Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e203137343530.roa
File: 3130332e382e39362e302f32322d3232203d3e203137343530.roa (raw, json)
Hash identifier: 3W8tGjLHap7+fITsAIZmbfp1CEU1ZThcUytnjIRf520=
Subject key identifier: EA:F2:A2:43:60:4F:6C:6D:22:18:45:E7:1C:2C:4E:D0:CC:9F:4B:4D
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 6721C1A09FDF45A6F5A8CF1A6C08A4B346750798
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e203137343530.roa
Signing time: Wed 15 Feb 2023 05:07:11 +0000
ROA not before: Wed 15 Feb 2023 05:02:11 +0000
ROA not after: Wed 14 Feb 2024 05:07:11 +0000
asID: 17450
IP address blocks: 103.8.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:21:c1:a0:9f:df:45:a6:f5:a8:cf:1a:6c:08:a4:b3:46:75:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Feb 15 05:02:11 2023 GMT
Not After : Feb 14 05:07:11 2024 GMT
Subject: CN=EAF2A243604F6C6D221845E71C2C4ED0CC9F4B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:be:f2:3f:e4:cf:e2:ef:d4:5b:30:ee:86:
0e:0e:54:1c:00:f4:c1:ac:b1:6c:c1:4f:28:2d:88:
9e:16:f9:38:ec:58:c0:12:c1:67:d6:b8:38:07:2a:
f9:a0:0d:03:5d:2d:b4:5f:f8:bf:d3:fb:97:72:03:
8f:b8:f9:dc:08:e8:5d:b3:ce:dd:9d:d4:7b:ce:45:
ce:51:89:cf:4f:1e:01:d8:1f:80:80:a4:e4:c8:d7:
09:35:0e:65:a8:53:66:20:fe:94:3b:54:c0:cc:a7:
83:08:a4:57:1c:cd:0c:7d:f5:48:9a:95:18:c9:82:
d4:fa:3f:1b:ce:e3:71:a4:df:90:b8:22:36:8c:50:
61:dd:a8:fc:d9:66:88:84:f1:cb:66:80:b2:c2:d7:
45:1e:b6:c7:2b:d2:68:47:a0:6f:7f:6a:87:70:b4:
04:c7:d7:11:02:fd:61:df:3d:de:3a:87:54:75:d4:
78:f0:2c:f7:2b:49:01:a6:3d:80:97:6c:76:9f:33:
86:46:a2:71:f8:6b:5f:a6:e1:4e:8d:ea:af:12:b9:
a8:da:c9:f4:4d:82:08:9d:c4:60:e2:77:c7:0b:1c:
9a:ff:27:7f:05:8b:14:42:ff:a9:c7:03:03:33:52:
f1:7a:49:ce:15:e5:d9:e9:6e:3d:70:59:cf:9e:4d:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:A2:43:60:4F:6C:6D:22:18:45:E7:1C:2C:4E:D0:CC:9F:4B:4D
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.96.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b1:06:cc:36:11:37:4b:11:6d:63:f3:bd:bf:68:8a:e2:36:
0b:d6:ab:64:92:cc:0f:e7:2a:80:81:5d:47:6f:08:a1:66:8f:
09:10:64:b8:7d:10:2b:d3:1a:be:f8:d4:c0:cc:8d:9f:6d:39:
51:31:2a:a6:5e:85:18:93:63:b0:cb:cc:aa:ee:f9:1a:c1:75:
76:c0:67:63:f1:e9:81:62:eb:3c:45:65:25:c8:bd:88:ae:7a:
99:19:cb:22:f2:77:c9:eb:c5:a6:87:f8:a9:c3:5d:6a:68:0e:
d5:62:ec:71:d9:06:6f:19:69:dd:39:e1:39:c6:47:51:6b:c1:
76:76:59:70:5e:e1:95:19:9e:20:55:71:91:7e:cc:de:e1:9f:
fb:43:8e:43:67:c3:31:cd:97:52:b0:7e:f4:18:c8:3f:71:57:
b6:bc:21:c8:8f:26:68:0d:cb:d5:0f:8e:cc:4d:b6:32:27:be:
6b:3a:03:89:a7:9f:7a:bb:22:28:3c:3d:42:f9:11:18:1d:95:
79:6d:c2:b4:a1:24:02:19:1f:86:c7:24:ed:76:57:c3:6d:a6:
03:55:ee:3e:a4:c2:4f:69:ab:8c:e8:8a:bd:00:7f:45:84:b8:
8a:57:98:ca:b9:1b:ec:3e:92:e2:94:a1:17:85:39:4b:fe:92:
66:5d:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org