Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3233203d3e20313439393133.roa
File: 3130332e3139312e35342e302f32332d3233203d3e20313439393133.roa (raw, json)
Hash identifier: /M5JcTpfotPQNSSGGj7y9yJfRWGEDEm8D1GrwOwshu4=
Subject key identifier: BE:36:59:91:99:90:06:A3:57:78:03:06:A0:F0:63:E5:99:CA:2D:D9
Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Certificate serial: 12CA942F64D925C1B18ECFB8BF0B34E68312B257
Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3233203d3e20313439393133.roa
Signing time: Tue 27 Sep 2022 09:37:12 +0000
ROA not before: Tue 27 Sep 2022 09:32:12 +0000
ROA not after: Tue 26 Sep 2023 09:37:12 +0000
asID: 149913
IP address blocks: 103.191.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ca:94:2f:64:d9:25:c1:b1:8e:cf:b8:bf:0b:34:e6:83:12:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Validity
Not Before: Sep 27 09:32:12 2022 GMT
Not After : Sep 26 09:37:12 2023 GMT
Subject: CN=BE365991999006A357780306A0F063E599CA2DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:8a:90:5c:6f:43:d1:e7:4b:86:69:48:69:
44:bd:5d:e1:7a:af:f1:de:1b:80:c0:d3:d7:e9:23:
6e:64:ff:23:3b:55:ba:2c:e0:2f:69:11:5d:c3:e3:
5c:75:66:d9:b2:3a:d9:f5:89:7a:e5:f6:46:2a:e0:
c7:64:dc:66:e7:43:c6:6e:e8:64:8d:e9:26:54:27:
69:66:9e:c1:fb:7a:2d:46:79:37:43:a3:8c:c2:55:
0c:27:5b:c7:f4:ab:22:3a:b5:a6:a4:9d:97:df:95:
fb:6b:45:59:dd:5f:54:b0:73:51:16:1c:29:e6:cd:
7a:49:74:50:76:c9:ed:c2:6c:7e:f7:88:41:97:c5:
52:8c:c8:fa:86:55:8d:03:a1:bf:14:d7:6a:3f:76:
0d:a1:4e:95:84:e7:8d:de:a6:37:14:04:1c:33:7a:
c9:5c:13:65:d2:35:85:97:5e:27:7f:a2:fd:e2:42:
d9:6f:06:1f:4c:2e:69:33:62:5e:3f:06:01:26:b8:
87:32:96:df:97:dc:4b:d4:51:c9:80:ec:80:23:40:
e6:ce:d7:38:26:eb:9b:24:62:7a:9d:0b:58:4a:31:
2a:8c:15:10:36:78:cd:c8:a1:0e:e8:67:c5:b6:6e:
39:df:bc:a7:11:70:de:9e:97:02:83:fa:65:25:9c:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:59:91:99:90:06:A3:57:78:03:06:A0:F0:63:E5:99:CA:2D:D9
X509v3 Authority Key Identifier:
keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3233203d3e20313439393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.54.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:2e:1b:f2:db:7c:88:73:f4:89:9e:e1:ee:17:18:9d:e2:7c:
45:fb:0d:b6:ba:41:33:5e:cf:33:5a:71:8e:41:10:29:92:73:
fb:fb:70:89:ae:70:98:26:3b:63:aa:09:4f:65:f9:62:87:d8:
5e:96:d7:4f:1c:d5:80:7d:2c:3d:68:4d:ec:67:9f:81:c3:c2:
66:75:97:6c:fd:f7:8c:59:06:2f:ef:ce:6f:7c:6b:fe:7c:4c:
41:db:19:16:cd:39:39:28:35:99:fe:9f:c5:7f:66:b8:a3:91:
68:ad:8f:73:79:4d:7b:61:9e:f4:20:31:0b:ad:a4:52:2e:87:
a2:61:82:f1:87:f5:24:bf:83:73:7f:7e:5d:9b:b3:36:11:f4:
17:f8:26:78:4c:ed:07:08:fe:c0:90:62:ab:75:bf:a4:30:94:
6f:69:7d:ad:79:02:ee:68:82:ed:c1:5b:b0:04:31:35:6e:43:
00:6b:ce:ae:3d:6f:10:7f:e6:92:ab:f3:df:71:f9:26:60:6e:
6f:28:75:01:d2:ee:4a:d5:3b:82:2f:1b:8a:3c:89:29:72:20:
3d:23:7e:75:6e:b5:bd:ca:eb:f1:08:bc:19:1c:50:44:91:90:
56:6a:35:3a:f9:bb:26:44:9e:a3:5f:96:6f:0a:d1:10:9b:c8:
0d:7b:00:f4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEsqUL2TZJcGxjs+4vws05oMSslcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC
RTBERkQzMzAeFw0yMjA5MjcwOTMyMTJaFw0yMzA5MjYwOTM3MTJaMDMxMTAvBgNV
BAMTKEJFMzY1OTkxOTk5MDA2QTM1Nzc4MDMwNkEwRjA2M0U1OTlDQTJERDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy4qQXG9D0edLhmlIaUS9XeF6
r/HeG4DA09fpI25k/yM7Vbos4C9pEV3D41x1ZtmyOtn1iXrl9kYq4Mdk3GbnQ8Zu
6GSN6SZUJ2lmnsH7ei1GeTdDo4zCVQwnW8f0qyI6taaknZfflftrRVndX1Swc1EW
HCnmzXpJdFB2ye3CbH73iEGXxVKMyPqGVY0Dob8U12o/dg2hTpWE543epjcUBBwz
eslcE2XSNYWXXid/ov3iQtlvBh9MLmkzYl4/BgEmuIcylt+X3EvUUcmA7IAjQObO
1zgm65skYnqdC1hKMSqMFRA2eM3IoQ7oZ8W2bjnfvKcRcN6elwKD+mUlnCBdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUvjZZkZmQBqNXeAMGoPBj5ZnKLdkwHwYDVR0j
BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD
MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE
RkQzMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NmQ2YmExLTFmNzMtNDc3Ni04
YTZhLTRmNDUxMjA3OTJiMS8wLzMxMzAzMzJlMzEzOTMxMmUzNTM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ782MA0GCSqG
SIb3DQEBCwUAA4IBAQBfLhvy23yIc/SJnuHuFxid4nxF+w22ukEzXs8zWnGOQRAp
knP7+3CJrnCYJjtjqglPZflih9heltdPHNWAfSw9aE3sZ5+Bw8JmdZds/feMWQYv
785vfGv+fExB2xkWzTk5KDWZ/p/Ff2a4o5ForY9zeU17YZ70IDELraRSLoeiYYLx
h/Ukv4Nzf35dm7M2EfQX+CZ4TO0HCP7AkGKrdb+kMJRvaX2teQLuaILtwVuwBDE1
bkMAa86uPW8Qf+aSq/PfcfkmYG5vKHUB0u5K1TuCLxuKPIkpciA9I351brW9yuvx
CLwZHFBEkZBWajU6+bsmRJ6jX5ZvCtEQm8gNewD0
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:24 2025 by rpki-client