Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa
File: 3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa (raw, json)
Hash identifier: sg+QXxS1z5kL7Lrpc+3pYD7FO7g/NdlmyEMfz4A0lCc=
Subject key identifier: 94:4D:93:9F:7F:06:9D:69:A0:D7:CC:30:47:B9:D0:4A:7D:42:FF:90
Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596
Certificate serial: 7A843A69759D43A0D0E816CB991E5A3483351815
Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa
Signing time: Fri 26 Aug 2022 10:22:23 +0000
ROA not before: Fri 26 Aug 2022 10:17:23 +0000
ROA not after: Fri 25 Aug 2023 10:22:23 +0000
asID: 149683
IP address blocks: 103.184.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:84:3a:69:75:9d:43:a0:d0:e8:16:cb:99:1e:5a:34:83:35:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596
Validity
Not Before: Aug 26 10:17:23 2022 GMT
Not After : Aug 25 10:22:23 2023 GMT
Subject: CN=944D939F7F069D69A0D7CC3047B9D04A7D42FF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:10:c9:4f:e7:e7:74:b4:4e:0e:b3:49:74:
12:77:7e:20:37:0d:d5:b9:e4:f2:63:ae:75:b5:7b:
46:0f:ba:21:bc:2c:5f:0b:20:03:54:f4:ed:f2:5d:
0c:1e:3b:55:1d:97:5a:dc:60:6f:34:0e:de:88:1c:
9d:53:84:4d:d3:0e:d4:39:fc:25:6d:46:80:c9:5d:
40:34:0f:31:41:f3:9b:a7:03:f8:5e:56:0c:8e:d3:
6a:2c:af:ff:f8:14:b1:45:87:e4:6f:7f:37:d6:eb:
e3:71:a3:d5:96:cf:2c:0f:40:03:9a:e8:ad:4b:0f:
56:eb:b5:4a:04:7d:a5:21:11:b8:42:2d:08:6c:fa:
77:74:47:a1:1d:04:1a:1e:4f:98:53:b4:84:6f:ee:
09:8a:99:7c:63:a7:06:00:85:03:61:11:fd:cc:64:
d3:59:df:2c:10:7e:62:30:fd:e3:dc:98:f1:bf:34:
fe:28:b5:db:07:f4:c0:47:11:63:ce:1a:41:5b:ae:
6f:1b:57:6c:4c:7d:1f:c0:a6:55:a7:83:20:a4:65:
78:7f:22:5e:58:68:ff:3c:8a:02:7a:e9:dc:63:cb:
89:f3:d8:73:77:12:ab:d6:fa:19:a8:84:2f:b6:61:
b2:e1:56:71:a7:6d:73:02:04:4e:c8:f7:73:10:21:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:93:9F:7F:06:9D:69:A0:D7:CC:30:47:B9:D0:4A:7D:42:FF:90
X509v3 Authority Key Identifier:
keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32312e302f32342d3234203d3e20313439363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.21.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:cb:fe:5e:84:0e:e6:97:8f:b8:81:94:55:52:64:65:19:
d8:f5:e6:6d:e3:50:fd:f1:e8:6d:66:2c:41:09:5f:a0:62:d7:
fa:9b:42:69:a9:b3:ad:19:f4:52:b5:77:d8:ca:83:c6:77:11:
a9:2b:78:6b:07:fe:c0:7f:d7:8e:1e:26:18:a7:93:90:52:fc:
f1:e8:1c:7b:2a:bf:f7:f4:d6:ab:a3:ca:b1:40:c2:86:8c:d4:
23:49:8e:40:24:fd:a9:90:aa:10:da:c9:2a:66:2d:40:78:77:
c5:68:28:11:a0:d7:c5:a7:da:41:6e:52:81:66:c4:c5:6e:70:
df:29:7b:b1:32:db:98:57:89:85:ab:0b:6b:19:b6:ea:e5:26:
04:fa:e7:9f:15:fc:7e:37:ec:b9:30:71:cc:ba:8c:8c:7a:98:
fd:0e:8b:b0:9b:ea:61:7f:35:af:67:75:e2:5a:12:0a:c5:0b:
b3:34:98:34:15:2f:fe:c4:dc:ce:b2:e7:e7:cc:08:e0:19:7a:
cf:76:fc:f7:c7:0a:c1:6a:fc:0d:72:0f:59:37:6d:fd:3e:bc:
e4:f4:93:d8:86:1b:67:94:23:f7:f2:46:34:86:ec:dd:94:4c:
5e:8c:8b:d8:51:8f:83:ed:59:61:7c:15:93:84:e2:79:3c:24:
13:6f:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org