Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3233203d3e20313432333436.roa
File: 3130332e3136392e382e302f32332d3233203d3e20313432333436.roa (raw, json)
Hash identifier: oQBZrjOyQl3R3W2Yr/vpI1pvOn3nr0+vTQ0f/f3Mp4A=
Subject key identifier: 8D:43:56:2A:F5:66:89:00:DB:FF:CB:12:1D:61:AC:DD:04:5D:B6:76
Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Certificate serial: 7F95CAC25F5F2B87FCAFEB297304FA9998029E57
Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3233203d3e20313432333436.roa
Signing time: Thu 07 Jul 2022 05:21:00 +0000
ROA not before: Thu 07 Jul 2022 05:16:00 +0000
ROA not after: Thu 06 Jul 2023 05:21:00 +0000
asID: 142346
IP address blocks: 103.169.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:95:ca:c2:5f:5f:2b:87:fc:af:eb:29:73:04:fa:99:98:02:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Validity
Not Before: Jul 7 05:16:00 2022 GMT
Not After : Jul 6 05:21:00 2023 GMT
Subject: CN=8D43562AF5668900DBFFCB121D61ACDD045DB676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:91:ba:86:cb:e4:a7:1c:d3:89:03:f9:6c:
e9:76:35:70:47:20:de:d6:05:0c:db:63:e8:83:5d:
29:c6:5f:a2:ff:f1:a4:b7:58:e6:27:6f:81:a1:9b:
dc:97:a9:05:ea:05:eb:7d:2b:92:35:2b:84:d6:ec:
ad:7d:e1:a7:e3:9a:78:02:1e:a7:f5:d0:9d:01:f0:
50:33:98:89:9e:aa:90:61:c5:85:49:6d:a0:2a:64:
b9:f1:a7:ae:42:bd:f8:ea:0a:14:a2:bd:30:e3:ae:
2e:1d:4d:e0:a4:8d:46:96:8d:67:a2:e6:f3:91:d1:
9b:8e:d1:35:12:b9:86:8b:27:e9:70:f1:f0:9f:5a:
28:34:e1:95:4e:48:92:71:06:bc:50:36:87:cf:4c:
53:81:29:26:89:b6:b0:1c:c0:90:f6:25:99:32:89:
cb:b3:52:d8:3c:fb:9c:f1:1a:bf:98:93:66:fe:9d:
53:d1:96:6b:2d:41:87:7f:18:34:90:aa:32:bc:96:
b4:0f:15:86:fe:ad:04:e9:e8:ad:cb:38:18:de:03:
02:d5:c7:2f:42:0c:ff:c2:78:8b:56:42:0f:68:ac:
89:21:54:09:0a:19:ff:37:54:38:14:ef:ce:7a:bb:
1f:e6:b2:98:e6:9f:9d:6e:52:7a:b6:74:49:08:2e:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:43:56:2A:F5:66:89:00:DB:FF:CB:12:1D:61:AC:DD:04:5D:B6:76
X509v3 Authority Key Identifier:
keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3233203d3e20313432333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:90:00:1c:56:62:2e:0f:fd:04:13:32:85:7a:33:a9:16:2d:
a3:e5:d5:42:94:73:71:cf:a5:73:4c:53:49:d1:6b:66:15:08:
c0:61:d4:c4:7d:87:cd:5c:21:67:85:f1:dd:42:ac:60:91:69:
04:a0:ac:51:4f:21:8b:c3:2f:fc:98:e8:e9:50:8f:26:b3:ed:
b4:4b:4f:f2:29:65:33:b6:c4:f7:ca:48:fa:d5:dd:4a:e0:5f:
6f:8e:00:03:b2:66:a2:db:d8:84:04:e0:2e:07:0c:dc:25:9f:
97:a4:f7:cc:95:da:b4:6f:a0:cf:d2:47:b6:d0:79:21:99:41:
bd:6c:a2:eb:3b:55:97:03:2e:bb:c0:cb:83:bf:bf:5d:d7:e5:
43:e5:af:f8:66:e7:2d:94:c4:76:68:47:8e:49:1a:5c:38:e2:
f6:27:fd:85:81:da:ab:a7:67:c1:03:42:6e:91:00:61:f2:37:
e2:fb:62:42:76:af:e8:ef:ed:c5:4b:26:51:3f:9d:62:36:79:
26:02:ec:3f:58:b3:66:b5:b2:fd:e2:a7:f2:79:56:6a:0d:17:
93:8b:4f:1f:44:2f:d4:84:0d:de:7f:4b:29:e0:65:d2:5d:1f:
67:0b:e1:7b:cc:32:33:60:4f:c9:36:e2:1c:f3:75:25:29:fa:
66:f5:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org