Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313339393732.roa
File: 3130332e3136342e36392e302f32342d3234203d3e20313339393732.roa (raw, json)
Hash identifier: k9eCbyIs8wxBay9z04PQcAgq2Ho8kn4J9qu1oEgXwCc=
Subject key identifier: 22:38:42:BC:06:5A:1B:0C:25:CC:83:46:77:08:24:CB:4C:13:FC:61
Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
Certificate serial: 6DC2B49FBE167AE33B5636ADC003AF91A95C5CE1
Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313339393732.roa
Signing time: Wed 07 Sep 2022 06:53:54 +0000
ROA not before: Wed 07 Sep 2022 06:48:54 +0000
ROA not after: Wed 06 Sep 2023 06:53:54 +0000
asID: 139972
IP address blocks: 103.164.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c2:b4:9f:be:16:7a:e3:3b:56:36:ad:c0:03:af:91:a9:5c:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
Validity
Not Before: Sep 7 06:48:54 2022 GMT
Not After : Sep 6 06:53:54 2023 GMT
Subject: CN=223842BC065A1B0C25CC8346770824CB4C13FC61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:2c:02:e9:ff:03:91:4a:14:b9:25:70:21:
0e:76:e6:90:3f:f2:0b:23:a7:3e:4a:3a:83:0f:84:
c2:8e:b0:22:d6:a3:2e:14:de:ff:cd:4f:67:03:02:
07:8e:3b:2c:c0:d0:7d:1e:1a:88:42:12:86:e5:b4:
6c:cf:94:7b:f3:6e:00:6f:ca:02:e5:89:2c:57:20:
d5:18:a1:14:2b:cc:1d:98:cd:a6:70:43:50:c6:3b:
34:c4:6d:24:de:d4:0b:20:28:64:af:bf:38:1e:4d:
7b:96:7a:3a:d2:d5:83:b4:d6:74:d3:e3:d5:ab:ec:
35:39:38:55:86:c3:43:ed:8b:cb:97:50:87:f5:be:
22:ac:13:59:6a:25:fa:5d:be:c3:3e:e0:00:c9:5e:
d6:0b:17:01:17:8e:14:a6:67:ba:83:48:9e:5f:30:
77:ff:57:5e:61:78:06:61:a3:ea:82:82:49:38:16:
8d:c6:2b:2c:79:f1:35:d8:75:62:66:50:61:d8:81:
f6:71:c3:84:4f:c9:b2:73:c7:81:00:ad:ba:db:c6:
eb:e5:4e:fd:5f:d1:26:e1:d1:d8:c4:36:14:82:e1:
f1:06:93:e5:64:f5:fb:53:ee:8e:de:54:45:c1:05:
eb:da:ef:db:e8:5a:7e:56:f4:35:91:f8:10:b1:fe:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:42:BC:06:5A:1B:0C:25:CC:83:46:77:08:24:CB:4C:13:FC:61
X509v3 Authority Key Identifier:
keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:28:3e:aa:6c:2c:4d:10:45:62:09:96:a0:20:79:23:06:0c:
b8:d0:7c:b0:e9:35:f3:d3:a0:eb:56:73:9a:a5:b1:89:ef:b9:
61:ec:0a:46:d4:23:f8:68:40:92:c0:cf:f1:50:8c:c8:01:49:
fe:1a:db:d9:7b:5e:01:af:29:06:32:37:e3:90:f7:4d:a4:55:
5e:5d:6e:61:6c:f5:fb:4a:2a:0f:80:c6:33:59:48:1a:44:b5:
da:82:e5:99:04:b6:c6:e5:1b:79:66:ee:5d:a8:3e:8b:da:8c:
ab:73:e8:61:b2:8e:b8:ff:14:0a:ac:fd:97:8f:40:1a:2c:f1:
4e:1a:28:19:92:ec:0a:56:50:59:64:58:a8:48:20:aa:06:78:
f8:60:69:68:cb:d6:99:3f:3d:78:b1:2a:f2:e5:75:aa:40:07:
6c:65:12:f6:39:0c:4d:d9:39:54:36:a1:08:0e:3b:7f:46:4c:
d8:07:b5:c0:a0:a3:4a:ce:9d:d9:5f:7e:a1:c4:67:b3:10:c9:
93:d2:d2:c9:cf:88:c0:26:d2:31:51:fd:7d:3c:dc:94:b8:95:
12:b8:25:a2:55:08:55:66:85:48:c5:5a:f7:81:00:d0:a6:27:
4f:68:39:c9:a9:0b:ae:9d:82:38:92:69:b9:f1:8e:09:0f:69:
af:36:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org