Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313432333534.roa
File: 3130332e3136342e36392e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier: JBTyLQBzoElsNfnl1Klu0HOGYlyyqLDTeleF6j+XHvk=
Subject key identifier: E8:20:2E:D3:4B:01:C5:E6:E1:FC:67:9D:C5:3B:81:66:92:8C:10:CB
Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
Certificate serial: 6DC1288A8556640EE3785C8D253D16C23FCAD059
Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313432333534.roa
Signing time: Sat 16 Jul 2022 14:17:28 +0000
ROA not before: Sat 16 Jul 2022 14:12:28 +0000
ROA not after: Sat 15 Jul 2023 14:17:28 +0000
asID: 142354
IP address blocks: 103.164.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c1:28:8a:85:56:64:0e:e3:78:5c:8d:25:3d:16:c2:3f:ca:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
Validity
Not Before: Jul 16 14:12:28 2022 GMT
Not After : Jul 15 14:17:28 2023 GMT
Subject: CN=E8202ED34B01C5E6E1FC679DC53B8166928C10CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:10:5a:02:08:65:f2:ff:a6:b5:d1:03:f4:
e1:15:72:35:68:f5:a4:24:65:a4:30:07:4f:00:11:
6d:7d:78:61:f3:db:03:6d:44:ef:5c:19:9b:5f:fb:
8f:9b:48:da:b2:15:09:b2:de:44:c5:6f:b9:e4:d8:
4c:0f:5a:85:ae:34:29:91:7e:b7:6e:77:0c:c3:7c:
4b:ca:5a:19:15:fe:46:40:b9:e9:90:f7:34:bf:c2:
c8:7b:c6:54:18:16:28:26:c4:cd:77:42:96:22:de:
b0:e0:21:4a:94:f8:9d:a5:34:2e:6a:dc:6a:0e:44:
d0:1c:8a:dd:7d:56:c2:80:5a:70:25:cd:be:9c:15:
65:30:f3:f1:0c:48:34:d5:3f:80:12:88:18:1a:dc:
c4:ab:5d:9f:16:fe:22:b0:df:3d:76:6f:db:15:8b:
9a:f7:81:0a:d8:10:d5:0b:dd:0a:66:2f:cc:50:22:
49:99:5a:03:06:11:3e:4a:9d:09:59:2e:d2:9f:a3:
03:bc:c3:df:df:43:ff:28:53:72:67:9d:40:37:69:
74:fb:df:e6:92:0d:48:ac:58:06:1a:32:52:25:fe:
d0:61:c8:d2:ba:2c:17:51:10:07:01:fd:36:19:90:
a1:8e:e3:9f:24:86:c8:69:96:b5:2f:78:49:10:fb:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:20:2E:D3:4B:01:C5:E6:E1:FC:67:9D:C5:3B:81:66:92:8C:10:CB
X509v3 Authority Key Identifier:
keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:1d:e4:f8:24:27:16:df:be:a0:52:54:b8:12:63:be:73:1a:
a0:74:cb:90:88:61:78:2c:ed:cd:dd:65:80:25:ef:56:f8:0c:
32:97:95:60:b1:08:45:5a:6c:d0:45:cf:78:17:a4:48:1e:48:
c1:04:07:69:fc:59:34:58:4a:00:0c:55:8a:65:76:40:c3:52:
09:98:38:19:38:c3:9f:2d:1a:d1:59:49:68:dd:42:93:e0:22:
35:9d:87:27:ba:00:1d:62:10:92:55:d8:a4:ee:0e:8b:c6:f5:
4e:5e:0c:68:48:78:7f:29:98:d5:25:f3:0d:c7:16:4b:f8:4e:
ac:cf:b2:11:8e:f6:94:ca:51:b0:73:bb:e0:78:59:98:4f:5a:
19:d1:d0:27:71:8a:9d:1d:8a:14:e2:34:a8:17:41:09:be:2f:
a2:99:55:b8:dc:c3:d6:82:61:f3:57:9e:9d:2d:24:d9:c1:12:
40:74:dc:83:6f:b1:6a:1e:eb:f3:c4:3d:64:f9:d9:6a:c2:f2:
94:13:98:12:78:90:68:52:85:80:ac:80:f3:a0:0f:ac:ef:b7:
6a:8e:31:a5:26:04:08:16:0d:92:70:af:d4:94:df:7e:17:5c:
de:98:ee:67:35:42:b2:14:db:9d:75:2e:73:1b:3f:57:5d:30:
09:d8:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org