Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3233203d3e20313432333634.roa
File: 3130332e3137302e3130302e302f32332d3233203d3e20313432333634.roa (raw, json)
Hash identifier: t3hCZBiw7DmYvmAN3pj3X30t/EyzdgcF4j18u0UMSCA=
Subject key identifier: 28:3F:1C:47:EC:83:69:31:DA:BF:54:A6:85:DE:06:29:2E:82:A8:2F
Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial: 48DD578D010B8DC90AB9483AA728A4057E908765
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3233203d3e20313432333634.roa
Signing time: Tue 11 Apr 2023 20:38:46 +0000
ROA not before: Tue 11 Apr 2023 20:33:46 +0000
ROA not after: Tue 09 Apr 2024 20:38:46 +0000
asID: 142364
IP address blocks: 103.170.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:dd:57:8d:01:0b:8d:c9:0a:b9:48:3a:a7:28:a4:05:7e:90:87:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Validity
Not Before: Apr 11 20:33:46 2023 GMT
Not After : Apr 9 20:38:46 2024 GMT
Subject: CN=283F1C47EC836931DABF54A685DE06292E82A82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:e5:a1:65:9b:da:97:c7:81:81:6a:6a:0b:
fa:24:d0:8f:c2:60:b0:e3:72:fa:c1:4e:0a:b8:b2:
2d:a1:78:95:12:cd:4b:fa:1c:03:a1:14:07:2c:82:
3b:ac:5d:e7:c9:89:3b:e8:01:07:5b:e5:da:99:a5:
ba:f4:7e:87:6f:15:77:1c:99:56:03:78:8e:f4:4b:
bd:32:b2:d3:17:66:af:0b:73:cc:95:9f:02:c9:42:
72:b4:4f:a7:84:9a:36:68:18:92:de:b4:11:c1:9f:
8d:e8:a7:ea:b5:b0:42:85:2b:30:10:63:db:7a:c8:
48:75:c1:38:7c:76:c2:34:cd:22:fb:b5:a2:90:3c:
26:de:af:f0:8d:02:35:df:42:03:40:0f:b9:a9:81:
48:d1:fd:b3:4e:08:ef:ab:5c:d0:ee:d8:7d:71:34:
72:83:58:b6:ad:36:6c:ba:c8:82:6f:47:fa:46:19:
9b:55:73:0a:5b:56:64:76:1d:b4:17:69:30:6f:41:
6d:5b:56:b0:7f:75:f2:b1:f5:50:00:00:93:c6:9e:
41:5f:b1:d8:93:20:de:b6:c6:01:04:51:c4:a1:6a:
5d:e2:53:ed:33:78:c8:b8:48:aa:db:65:d2:77:d3:
a4:b3:4d:2c:db:53:93:97:d2:9d:01:5f:44:80:5b:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:1C:47:EC:83:69:31:DA:BF:54:A6:85:DE:06:29:2E:82:A8:2F
X509v3 Authority Key Identifier:
keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3233203d3e20313432333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.100.0/23
Signature Algorithm: sha256WithRSAEncryption
15:c7:6f:43:48:50:d3:26:b1:5f:38:57:74:48:1f:80:eb:87:
dc:f5:f1:6f:b5:d8:08:8f:c2:98:0c:c6:7e:62:dd:9b:4a:47:
50:a5:11:b0:27:d5:bc:20:92:ce:0e:ee:75:2f:d5:2a:d5:b0:
71:e5:7f:69:b5:ff:e6:fb:05:dc:78:01:a2:b4:8a:2a:12:35:
84:bf:4a:1b:e6:65:18:5d:53:85:e2:a7:ab:bf:01:38:e1:3f:
8d:47:dd:18:9c:d8:b0:18:d9:cd:c1:03:c1:39:b3:95:fa:0d:
0a:ff:86:a7:ab:85:bb:5c:db:20:a6:1a:52:07:2e:1f:9f:91:
f1:c0:01:fb:b5:18:64:ad:e5:55:a7:01:e9:1d:86:cc:21:ea:
ee:ca:88:35:c2:34:f4:eb:02:cb:7e:58:30:4c:ae:83:53:b8:
7a:1d:fa:a5:57:20:e3:2d:20:12:55:a1:ad:22:79:9e:1f:7c:
16:41:d7:50:17:ec:f3:31:08:2e:ff:40:dd:90:2c:0a:a1:f0:
3f:a6:a1:31:56:3d:90:60:e7:b7:75:a5:17:3e:74:73:d9:15:
df:db:fe:d3:10:64:9d:62:cc:74:48:0e:0f:2e:1a:7f:82:a2:
57:9f:dc:ca:8b:7f:70:d0:f5:cf:eb:1a:f1:1a:a4:b8:19:c4:
fc:8e:4d:b5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSN1XjQELjckKuUg6pyikBX6Qh2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD
MzVFMUU0RjAeFw0yMzA0MTEyMDMzNDZaFw0yNDA0MDkyMDM4NDZaMDMxMTAvBgNV
BAMTKDI4M0YxQzQ3RUM4MzY5MzFEQUJGNTRBNjg1REUwNjI5MkU4MkE4MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ROWhZZval8eBgWpqC/ok0I/C
YLDjcvrBTgq4si2heJUSzUv6HAOhFAcsgjusXefJiTvoAQdb5dqZpbr0fodvFXcc
mVYDeI70S70ystMXZq8Lc8yVnwLJQnK0T6eEmjZoGJLetBHBn43op+q1sEKFKzAQ
Y9t6yEh1wTh8dsI0zSL7taKQPCber/CNAjXfQgNAD7mpgUjR/bNOCO+rXNDu2H1x
NHKDWLatNmy6yIJvR/pGGZtVcwpbVmR2HbQXaTBvQW1bVrB/dfKx9VAAAJPGnkFf
sdiTIN62xgEEUcShal3iU+0zeMi4SKrbZdJ306SzTSzbU5OX0p0BX0SAW6+VAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKD8cR+yDaTHav1Smhd4GKS6CqC8wHwYDVR0j
BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB
MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF
MUU0Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2MWNmNzc3LThhZGYtNGVmMS04
ZDZmLTk4NjJjNTU2MjBlYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTMwMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqmQwDQYJ
KoZIhvcNAQELBQADggEBABXHb0NIUNMmsV84V3RIH4Drh9z18W+12AiPwpgMxn5i
3ZtKR1ClEbAn1bwgks4O7nUv1SrVsHHlf2m1/+b7Bdx4AaK0iioSNYS/ShvmZRhd
U4Xip6u/ATjhP41H3Ric2LAY2c3BA8E5s5X6DQr/hqerhbtc2yCmGlIHLh+fkfHA
Afu1GGSt5VWnAekdhswh6u7KiDXCNPTrAst+WDBMroNTuHod+qVXIOMtIBJVoa0i
eZ4ffBZB11AX7PMxCC7/QN2QLAqh8D+moTFWPZBg57d1pRc+dHPZFd/b/tMQZJ1i
zHRIDg8uGn+Colef3MqLf3DQ9c/rGvEapLgZxPyOTbU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:28:51 2025 by rpki-client