Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20333936393832.roa
File: 3130332e382e39362e302f32322d3232203d3e20333936393832.roa (raw, json)
Hash identifier: EF/2f73e4sk4QsDWLEFW3JPDSd3vslSjN4xMVroZ5wo=
Subject key identifier: D3:86:48:A8:79:F0:AB:69:23:F5:2B:7F:83:41:63:A9:DE:A0:94:87
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 084198B013C1247B166A8A0DA6F478EF99100FF4
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20333936393832.roa
Signing time: Mon 06 Feb 2023 11:42:10 +0000
ROA not before: Mon 06 Feb 2023 11:37:10 +0000
ROA not after: Mon 05 Feb 2024 11:42:10 +0000
asID: 396982
IP address blocks: 103.8.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:41:98:b0:13:c1:24:7b:16:6a:8a:0d:a6:f4:78:ef:99:10:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Feb 6 11:37:10 2023 GMT
Not After : Feb 5 11:42:10 2024 GMT
Subject: CN=D38648A879F0AB6923F52B7F834163A9DEA09487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:31:0c:7c:0c:08:2a:64:01:5f:12:b0:2b:
06:1e:2e:5d:4d:c8:7c:a0:3b:ce:a7:81:3d:86:2a:
78:a7:d5:64:74:a5:bf:73:2c:1b:0c:28:d4:3f:79:
71:be:1f:79:4e:c7:48:14:eb:ed:87:72:ab:e7:02:
11:90:4a:c2:60:0a:7f:5e:2c:6c:32:ea:2b:ac:72:
a8:93:b9:ff:80:26:8c:fd:d9:5c:aa:99:77:69:2d:
76:d5:68:1f:9a:e1:75:f5:ca:4c:d8:7e:d9:d0:65:
b5:24:97:6a:aa:3d:b1:6b:87:75:f7:6a:69:61:53:
2b:6b:24:64:eb:74:cf:d8:03:ed:b5:aa:fd:af:39:
c6:00:a1:b5:27:77:b4:64:95:98:b1:41:74:ce:10:
bd:30:ad:cb:95:b7:ce:7d:7a:1a:ea:15:10:ad:84:
bd:87:66:f8:e7:ef:ab:03:a8:22:17:92:63:bd:81:
49:d7:3a:45:3f:f5:b3:51:07:b3:93:ca:4c:0a:0c:
70:30:13:cc:7a:50:63:f1:00:91:17:16:4d:68:a9:
9e:f0:95:b6:5f:03:a7:8c:32:c7:1a:f7:0a:4f:56:
1e:10:f4:48:66:37:0d:b6:be:5c:0b:5c:9e:63:13:
cc:b1:b4:d1:aa:68:68:f7:5c:94:e6:b9:ae:c2:3d:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:48:A8:79:F0:AB:69:23:F5:2B:7F:83:41:63:A9:DE:A0:94:87
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3232203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:78:9f:54:d0:ef:93:f8:ea:9d:16:0f:a6:4c:86:6b:e9:38:
82:28:bf:4e:a8:4a:5a:37:42:e7:f6:39:30:2b:93:83:fd:9a:
4f:85:7d:cd:4d:07:46:a1:b0:0d:8c:01:5a:3b:eb:46:77:ab:
63:8e:e7:68:50:cc:82:23:60:17:21:f6:a5:43:1f:f3:34:27:
b3:91:6b:db:04:6e:92:53:ab:39:ca:db:de:83:5d:d6:26:f4:
5e:f9:c4:78:df:bf:b8:bd:15:32:ca:07:a8:ae:9d:10:5b:fe:
13:98:d9:1c:ee:e0:ea:b2:de:a7:e0:cd:5f:29:1d:fa:f0:94:
32:22:f8:81:67:0c:77:70:ad:1a:82:65:8f:58:6f:b6:b9:6c:
9f:e6:9f:6a:9c:8c:e4:7d:87:0d:58:cb:5c:6f:d4:70:5d:19:
c6:8e:7b:63:5e:f0:ef:6f:ac:92:69:75:02:47:77:88:e3:19:
81:d0:bc:b9:70:a2:f7:3f:e2:c1:61:ea:f7:80:69:52:e4:0b:
73:96:d8:13:ee:e1:1b:41:99:6d:bc:5f:43:53:0c:8d:88:35:
83:21:3b:72:a4:46:d0:6a:02:24:3c:6f:60:da:73:97:c8:15:
f6:64:f4:ed:59:ae:ba:73:ae:69:af:6e:66:69:e7:2b:52:38:
31:7c:dc:b8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCEGYsBPBJHsWaooNpvR475kQD/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yMzAyMDYxMTM3MTBaFw0yNDAyMDUxMTQyMTBaMDMxMTAvBgNV
BAMTKEQzODY0OEE4NzlGMEFCNjkyM0Y1MkI3RjgzNDE2M0E5REVBMDk0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwjEMfAwIKmQBXxKwKwYeLl1N
yHygO86ngT2GKnin1WR0pb9zLBsMKNQ/eXG+H3lOx0gU6+2HcqvnAhGQSsJgCn9e
LGwy6iuscqiTuf+AJoz92VyqmXdpLXbVaB+a4XX1ykzYftnQZbUkl2qqPbFrh3X3
amlhUytrJGTrdM/YA+21qv2vOcYAobUnd7RklZixQXTOEL0wrcuVt859ehrqFRCt
hL2HZvjn76sDqCIXkmO9gUnXOkU/9bNRB7OTykwKDHAwE8x6UGPxAJEXFk1oqZ7w
lbZfA6eMMsca9wpPVh4Q9EhmNw22vlwLXJ5jE8yxtNGqaGj3XJTmua7CPSC9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU04ZIqHnwq2kj9St/g0Fjqd6glIcwHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzODA2MWYxLWZhMzAtNGJkNi04
MWEwLTJlYzY3MDgzNmM0Mi8wLzMxMzAzMzJlMzgyZTM5MzYyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMzM5MzYzOTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCGAwDQYJKoZIhvcN
AQELBQADggEBAIx4n1TQ75P46p0WD6ZMhmvpOIIov06oSlo3Quf2OTArk4P9mk+F
fc1NB0ahsA2MAVo760Z3q2OO52hQzIIjYBch9qVDH/M0J7ORa9sEbpJTqznK296D
XdYm9F75xHjfv7i9FTLKB6iunRBb/hOY2Rzu4Oqy3qfgzV8pHfrwlDIi+IFnDHdw
rRqCZY9Yb7a5bJ/mn2qcjOR9hw1Yy1xv1HBdGcaOe2Ne8O9vrJJpdQJHd4jjGYHQ
vLlwovc/4sFh6veAaVLkC3OW2BPu4RtBmW28X0NTDI2INYMhO3KkRtBqAiQ8b2Da
c5fIFfZk9O1ZrrpzrmmvbmZp5ytSODF83Lg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org