Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32332d3234203d3e203338333230.roa
File: 3130332e3136372e3130342e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: VTj852d9I7n2YSaxrLdsVwbdtWutpP/YmnYvjMLtbAY=
Subject key identifier: 56:0D:AE:5E:5C:6B:DE:1A:B4:BE:D6:D3:02:60:6D:2E:C7:1A:79:E5
Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Certificate serial: 646FBD9B667A6BD1B753ADA420491A444AF355D7
Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32332d3234203d3e203338333230.roa
Signing time: Thu 14 Jul 2022 03:39:45 +0000
ROA not before: Thu 14 Jul 2022 03:34:45 +0000
ROA not after: Thu 13 Jul 2023 03:39:45 +0000
asID: 38320
IP address blocks: 103.167.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6f:bd:9b:66:7a:6b:d1:b7:53:ad:a4:20:49:1a:44:4a:f3:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Validity
Not Before: Jul 14 03:34:45 2022 GMT
Not After : Jul 13 03:39:45 2023 GMT
Subject: CN=560DAE5E5C6BDE1AB4BED6D302606D2EC71A79E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:ea:50:0c:f1:52:4f:48:c5:20:16:57:b8:
d8:7b:7e:cc:30:33:d3:a6:48:5e:8b:9a:48:3b:66:
2b:76:8d:3b:ac:5a:13:f8:e2:42:60:15:30:aa:17:
aa:0a:52:37:bf:e9:26:15:8c:24:c3:6e:65:69:2b:
fe:f5:4f:57:ba:b0:bc:05:c1:5d:ed:d3:c3:85:ff:
a0:30:59:f1:58:f0:98:8f:3d:3a:68:6a:72:e8:13:
35:b6:c1:9d:2b:c4:a4:97:e7:05:cf:ab:03:61:4a:
67:db:fc:c6:0d:ae:ce:5e:23:78:60:a9:8e:30:7f:
01:38:1f:21:cd:c2:7e:0f:d7:30:48:0f:c7:12:d4:
41:3c:cf:77:3f:e8:dc:bc:df:64:04:e1:63:c1:e1:
f3:ad:bc:dc:df:bd:fe:86:75:e9:e0:41:43:11:63:
b9:5b:4a:18:54:6c:e2:c8:27:d6:6b:99:ac:97:a0:
b8:64:2b:de:c8:89:b4:03:77:05:82:a4:1b:98:46:
6e:bc:13:35:82:0e:9b:19:29:6f:de:73:8c:e0:e7:
4c:7d:14:a4:b8:59:fa:e9:83:57:09:f9:fe:68:03:
ce:ab:73:2a:e1:98:04:26:3b:a8:68:ae:b9:4e:e9:
d5:a9:d1:36:82:cb:a0:06:da:95:20:f3:b1:c1:c3:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:AE:5E:5C:6B:DE:1A:B4:BE:D6:D3:02:60:6D:2E:C7:1A:79:E5
X509v3 Authority Key Identifier:
keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130342e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:74:59:17:26:bb:e5:3b:8a:38:15:c7:da:54:d2:42:9b:d1:
7a:4d:aa:5b:b7:17:e2:aa:c2:79:10:c1:24:66:d5:dd:65:a3:
1b:0a:84:1c:6b:28:2d:c2:ca:11:c3:3e:ef:48:9f:94:6a:be:
ee:22:4d:0c:ce:21:e1:82:0c:31:6b:4c:6d:1d:ba:dc:50:26:
73:48:16:19:04:f3:78:e7:d1:f5:fd:61:db:03:02:a7:8d:0d:
2a:5b:a1:21:dd:8e:8b:ef:b7:79:72:48:c5:0e:84:0c:a5:9e:
32:a3:40:e1:38:e2:26:c1:c9:d9:0a:bf:79:f3:3e:6c:8b:46:
d3:88:ca:08:23:b9:42:35:ee:0c:47:36:44:d0:db:28:7d:29:
14:a8:f7:95:58:c4:5f:53:33:3d:03:52:e1:73:7b:c7:02:05:
be:1c:d3:29:09:07:b7:6d:49:79:ab:dd:f9:e8:87:a7:14:d2:
b5:80:e0:5a:6f:77:21:b2:2b:b3:07:38:2d:8e:b9:d7:16:a7:
43:ef:11:54:e1:33:81:ab:e2:e9:9b:a4:47:0b:d1:7f:f1:4b:
70:06:5f:aa:41:e1:74:13:e3:a4:6b:b7:57:b6:52:cb:d9:79:
58:fa:20:e8:e2:b2:89:21:b9:51:b2:ac:92:37:be:aa:15:54:
c6:19:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:05 2025 by rpki-client