Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32342d3234203d3e20313338303634.roa
File: 3130332e37302e39322e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier: fzaSlY/t1HEMWL/CgMmaUnijuFnX6HbPBfiSTNSG3zE=
Subject key identifier: F5:73:7C:E3:40:69:8F:54:B4:9F:0A:6B:BB:A1:69:49:09:BE:3B:8F
Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Certificate serial: 5B3A3FE33FEBE9C22A8EC8CEFF72D333EDB2B5CB
Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32342d3234203d3e20313338303634.roa
Signing time: Wed 31 May 2023 21:36:05 +0000
ROA not before: Wed 31 May 2023 21:31:05 +0000
ROA not after: Wed 29 May 2024 21:36:05 +0000
asID: 138064
IP address blocks: 103.70.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3a:3f:e3:3f:eb:e9:c2:2a:8e:c8:ce:ff:72:d3:33:ed:b2:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Validity
Not Before: May 31 21:31:05 2023 GMT
Not After : May 29 21:36:05 2024 GMT
Subject: CN=F5737CE340698F54B49F0A6BBBA1694909BE3B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:6b:e1:61:b3:6b:7e:6e:66:0b:22:43:aa:
b8:20:c3:2b:2b:6c:1f:8a:2a:a1:aa:b5:6f:be:ce:
f9:06:7c:fa:a3:8a:df:70:36:cd:37:70:3f:cc:e3:
8d:69:59:44:0a:fd:f1:c4:c8:1f:71:1f:4e:39:4a:
72:4a:ef:e8:e8:e6:f6:f1:05:f8:1f:80:dd:85:5c:
b2:e8:49:c2:83:1a:9e:64:38:89:cd:22:b5:d0:af:
76:ff:2b:1d:90:68:0f:be:bb:87:4f:1f:79:fd:fb:
1b:d0:fb:b6:6b:56:b2:bb:8f:16:c8:59:11:78:44:
83:9c:2e:5d:55:cb:5c:df:dc:a5:96:fb:82:75:c9:
fe:c5:a3:4c:6f:9a:c6:db:14:4e:d8:94:83:38:3e:
c8:3b:3c:96:57:b5:4c:3e:0f:9e:03:50:96:94:e9:
95:b4:01:64:36:f2:81:0e:01:84:b5:f9:47:5b:ad:
34:46:00:1c:35:f0:6f:1f:92:c7:9e:6b:a5:9d:2e:
01:cc:db:f8:25:7f:fb:22:8a:9a:39:d0:6e:ca:a2:
80:d4:24:2d:fc:79:72:f4:55:76:cd:07:3f:a0:91:
e5:e7:be:fc:b9:42:92:3f:33:88:52:04:38:34:0b:
93:3b:1c:f6:24:4c:3e:7d:22:7d:44:2a:05:16:be:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:7C:E3:40:69:8F:54:B4:9F:0A:6B:BB:A1:69:49:09:BE:3B:8F
X509v3 Authority Key Identifier:
keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32342d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f6:97:bd:65:bf:45:66:11:ff:f9:c8:b2:53:4a:4a:c1:43:
15:d4:83:55:83:0c:6f:69:fa:c5:84:6b:f1:25:b6:65:45:76:
44:db:af:ea:84:6e:72:8a:23:d9:45:cb:61:62:d9:72:d4:ae:
a9:fb:b1:9b:df:49:bc:ba:79:1d:a6:e7:3e:28:a7:3b:f4:37:
90:83:5a:ba:2e:0a:7f:fd:37:8e:6c:93:d9:6a:44:85:5d:7a:
6d:79:39:6d:85:87:de:c0:a6:50:f6:5c:62:c0:0a:29:3e:0b:
95:80:96:05:8f:ed:43:89:6e:7d:c4:d8:10:35:48:5f:95:b4:
8c:6e:11:b3:4a:a3:80:d9:b0:6d:18:b0:c2:78:53:a9:75:c0:
80:eb:4d:41:98:e2:b1:f8:d9:19:da:db:d8:bd:f9:90:18:a7:
e9:3f:63:65:37:74:0f:68:97:84:37:d0:1d:34:c4:02:76:53:
e9:a8:b3:7c:a8:d2:2b:56:94:6f:11:3e:83:dc:77:33:18:2a:
28:c6:f0:4d:fa:cb:59:d7:fd:f7:54:6c:ae:93:93:3f:f7:26:
d4:46:17:9e:25:3a:b0:aa:a5:c3:bf:e9:f2:56:eb:78:df:92:
cd:9c:10:b4:e2:96:01:7d:0a:67:7c:61:d1:53:b7:40:82:7e:
20:b0:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org