Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313032.roa
File: 3130332e3137372e382e302f32332d3234203d3e20313437313032.roa (raw, json)
Hash identifier: xaxYIdD4n3ycadil9Qei1E1a5Nc7ZmP4zvs44Scl3Nk=
Subject key identifier: 53:FE:3B:FA:0C:92:1E:23:B8:96:A6:67:4E:50:E2:3F:23:15:81:05
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 3622D0AE231FECDE5D7F2AA385E510C8A383CBE1
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313032.roa
Signing time: Thu 11 Aug 2022 16:02:57 +0000
ROA not before: Thu 11 Aug 2022 15:57:57 +0000
ROA not after: Thu 10 Aug 2023 16:02:57 +0000
asID: 147102
IP address blocks: 103.177.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:22:d0:ae:23:1f:ec:de:5d:7f:2a:a3:85:e5:10:c8:a3:83:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Aug 11 15:57:57 2022 GMT
Not After : Aug 10 16:02:57 2023 GMT
Subject: CN=53FE3BFA0C921E23B896A6674E50E23F23158105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:aa:21:2e:5c:5b:a0:cd:86:26:52:88:63:
91:59:6e:67:12:7c:7c:80:97:db:9e:c1:62:c6:dd:
5d:4b:8f:37:e2:19:fa:31:d9:69:52:cc:1b:e8:ae:
62:2e:b1:6e:6a:65:3e:77:40:df:c9:c2:d8:ea:85:
c1:70:c9:88:a8:02:e7:9d:ba:a2:70:51:5e:ce:00:
ba:39:49:64:73:83:16:0b:22:f0:ab:0a:9f:07:1c:
7f:26:8b:3a:f2:47:23:94:40:8f:d8:43:ae:19:31:
14:90:f0:df:0e:30:46:2e:67:3c:ca:cd:46:29:20:
c5:bb:e5:c2:b2:e8:8f:9f:7f:1c:1f:3f:e0:17:b4:
30:11:a5:29:ad:99:60:0c:7e:9e:99:a5:14:1b:8c:
7f:06:71:41:15:fd:c1:2f:1b:80:31:10:90:dd:8e:
72:79:94:40:85:73:f7:47:b8:27:63:1f:5a:04:04:
1a:06:6d:f1:01:da:91:d4:cd:38:c2:1b:61:e1:39:
6f:82:be:91:2f:42:d4:5e:6b:2c:7b:e4:36:58:d8:
1b:d1:34:6b:f0:eb:be:56:87:b7:04:2a:f1:62:49:
cf:0e:c6:fd:27:6a:11:1f:8c:e5:1d:3a:93:e4:f9:
01:5a:fb:6a:9c:ec:89:f0:92:c9:52:dd:81:6e:f6:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:3B:FA:0C:92:1E:23:B8:96:A6:67:4E:50:E2:3F:23:15:81:05
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.8.0/23
Signature Algorithm: sha256WithRSAEncryption
87:6a:b3:69:06:13:09:04:96:43:c7:99:b1:4f:63:20:4b:7c:
80:c4:ff:60:51:c6:a6:d3:15:eb:30:30:05:8e:44:e4:56:37:
1f:90:3f:c3:85:d9:f3:0e:ca:34:46:84:6a:6e:fe:c3:51:71:
4e:77:57:57:69:6b:26:1e:87:18:97:63:da:f1:c0:01:14:4a:
66:73:4e:d9:c2:93:0f:69:7b:72:e6:1a:88:ac:73:9a:47:01:
92:ba:95:f4:24:f5:5c:d9:04:2b:02:e2:7f:5f:e5:eb:d0:e1:
3b:a6:30:dd:d8:01:38:fe:7f:f0:b5:12:ca:14:db:cd:81:bf:
c2:f4:77:ba:ff:92:f6:dc:1d:5d:75:4b:0b:c9:3b:ac:08:50:
6d:ed:f7:53:3d:50:6f:85:2b:cb:c9:34:0b:29:bb:fa:89:9d:
24:80:23:e8:35:5d:94:e2:4b:8b:88:a6:18:86:da:9a:cd:cb:
f7:88:e7:a7:c3:64:d9:45:c2:31:b9:75:29:c2:27:81:56:1f:
cb:a7:a9:dc:a3:4b:5b:b9:4e:7e:30:16:07:97:07:b2:7f:35:
6b:cf:6f:80:40:1b:50:71:87:6e:09:a8:3d:d7:12:3e:c5:09:
c8:86:cc:77:0f:4f:dc:0a:08:14:ae:76:61:81:af:6d:29:06:
e2:fb:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org