Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20323131343539.roa
File: 3130332e3134382e37372e302f32342d3234203d3e20323131343539.roa (raw, json)
Hash identifier: P6lJvZaWZ6PxhiRdBSDJulewt7N77uTCYVpSX9JIabc=
Subject key identifier: 84:E6:96:1E:B9:71:51:85:2C:DE:AB:54:4D:4D:DE:B3:4D:8E:B0:9A
Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0
Certificate serial: 5896B0BE4449D8D2E456244ADF2C0BB8A69BBDC7
Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20323131343539.roa
Signing time: Thu 18 May 2023 05:00:47 +0000
ROA not before: Thu 18 May 2023 04:55:47 +0000
ROA not after: Thu 16 May 2024 05:00:47 +0000
asID: 211459
IP address blocks: 103.148.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:96:b0:be:44:49:d8:d2:e4:56:24:4a:df:2c:0b:b8:a6:9b:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0
Validity
Not Before: May 18 04:55:47 2023 GMT
Not After : May 16 05:00:47 2024 GMT
Subject: CN=84E6961EB97151852CDEAB544D4DDEB34D8EB09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:ab:e4:1c:41:be:0c:5c:36:04:1a:05:82:
2d:7c:4c:35:9f:23:38:24:00:ca:bf:dc:37:bb:b5:
f3:8b:c1:82:88:16:bc:f9:72:66:7c:68:08:af:6b:
26:f1:2b:7c:d7:1d:05:75:70:2d:8a:f6:dc:e0:55:
d3:65:ed:d8:6e:2e:45:ae:5a:69:93:9b:85:2c:21:
f4:6b:bc:83:f4:43:c3:97:8b:87:c2:4e:eb:18:47:
d9:2b:6d:10:91:c5:16:74:5c:29:07:8f:7f:32:bc:
d6:63:db:cb:9f:16:d7:6c:26:92:ad:90:52:8e:16:
38:4f:47:ed:b4:20:e0:b4:a1:32:d8:eb:de:8c:16:
61:b5:74:0b:9d:ea:53:5a:cc:75:a1:04:67:c7:b5:
9e:47:be:c7:1c:13:c0:59:db:b9:ef:e2:48:a7:c8:
20:95:8c:5c:8e:93:b2:c9:43:64:6f:e7:ca:67:b1:
9f:b5:a2:e0:a4:19:1a:7f:34:be:d5:b1:9d:fd:8e:
a3:82:5e:33:47:70:36:5c:b7:eb:a5:4a:f7:d8:65:
26:a4:a2:63:0d:7d:75:58:99:09:ae:b9:ec:ef:f8:
d3:98:05:b1:e5:b3:84:70:5a:4e:4a:94:9b:65:6b:
06:1f:4d:c3:59:13:44:69:84:fb:9e:f4:bf:ab:75:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:96:1E:B9:71:51:85:2C:DE:AB:54:4D:4D:DE:B3:4D:8E:B0:9A
X509v3 Authority Key Identifier:
keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20323131343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.77.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9f:6f:1c:f4:fc:a6:ee:c1:ed:8c:53:a1:b8:32:96:f6:b6:
73:87:26:64:7d:11:60:88:e0:55:eb:dc:d6:df:26:c3:17:ac:
e2:af:13:3a:ed:16:91:17:f4:ae:d3:f0:ea:44:f4:e3:fe:5a:
c5:4e:42:fe:42:69:bd:04:1e:5c:8c:51:3d:1d:52:e6:6b:81:
38:a3:d2:ea:ae:08:23:ed:45:84:3c:65:5b:aa:e7:2b:09:f8:
41:b2:75:51:db:bf:7d:80:b0:77:29:fc:4e:36:71:43:f0:71:
b5:e7:18:68:fd:79:34:67:2a:64:23:56:50:34:39:b2:0f:c1:
0e:03:18:17:6c:a5:9d:48:5e:7b:fb:b9:4d:85:be:8e:f3:59:
6e:1f:30:07:2b:57:72:2a:6e:3d:65:cf:a2:7e:9e:ac:a5:84:
de:43:fa:48:6e:78:5c:91:0c:6f:68:8e:ea:48:17:99:69:d6:
fe:9a:39:55:36:90:93:e8:f3:b6:58:71:74:57:d3:59:3f:b4:
a8:d1:bd:b6:c8:06:09:e8:fa:78:64:35:a7:30:42:20:cc:7d:
49:17:75:d2:47:7e:de:ac:ed:19:48:4f:0b:fa:1e:ef:8d:9e:
f6:86:59:40:da:2c:7a:6b:66:25:be:56:96:74:88:13:c2:86:
71:ce:0c:f5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWJawvkRJ2NLkViRK3ywLuKabvccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0
MkQ4MzVEMDAeFw0yMzA1MTgwNDU1NDdaFw0yNDA1MTYwNTAwNDdaMDMxMTAvBgNV
BAMTKDg0RTY5NjFFQjk3MTUxODUyQ0RFQUI1NDRENERERUIzNEQ4RUIwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguqvkHEG+DFw2BBoFgi18TDWf
IzgkAMq/3De7tfOLwYKIFrz5cmZ8aAivaybxK3zXHQV1cC2K9tzgVdNl7dhuLkWu
WmmTm4UsIfRrvIP0Q8OXi4fCTusYR9krbRCRxRZ0XCkHj38yvNZj28ufFtdsJpKt
kFKOFjhPR+20IOC0oTLY696MFmG1dAud6lNazHWhBGfHtZ5HvsccE8BZ27nv4kin
yCCVjFyOk7LJQ2Rv58pnsZ+1ouCkGRp/NL7VsZ39jqOCXjNHcDZct+ulSvfYZSak
omMNfXVYmQmuuezv+NOYBbHls4RwWk5KlJtlawYfTcNZE0RphPue9L+rdapRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhOaWHrlxUYUs3qtUTU3es02OsJowHwYDVR0j
BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD
Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4
MzVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04
YzRlLWI4MTkyZGVjYzM5YS8wLzMxMzAzMzJlMzEzNDM4MmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTMxMzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RNMA0GCSqG
SIb3DQEBCwUAA4IBAQCSn28c9Pym7sHtjFOhuDKW9rZzhyZkfRFgiOBV69zW3ybD
F6zirxM67RaRF/Su0/DqRPTj/lrFTkL+Qmm9BB5cjFE9HVLma4E4o9Lqrggj7UWE
PGVbqucrCfhBsnVR2799gLB3KfxONnFD8HG15xho/Xk0ZypkI1ZQNDmyD8EOAxgX
bKWdSF57+7lNhb6O81luHzAHK1dyKm49Zc+ifp6spYTeQ/pIbnhckQxvaI7qSBeZ
adb+mjlVNpCT6PO2WHF0V9NZP7So0b22yAYJ6Pp4ZDWnMEIgzH1JF3XSR37erO0Z
SE8L+h7vjZ72hllA2ix6a2YlvlaWdIgTwoZxzgz1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org