Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32332d3234203d3e20313430343632.roa
File: 3130332e3135332e3132362e302f32332d3234203d3e20313430343632.roa (raw, json)
Hash identifier: MWU+H0HUNWydkTTSzB2Z9WThMIr1IYO4IwYhkoW6zgQ=
Subject key identifier: E7:BD:90:5B:75:54:F8:C3:67:85:FF:9D:91:77:DA:E7:7D:9C:33:59
Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial: 1E4EE3EFC0EAD7223C7D3CB0486E568F694B81D4
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32332d3234203d3e20313430343632.roa
Signing time: Wed 25 Jan 2023 09:30:55 +0000
ROA not before: Wed 25 Jan 2023 09:25:55 +0000
ROA not after: Wed 24 Jan 2024 09:30:55 +0000
asID: 140462
IP address blocks: 103.153.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4e:e3:ef:c0:ea:d7:22:3c:7d:3c:b0:48:6e:56:8f:69:4b:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Validity
Not Before: Jan 25 09:25:55 2023 GMT
Not After : Jan 24 09:30:55 2024 GMT
Subject: CN=E7BD905B7554F8C36785FF9D9177DAE77D9C3359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:d3:22:59:ec:bc:dd:0f:d1:d9:0a:51:8e:
95:b5:2f:50:dc:be:a4:9b:b8:67:fe:35:51:6d:60:
52:7f:99:cb:01:18:97:66:c4:0d:10:b0:fb:e0:de:
76:f5:19:eb:50:ad:b4:d8:a6:24:fd:d2:fe:f3:f4:
b2:e9:32:df:05:ce:5d:c2:4d:a5:7d:d3:9c:b0:3a:
54:ca:d6:4b:ae:3c:8a:0b:a3:d1:3c:24:1c:06:0a:
7b:68:db:37:21:21:4e:ba:98:3b:3f:cc:79:62:30:
98:71:ff:8f:57:44:8f:89:b4:70:71:5c:86:61:b0:
71:9e:42:0a:66:ef:a7:41:75:f5:46:39:02:7d:5a:
8f:02:49:9a:8d:84:30:ad:a7:b0:ce:34:60:28:df:
07:00:62:f7:28:86:20:e2:58:55:97:12:a3:c2:2c:
d0:41:20:bf:e3:56:61:db:95:11:5d:88:8b:06:a4:
a2:ff:5d:03:fe:fe:45:16:4e:24:05:62:a1:ba:26:
77:3c:76:1f:94:e7:84:87:b5:b3:39:4a:79:a8:45:
ed:43:81:3a:b7:a1:8f:c6:8c:ca:a0:f2:72:46:94:
c4:7a:45:62:f6:02:ff:01:21:23:9e:9d:91:fe:96:
e7:b2:c7:59:1a:a5:93:92:a7:e3:01:db:0c:13:9d:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:90:5B:75:54:F8:C3:67:85:FF:9D:91:77:DA:E7:7D:9C:33:59
X509v3 Authority Key Identifier:
keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32332d3234203d3e20313430343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.126.0/23
Signature Algorithm: sha256WithRSAEncryption
04:1d:4d:85:73:d7:ee:ce:c0:fc:6a:ee:d6:de:58:69:a5:d8:
a3:e3:49:80:e7:ce:29:31:2f:65:11:14:81:d0:95:65:cf:84:
ae:da:0d:28:23:47:e2:c5:1b:98:e4:e3:aa:1d:17:57:cc:70:
3a:54:e9:e0:32:e1:10:bc:4f:4e:ac:a6:63:34:5f:00:4d:f2:
6d:d7:5f:8d:c8:c5:a5:2c:3b:fc:f1:18:ea:9a:e0:5c:2a:38:
9d:41:b3:9e:a7:d8:98:0d:31:2c:68:d9:82:b2:82:18:47:ed:
ad:20:f3:19:07:b0:50:d7:5a:3f:9a:42:45:cb:0e:2a:a4:00:
16:b8:2e:bf:ad:61:c9:71:5b:30:d6:69:41:98:01:56:68:3d:
e5:b6:89:55:47:dd:1f:80:c4:32:a3:ec:11:27:27:c9:ab:6f:
71:3f:16:82:59:f8:ed:79:c3:b4:9f:84:a9:ed:9f:e6:7c:91:
42:2f:08:f3:bb:6d:65:76:cc:cb:17:9e:07:8f:2d:40:9b:dc:
d9:45:40:12:f3:c0:d6:65:e4:4f:34:10:03:ed:7a:52:d4:f7:
0a:99:af:6b:92:b0:e6:fb:ee:59:50:23:e2:a5:58:68:29:4a:
77:ea:96:97:5c:9b:08:d9:5b:3e:4e:4f:7e:55:10:64:63:ab:
30:15:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org