Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e20313439333134.roa
File: 3130332e3234372e32332e302f32342d3234203d3e20313439333134.roa (raw, json)
Hash identifier: PHledVcFOSqzYTlrIyETvEZpUcnCKieYXZNFO5Q1zi8=
Subject key identifier: 5B:6B:AD:98:28:E4:32:3A:18:80:86:EB:23:96:93:08:C1:D5:1F:E3
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 136F53E5742DE061D9A582A7D8AC874B6D39A342
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e20313439333134.roa
Signing time: Fri 23 Dec 2022 13:51:54 +0000
ROA not before: Fri 23 Dec 2022 13:46:54 +0000
ROA not after: Fri 22 Dec 2023 13:51:54 +0000
asID: 149314
IP address blocks: 103.247.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6f:53:e5:74:2d:e0:61:d9:a5:82:a7:d8:ac:87:4b:6d:39:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Dec 23 13:46:54 2022 GMT
Not After : Dec 22 13:51:54 2023 GMT
Subject: CN=5B6BAD9828E4323A188086EB23969308C1D51FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:ee:22:46:e5:d5:94:d4:4c:4a:87:b4:c4:
5b:46:8c:ae:3f:9a:b8:f3:95:52:e6:82:7f:48:8b:
a1:0c:0e:57:af:22:ab:a5:ec:ef:b9:55:b4:90:23:
3e:48:f0:6d:28:e5:3e:b3:7c:3d:6b:8f:99:db:35:
1c:d4:67:1a:a1:ed:09:42:13:71:b8:51:e5:f7:ca:
38:1c:28:7e:7e:2c:aa:20:e9:41:57:45:e9:57:1f:
01:b3:94:0e:6d:45:3b:53:3a:1e:68:19:ed:86:f3:
a1:f6:8a:01:09:98:14:44:6e:ef:f3:dc:28:84:c2:
d6:df:8a:f1:a6:27:74:65:cc:ce:26:eb:28:ca:ef:
87:62:1d:e5:c1:4d:58:19:48:d3:c5:73:98:ce:c0:
7c:6f:d9:ac:43:75:8d:f5:dc:a1:36:fa:b7:aa:b8:
59:ec:77:d8:7e:e4:32:77:10:b4:d1:1f:dc:6b:df:
1e:c3:94:1d:1c:46:1e:d5:ce:52:5f:4d:dc:a5:47:
78:55:31:ef:98:d5:c0:66:db:dd:6b:ce:7b:67:a5:
e3:27:74:47:55:a8:5e:42:cb:6f:ce:32:1b:6e:97:
06:8e:2f:62:a7:18:19:fd:c4:1f:34:51:2d:7a:7d:
d4:25:da:2d:e7:77:45:b9:96:b5:db:f9:dd:66:2d:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:AD:98:28:E4:32:3A:18:80:86:EB:23:96:93:08:C1:D5:1F:E3
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e20313439333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.23.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b3:f0:2c:22:54:bd:1a:16:de:13:33:9f:ec:cd:37:dd:9c:
54:60:0c:a0:14:f3:f4:d4:b5:01:f8:00:1a:34:db:f0:57:41:
cc:f4:de:75:33:9f:cb:1c:9f:85:4b:8c:23:15:77:b1:a4:ce:
9a:2c:68:a9:16:a1:cc:ca:1d:be:24:e3:96:ac:d3:0e:39:00:
bf:e1:fa:54:12:53:5a:de:14:bd:23:a8:77:22:c3:db:7e:36:
60:af:c9:02:7b:16:42:57:cf:2f:31:16:65:0f:a6:be:ae:4e:
f9:fb:ff:db:24:ce:53:bc:85:ad:d4:01:e7:16:75:e1:97:5a:
a0:85:64:e9:7e:fb:42:81:25:c8:f2:2d:58:4b:7f:fb:49:96:
ef:6f:ea:b5:36:77:54:7d:89:56:ab:dc:cc:ee:17:ef:19:73:
5d:8b:33:35:eb:0c:7d:6a:71:1c:c9:37:b0:43:17:ce:13:db:
25:03:2e:94:93:53:23:75:c4:33:a3:72:3a:3b:24:e3:a6:ad:
3f:37:5e:57:96:53:a6:e7:89:96:ad:07:d4:a4:65:73:7c:3b:
d3:95:39:c3:55:6e:78:48:de:e3:c8:d3:a6:5f:83:12:83:36:
27:bd:aa:dd:74:0b:7c:53:39:9e:14:0f:3b:bc:1e:de:32:39:
76:94:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org