Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38342e302f32332d3233203d3e20313530323337.roa
File: 3130332e32302e38342e302f32332d3233203d3e20313530323337.roa (raw, json)
Hash identifier: jBZ1kzWEVO8dZUL6BaQpGk8HnO+oYVdogA+fKZYYSrY=
Subject key identifier: 7A:92:6D:4D:3B:07:82:5D:64:E5:02:1F:D2:14:FE:5B:C0:0D:D3:5F
Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Certificate serial: 18ACBC910EBA5BCC6F8DAE617F90985F41202440
Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38342e302f32332d3233203d3e20313530323337.roa
Signing time: Mon 24 Oct 2022 05:56:11 +0000
ROA not before: Mon 24 Oct 2022 05:51:11 +0000
ROA not after: Mon 23 Oct 2023 05:56:11 +0000
asID: 150237
IP address blocks: 103.20.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ac:bc:91:0e:ba:5b:cc:6f:8d:ae:61:7f:90:98:5f:41:20:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Validity
Not Before: Oct 24 05:51:11 2022 GMT
Not After : Oct 23 05:56:11 2023 GMT
Subject: CN=7A926D4D3B07825D64E5021FD214FE5BC00DD35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:6f:e5:75:85:2a:bb:b7:a9:80:84:70:97:
e0:93:3f:23:4e:c5:82:25:f6:30:53:2d:67:72:ff:
c1:20:b2:46:86:65:bf:55:c5:ce:d3:78:8d:2b:18:
9a:31:7e:a9:d8:d0:a2:ce:89:9c:28:75:6a:e3:c2:
90:07:50:1e:36:0d:4a:28:d2:fe:b2:a1:16:5d:8e:
03:7d:4d:76:ab:e2:5d:85:3f:85:05:10:fd:d0:b5:
34:e7:fb:7a:5d:08:2e:2d:76:9d:29:5d:5b:a5:9b:
92:3a:ef:8e:70:1a:f0:05:2f:99:0e:b7:35:2e:9f:
10:a1:76:9d:8e:f6:c5:f8:33:bd:ad:8c:c5:eb:0c:
d5:a0:a6:e9:e8:7e:8d:91:93:02:b3:85:e0:b3:60:
23:03:aa:bb:58:87:b9:8e:80:04:08:e9:c4:10:e0:
52:fc:6b:10:60:ac:79:ba:45:49:e5:de:d1:89:92:
45:66:0e:4f:ec:5f:3d:88:98:65:9a:11:84:f1:dd:
5a:e1:68:dd:34:50:ab:1a:0d:73:f7:b4:dc:e3:6d:
35:20:b1:26:2e:a5:2b:27:3d:82:45:3e:e4:19:26:
f5:87:06:6a:2a:68:23:76:90:b2:59:75:29:04:fc:
8c:3f:59:c9:04:6f:e8:9a:6c:9b:51:14:89:ca:94:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:6D:4D:3B:07:82:5D:64:E5:02:1F:D2:14:FE:5B:C0:0D:D3:5F
X509v3 Authority Key Identifier:
keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38342e302f32332d3233203d3e20313530323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.84.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:d4:af:3d:f5:5b:a6:60:53:d1:1c:b5:33:fd:b3:2e:8b:4f:
50:2d:ca:66:b7:76:31:97:a0:12:13:0b:56:81:ab:f7:5d:03:
53:cf:0a:21:e3:c6:5c:06:1c:f0:84:2b:17:51:f5:df:3f:6d:
e6:d8:2e:c1:cf:ba:5c:55:6c:9b:dd:ee:b8:85:ce:0b:a4:97:
f1:53:14:ad:96:33:e9:f9:d0:4f:a0:6e:70:23:9f:02:63:a3:
f4:57:2a:fd:7c:2c:d5:29:ce:90:29:7f:4c:9f:04:41:83:3d:
00:5e:4b:89:2c:93:22:35:c0:b2:96:fd:2a:6f:7d:dc:d9:13:
0c:87:0b:76:36:06:4a:98:b5:b8:b8:3f:2a:52:0e:0c:89:aa:
43:28:4d:b7:2d:10:4a:a5:37:b5:07:05:42:d6:61:86:d9:2e:
af:c4:9b:73:eb:a3:e0:ef:ce:c0:df:62:5f:6f:dc:e5:c2:4b:
3b:21:b6:40:57:0e:cd:9b:29:c8:39:ff:cb:44:92:14:f3:18:
2c:3a:4d:e6:55:98:81:c0:1f:93:d5:22:4c:98:0e:2b:04:72:
41:bc:eb:e4:d2:33:d6:3a:51:b0:3b:cf:9e:49:2a:ec:4f:b4:
82:89:bf:cf:8e:f6:e0:1e:fd:58:cc:11:09:c7:29:0d:ff:5f:
c5:59:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org