Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
File: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: ary0vGG2U5aiEyOTVKL9OaaW/Sac/LkIXM2CThGDRtc=
Subject key identifier: 2C:AD:39:FF:79:B2:19:6A:A7:84:7D:A9:94:A5:17:93:63:AF:C1:22
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 3261E0B7F842877904D4CB4D09C58D15332C76DD
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
Signing time: Wed 19 Oct 2022 05:00:00 +0000
ROA not before: Wed 19 Oct 2022 04:55:00 +0000
ROA not after: Wed 18 Oct 2023 05:00:00 +0000
asID: 23679
IP address blocks: 103.238.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:61:e0:b7:f8:42:87:79:04:d4:cb:4d:09:c5:8d:15:33:2c:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 19 04:55:00 2022 GMT
Not After : Oct 18 05:00:00 2023 GMT
Subject: CN=2CAD39FF79B2196AA7847DA994A5179363AFC122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:aa:14:53:aa:e2:9c:4c:d9:f7:45:46:74:b9:
c7:ca:b4:f3:0b:2c:fe:4e:c6:da:50:15:2a:5c:88:
f3:8f:1b:50:14:ec:5a:52:04:73:e9:d1:b2:ea:85:
c8:9e:5e:1e:09:3d:9f:af:2b:13:91:65:1f:56:f0:
cf:18:2d:0d:24:61:9a:0a:01:fb:d6:5e:e7:83:bc:
ab:cd:9d:69:0f:87:5c:fb:2e:0a:53:f4:b6:00:16:
67:8d:9a:e2:de:83:04:d3:d4:f3:b7:6d:dc:36:d8:
ce:78:cc:69:0e:39:0c:9e:79:08:c8:51:e6:e3:d5:
bb:6f:8b:6e:4e:a2:95:b6:d9:bd:e0:7b:04:66:b8:
4b:d1:a5:a8:b7:2d:63:78:ac:ae:5d:63:06:a4:62:
da:ee:da:e6:24:63:01:12:9b:a1:76:01:c5:7b:3b:
53:9e:a1:8f:21:1d:37:8a:96:4f:3a:96:eb:ae:82:
c7:e1:2b:3c:2a:02:3d:0b:02:6b:aa:43:11:2f:96:
60:b6:57:36:06:eb:8f:5a:e3:ec:6c:cb:84:55:2d:
04:27:a8:d2:01:81:66:6e:5c:99:5b:57:5d:8a:34:
6f:6e:2d:83:13:b7:35:e2:38:41:07:c9:f8:dd:2d:
57:83:f6:68:17:ef:ed:9d:f9:3d:2c:76:15:87:69:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:39:FF:79:B2:19:6A:A7:84:7D:A9:94:A5:17:93:63:AF:C1:22
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.203.0/24
Signature Algorithm: sha256WithRSAEncryption
32:12:21:5f:07:31:b9:97:22:02:ba:59:0f:ef:2d:9e:bf:07:
da:34:1e:6d:f0:9d:46:ab:62:3a:5a:90:7e:1d:29:eb:65:94:
b4:84:7b:9b:61:b2:8b:0c:32:91:43:7b:ee:27:93:d6:8e:60:
b4:8b:68:06:b0:ea:e1:87:1c:8f:3b:54:be:87:52:29:ff:bf:
4b:55:4a:66:34:52:a9:02:5c:23:4b:aa:87:74:bb:61:c0:e9:
d9:61:b8:aa:75:9d:b5:5a:45:2a:38:9a:15:03:cf:98:5f:ca:
9f:f4:73:87:04:e3:80:ac:43:c3:c6:1f:5f:d5:54:01:f8:05:
52:fa:44:b9:55:ef:e8:ac:0c:43:05:11:87:0d:2a:c5:da:d4:
f7:ca:c7:7c:0d:26:ea:9e:3e:f4:27:e0:bf:0e:6c:ca:4f:c1:
b2:a3:3a:ed:23:f6:7d:d6:d7:de:7e:5b:e3:05:78:93:73:9a:
f6:fd:f8:b4:f2:51:9e:b3:6c:20:3b:39:76:0c:90:e8:19:9a:
f6:b5:4f:f3:ea:f3:19:4e:7b:aa:d2:97:22:1b:50:c1:11:70:
ee:d4:a4:0d:42:d1:ae:48:9b:d1:57:30:1d:c6:1b:04:e8:04:
dc:e2:ad:d0:29:44:6c:91:c5:2e:ae:2d:c8:ad:26:16:65:13:
1a:64:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org