B7AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:b5:29:67:07:73:d7:18:e4:a5:94:78:5b:
5f:d9:a2:b2:6d:43:99:d1:61:23:80:e3:f3:49:8d:
07:39:24:cf:8a:d1:27:af:49:d2:99:2c:78:1c:48:
4b:f9:04:0a:dc:66:2d:c9:74:01:b6:bc:03:2a:ed:
47:62:e8:b6:65:5f:94:85:88:cc:0a:f2:d8:9b:cc:
e1:bb:ff:88:7c:54:d5:08:45:16:14:7d:a0:5e:b7:
20:13:9e:3a:29:f9:03:4a:44:36:d8:5b:14:c3:78:
41:c2:a3:a4:fe:5d:4c:15:64:9c:67:d1:1b:70:52:
de:a0:10:c7:fb:4d:71:57:c8:96:ed:48:e5:4c:31:
53:33:bb:28:32:ec:10:25:b6:b4:f3:f6:b0:9b:a3:
39:30:8e:56:c5:2a:4b:d4:41:0e:3f:59:75:ce:d1:
ee:42:44:c4:dc:3b:d2:46:65:b2:a0:4b:63:67:b1:
29:fe:c1:9d:4a:15:05:ce:42:d4:8a:66:7b:c1:79:
04:5d:ad:3a:c1:fb:97:54:34:3f:4e:fb:72:e1:f5:
22:9c:48:68:0b:ad:47:b9:2a:cf:b4:36:6a:26:d1:
77:db:78:c7:50:2d:ea:2a:cc:6c:22:8f:f0:73:c8:
6c:7e:e5:46:e4:0d:85:95:bc:9b:d8:a0:8c:cc:e2:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:FB:93:8A:ED:34:17:02:9A:10:09:E2:36:39:AE:78:5B:7A:A4
X509v3 Authority Key Identifier:
keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3234203d3e20313530353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:09:4c:60:24:8a:c4:a8:af:df:d4:f5:85:a4:eb:d5:3d:b4:
19:a7:11:7c:47:33:34:85:32:fd:f1:01:e0:68:c6:58:53:16:
9f:54:53:0d:d1:30:57:6c:60:a1:72:a0:d3:a7:f2:bd:db:81:
d5:7c:12:2e:ec:9c:ed:14:34:5d:4b:b5:1e:20:fd:98:ff:df:
7e:f7:d7:25:f9:b4:95:b9:5e:d1:b3:55:8d:3f:cf:2b:c1:81:
af:bd:31:f4:f1:59:ba:af:f9:3d:b4:32:ae:41:a9:05:2f:83:
34:2a:32:a1:48:a8:49:81:05:9c:10:33:b7:31:bb:59:33:84:
b1:21:c8:cd:13:bd:e3:8e:11:2d:dc:a9:d1:00:33:41:25:7f:
ab:53:09:57:5e:2a:66:09:4a:d6:d1:16:f5:ce:b8:10:8d:f8:
6e:93:e4:b6:13:0e:6b:4c:14:86:7b:d7:7c:62:11:33:59:e3:
90:69:bc:55:b2:7b:da:cf:d9:79:09:bf:0b:e3:29:0e:3d:18:
05:7b:75:1d:40:e9:8b:35:3f:63:8c:0e:17:a0:e5:d5:f9:44:
a2:19:c4:2f:c2:af:be:b1:5e:9d:8e:eb:53:69:2f:19:bf:f1:
51:72:f6:81:ee:e2:01:b8:de:4a:02:08:53:f4:1e:01:2e:54:
b3:fc:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:17:56 2025 by rpki-client