Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313530323438.roa
File: 3130332e3135332e3132372e302f32342d3234203d3e20313530323438.roa (raw, json)
Hash identifier: zMVx5If1kYX60pd4lprd9J2eYG/jw7TNwnbUiUplc7s=
Subject key identifier: FA:31:E3:D5:CD:2D:1C:17:BD:FB:39:B1:5B:1D:DA:D8:26:89:F9:58
Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial: 10C9D9CAF897020D464116A2A30EFFF97D10603D
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313530323438.roa
Signing time: Wed 25 Jan 2023 08:54:58 +0000
ROA not before: Wed 25 Jan 2023 08:49:58 +0000
ROA not after: Wed 24 Jan 2024 08:54:58 +0000
asID: 150248
IP address blocks: 103.153.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c9:d9:ca:f8:97:02:0d:46:41:16:a2:a3:0e:ff:f9:7d:10:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Validity
Not Before: Jan 25 08:49:58 2023 GMT
Not After : Jan 24 08:54:58 2024 GMT
Subject: CN=FA31E3D5CD2D1C17BDFB39B15B1DDAD82689F958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:58:81:5b:dc:a1:50:de:7b:4d:be:6a:cd:
5a:7a:5d:6b:f8:25:21:95:7d:66:ce:fa:b3:80:f9:
ca:e2:2f:c1:48:32:85:54:ba:96:a1:6c:77:61:c1:
ac:69:32:4d:95:e9:9d:f7:db:a6:e7:ef:5c:29:44:
b8:0d:dd:d5:50:9a:58:71:0d:ca:a8:b6:53:d0:ef:
c8:d6:e1:94:a8:f5:ab:1a:90:ed:91:a7:b3:7c:d3:
10:42:ff:fd:f4:dd:ca:83:3e:d5:4a:48:72:22:e1:
e9:84:e1:3b:68:88:14:ee:e1:58:80:30:79:bc:87:
5c:ac:7c:07:83:08:ea:cc:7c:9f:8f:2b:a9:c4:de:
01:b0:ed:58:a1:96:26:fa:d0:98:35:fd:7c:4a:b5:
2e:e5:f7:8a:69:17:66:53:a9:95:68:c2:69:a8:4a:
a9:c9:a7:05:e7:7b:23:e6:5a:3a:72:2a:2d:a7:b2:
e1:71:49:e5:17:a6:c1:58:5e:86:4c:ca:f9:50:34:
5f:e2:14:27:0e:80:42:e4:25:a5:af:60:37:e2:dc:
12:ad:cb:6a:39:0a:e3:f1:36:88:81:65:57:9f:de:
03:f8:ea:1e:13:88:d8:b2:7f:02:9a:b0:a6:07:e7:
ee:05:d2:8a:72:ab:4d:f1:da:67:e9:42:af:5c:47:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:E3:D5:CD:2D:1C:17:BD:FB:39:B1:5B:1D:DA:D8:26:89:F9:58
X509v3 Authority Key Identifier:
keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313530323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f4:ee:68:4b:65:74:1b:63:9a:27:b5:3f:21:6c:9c:39:cd:
53:b0:cd:0d:14:16:f2:01:ee:c0:57:62:64:b9:0a:65:d0:4e:
69:67:f0:ce:3d:16:8f:12:5e:39:c1:01:70:c6:e8:99:7f:2e:
c7:62:f7:b4:46:a5:90:de:4f:26:6f:c5:e9:d3:4a:6f:7f:21:
fd:2b:b6:e6:b1:5e:2f:80:d3:56:84:ad:79:e7:6f:c9:be:e0:
bd:6c:c3:38:dc:5a:8f:39:2a:22:9f:d4:14:c8:d6:41:76:d3:
3c:f7:ee:ea:97:ff:5f:63:78:e2:58:86:70:14:ca:63:2d:80:
89:c7:7c:ef:1f:93:be:25:3b:48:ab:a3:3b:b5:5f:64:10:c9:
46:70:65:29:c3:56:d2:3f:08:ac:d9:74:8d:97:d4:07:14:c1:
03:26:2b:53:84:c5:9f:ac:46:51:c0:9e:39:e0:f9:ce:34:90:
25:0a:cb:d3:cb:82:ec:7d:e0:b1:f1:74:ef:40:3f:ad:da:ec:
a5:b5:5f:34:ae:05:27:c0:3d:f8:c5:f0:6a:af:2f:e7:8b:73:
dd:9b:11:7e:61:f8:b7:11:0d:a1:2a:8c:78:f2:63:87:9b:cc:
2f:3d:65:fd:03:57:c8:c7:45:cc:c0:05:61:51:a6:b6:99:80:
5f:b6:f8:e9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEMnZyviXAg1GQRaiow7/+X0QYD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz
QUQ5OTQyQzAeFw0yMzAxMjUwODQ5NThaFw0yNDAxMjQwODU0NThaMDMxMTAvBgNV
BAMTKEZBMzFFM0Q1Q0QyRDFDMTdCREZCMzlCMTVCMUREQUQ4MjY4OUY5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1ViBW9yhUN57Tb5qzVp6XWv4
JSGVfWbO+rOA+criL8FIMoVUupahbHdhwaxpMk2V6Z3326bn71wpRLgN3dVQmlhx
DcqotlPQ78jW4ZSo9asakO2Rp7N80xBC//303cqDPtVKSHIi4emE4TtoiBTu4ViA
MHm8h1ysfAeDCOrMfJ+PK6nE3gGw7Vihlib60Jg1/XxKtS7l94ppF2ZTqZVowmmo
SqnJpwXneyPmWjpyKi2nsuFxSeUXpsFYXoZMyvlQNF/iFCcOgELkJaWvYDfi3BKt
y2o5CuPxNoiBZVef3gP46h4TiNiyfwKasKYH5+4F0opyq03x2mfpQq9cR9+xAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU+jHj1c0tHBe9+zmxWx3a2CaJ+VgwHwYDVR0j
BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG
N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5
OTQyQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4M2VkN2FiLTFhYzktNGY0Mi1h
Y2RkLTUzNTU3YWM3YjNmMy8wLzMxMzAzMzJlMzEzNTMzMmUzMTMyMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmX8wDQYJ
KoZIhvcNAQELBQADggEBAKL07mhLZXQbY5ontT8hbJw5zVOwzQ0UFvIB7sBXYmS5
CmXQTmln8M49Fo8SXjnBAXDG6Jl/Lsdi97RGpZDeTyZvxenTSm9/If0rtuaxXi+A
01aErXnnb8m+4L1swzjcWo85KiKf1BTI1kF20zz37uqX/19jeOJYhnAUymMtgInH
fO8fk74lO0irozu1X2QQyUZwZSnDVtI/CKzZdI2X1AcUwQMmK1OExZ+sRlHAnjng
+c40kCUKy9PLgux94LHxdO9AP63a7KW1XzSuBSfAPfjF8GqvL+eLc92bEX5h+LcR
DaEqjHjyY4ebzC89Zf0DV8jHRczABWFRpraZgF+2+Ok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org