Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20313331373034.roa
File: 3130332e382e39362e302f32322d3232203d3e20313331373034.roa (raw, json)
Hash identifier: uYF8+mAp3kUG5JaoBgWqLde1RHj9ROfUdmYn0kibP0o=
Subject key identifier: 59:65:A9:CF:7A:CB:16:F9:53:F3:A4:26:92:90:73:9E:E5:2F:88:56
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 44027C7B8BF3D614EB720145E96CFF936887E26E
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20313331373034.roa
Signing time: Fri 09 Sep 2022 06:42:49 +0000
ROA not before: Fri 09 Sep 2022 06:37:49 +0000
ROA not after: Fri 08 Sep 2023 06:42:49 +0000
asID: 131704
IP address blocks: 103.8.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:02:7c:7b:8b:f3:d6:14:eb:72:01:45:e9:6c:ff:93:68:87:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Sep 9 06:37:49 2022 GMT
Not After : Sep 8 06:42:49 2023 GMT
Subject: CN=5965A9CF7ACB16F953F3A4269290739EE52F8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:5a:be:d6:d2:c9:8d:47:fa:4a:ed:07:47:
ec:29:6d:4a:65:22:b5:70:9a:dc:16:67:1f:92:0e:
4c:a9:c2:5a:ac:9b:2b:e1:8c:6d:61:64:05:c8:76:
f2:f3:fa:0e:45:ff:27:4a:2d:cf:44:5a:ce:80:70:
af:8f:0c:c6:ca:0b:69:07:f7:ff:56:8c:73:60:df:
96:f4:9c:d4:43:be:60:3e:2d:4e:1d:79:7d:26:cc:
a6:8a:a7:a6:2e:16:7b:bd:34:9f:31:be:29:3b:b4:
d8:57:5e:75:f4:f6:50:7f:ff:67:56:42:db:18:78:
cf:9d:95:7c:82:1c:72:b4:bd:c2:75:04:79:ba:8f:
9c:6e:cd:4c:db:4b:a2:26:9a:be:14:db:ee:9a:11:
63:5e:89:db:dc:17:6c:a7:17:e9:8f:27:96:7a:aa:
82:49:48:ba:98:53:49:24:f7:86:cc:8b:22:ab:15:
8a:ba:23:f0:93:d1:24:a3:46:70:7a:15:a9:8b:70:
30:80:d1:fb:65:c6:93:98:14:6f:34:b3:45:bd:7b:
2f:e8:ff:49:05:e9:bd:a7:8d:fd:25:68:73:6c:be:
b3:43:fa:ae:9d:31:b2:65:c9:b9:cd:5c:d1:35:9f:
20:24:1d:17:27:b3:f0:20:99:8e:62:08:25:fe:15:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:A9:CF:7A:CB:16:F9:53:F3:A4:26:92:90:73:9E:E5:2F:88:56
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20313331373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:09:3c:da:46:eb:d4:bf:e3:3c:f8:c0:33:29:5c:fa:14:a0:
8d:c9:8d:30:90:88:ef:f0:b7:3d:d1:df:43:86:76:5a:0a:10:
e4:b0:2d:cc:c0:2e:c6:f8:a0:65:56:ff:aa:96:1f:10:74:69:
a9:11:17:bc:d9:0c:89:01:c2:5a:5b:e1:e0:a0:21:f9:9d:46:
b9:b2:b9:08:9b:11:77:55:84:21:8c:94:42:91:93:36:d5:bc:
04:ed:50:33:6b:02:db:12:7d:15:95:98:57:c4:d4:8a:17:7a:
8e:fa:08:c7:0c:ff:1c:41:87:64:24:cc:61:72:08:ed:fe:c3:
4c:01:89:2c:cb:5f:3a:7b:d0:d7:f2:de:2d:8f:a7:57:62:a7:
da:ce:df:7b:46:c3:dd:0e:bc:f6:87:63:55:6e:35:28:d2:bc:
66:a0:a0:39:99:5e:16:e6:f3:35:62:0f:9f:08:35:f3:57:e0:
ba:34:76:4c:ce:a4:bf:e3:74:e5:77:8e:8c:3d:ec:22:08:c8:
cf:88:62:4f:59:ca:1f:c7:2e:72:f4:ba:84:d0:ee:28:c3:09:
0e:ec:1e:0a:64:bd:9e:f3:f0:bc:0f:3e:2e:43:73:02:6f:50:
d3:e7:98:7a:af:ee:7f:ad:3b:8e:8d:99:52:0a:5d:2f:f5:53:
f1:9d:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org