Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3233203d3e203538333831.roa
File: 3130332e352e35302e302f32332d3233203d3e203538333831.roa (raw, json)
Hash identifier: BUsffLVZjlUWO5H6dUfSBl6Xe0jzNHFotXEMEgo+IJg=
Subject key identifier: 3C:55:92:43:57:26:11:59:C8:46:8F:EC:F6:A3:FB:5C:75:5E:AA:40
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 313057B6EB94AD25DE556D76A339FC0E38EDAC57
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3233203d3e203538333831.roa
Signing time: Wed 31 May 2023 15:58:10 +0000
ROA not before: Wed 31 May 2023 15:53:10 +0000
ROA not after: Wed 29 May 2024 15:58:10 +0000
asID: 58381
IP address blocks: 103.5.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:30:57:b6:eb:94:ad:25:de:55:6d:76:a3:39:fc:0e:38:ed:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: May 31 15:53:10 2023 GMT
Not After : May 29 15:58:10 2024 GMT
Subject: CN=3C55924357261159C8468FECF6A3FB5C755EAA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:0d:37:07:a4:c4:27:5f:a9:27:c4:ed:d9:
17:57:dc:77:91:45:40:10:40:9e:77:1e:84:ee:e8:
f0:14:24:7f:3f:6f:45:44:d2:2f:06:a2:e1:7e:26:
a6:47:4c:87:04:1d:1c:9f:3e:76:50:0d:ec:b9:0d:
3b:09:6f:dc:5e:09:1b:75:74:f4:4e:ff:6c:6a:d8:
67:58:3f:f4:b9:5b:bd:83:75:07:b4:35:76:00:e9:
bf:97:1c:a8:3d:90:ad:60:69:f3:7b:a1:f5:20:90:
95:65:fc:32:21:e9:6f:39:72:2e:23:9e:76:1c:5f:
81:5e:77:2c:0b:b3:9e:43:2d:f1:5f:76:d5:ce:78:
72:08:df:4a:7f:91:25:ce:fc:b0:a0:94:d0:33:f8:
be:00:bd:c5:ca:67:bf:90:c1:a1:0b:26:7b:f0:1a:
af:18:97:c4:09:9c:86:77:f7:45:3c:d3:30:2d:7a:
3b:ff:37:d2:6d:bd:76:e6:a2:86:84:a4:3f:68:aa:
a6:8d:3c:0d:b6:e4:4b:b5:6b:77:3e:9e:27:65:ba:
5a:f6:fc:33:56:2f:6b:44:4d:08:7c:ba:db:e9:4c:
ee:80:3a:a4:59:d4:13:f4:de:f4:de:9c:06:a2:24:
7c:84:0d:25:29:eb:56:9a:81:88:61:66:41:68:c0:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:92:43:57:26:11:59:C8:46:8F:EC:F6:A3:FB:5C:75:5E:AA:40
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3233203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.5.50.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:80:d7:4f:55:bf:c0:42:8f:f4:82:06:f1:9c:cc:7e:48:a8:
63:01:b9:0a:c8:0d:7e:46:47:86:41:b1:f2:05:78:1b:2c:f0:
c8:f8:fc:08:35:33:7b:db:de:38:94:ae:97:45:1e:53:73:08:
b2:fe:a2:7f:9f:f3:fa:17:28:e6:68:eb:db:e3:9e:ea:24:d5:
b0:65:d2:02:9e:24:89:45:f6:8e:e3:11:2a:0e:8c:c6:fc:b0:
6e:00:04:2d:5c:e3:27:5c:d0:9b:b4:ea:66:92:74:09:9b:d0:
f2:a6:16:a4:26:01:76:54:93:95:0a:08:40:fb:2e:e0:6d:a4:
7c:1b:84:c3:a5:03:b1:83:9c:a5:5b:22:04:e4:4c:e6:49:d7:
24:ec:ee:90:44:c2:10:08:3a:cd:b1:04:a3:00:ca:4e:a8:6c:
44:a9:cc:a5:a0:bd:fd:33:a4:6d:a5:27:27:70:73:3e:4f:c9:
97:91:93:7b:3a:36:8e:a0:5a:54:d3:27:67:32:58:a0:a1:af:
ae:ab:d0:09:21:97:67:19:ee:f4:6a:8b:5f:7e:6d:bb:4e:6d:
7f:84:72:50:f3:2b:86:c8:bb:65:05:4e:01:5f:e8:5a:0b:58:
1c:58:93:41:d3:c3:09:29:b2:d9:08:20:e5:7e:10:ba:5f:2e:
8e:48:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:44 2025 by rpki-client