Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e203137393232.roa
File: 3130332e3138392e302e302f32332d3233203d3e203137393232.roa (raw, json)
Hash identifier: Trv875WmSohnqGoeyuwQNbqwy/zBsy//ILKJVze8tq8=
Subject key identifier: CD:59:97:D5:24:37:62:D2:EA:D3:1F:00:9B:D7:9C:B0:F2:14:37:03
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 49345FFE6EB93FFC2F0E09177B77A61589159F44
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e203137393232.roa
Signing time: Thu 07 Jul 2022 09:02:40 +0000
ROA not before: Thu 07 Jul 2022 08:57:40 +0000
ROA not after: Thu 06 Jul 2023 09:02:40 +0000
asID: 17922
IP address blocks: 103.189.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:34:5f:fe:6e:b9:3f:fc:2f:0e:09:17:7b:77:a6:15:89:15:9f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Jul 7 08:57:40 2022 GMT
Not After : Jul 6 09:02:40 2023 GMT
Subject: CN=CD5997D5243762D2EAD31F009BD79CB0F2143703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:c6:a5:bf:2c:dc:84:b0:72:76:3a:29:5e:
55:b9:a7:ba:cf:48:9d:57:09:cd:5d:03:c4:7a:e1:
ac:d9:03:00:e9:2a:8c:df:f2:f3:9d:e4:66:64:5b:
98:19:91:c7:4d:f0:e1:d0:5d:83:ac:9c:86:52:63:
e2:77:c9:4b:3d:7e:f1:88:a2:0d:c2:e9:0a:fd:9d:
4f:e3:35:cb:42:ee:99:4c:e7:2d:a0:91:d1:6c:36:
26:75:63:81:1c:70:f5:21:ba:18:9f:3d:c8:21:15:
2e:1b:94:f0:91:95:87:1c:c1:f2:ca:61:38:86:76:
a1:c6:2f:29:95:91:d4:ae:11:90:36:89:6f:21:fa:
ba:68:6e:cf:a9:eb:fa:73:1e:d0:d1:d8:20:b3:ae:
18:da:c3:ca:61:f4:e5:25:9a:4f:bf:52:e9:30:1c:
38:83:27:67:39:8f:52:71:46:e0:63:cd:17:c0:77:
a2:0b:b9:fc:ac:b7:28:0e:29:cd:63:07:b8:7f:80:
a3:d1:2b:1e:8d:04:e5:bd:c5:ba:39:eb:13:36:2e:
60:de:9f:95:f8:b6:de:12:12:5b:e2:d4:19:57:da:
93:ab:ee:40:61:92:e9:7e:1e:15:c5:42:54:81:e6:
85:ea:06:72:e9:ff:e5:c9:9b:d1:86:4e:d2:00:ff:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:97:D5:24:37:62:D2:EA:D3:1F:00:9B:D7:9C:B0:F2:14:37:03
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e203137393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:0e:82:59:07:02:ef:be:8e:59:ea:7b:09:f6:62:e6:0e:12:
94:63:df:93:72:f2:26:6d:77:c7:2e:f3:36:17:4e:9c:82:c2:
94:ea:07:77:88:9f:81:44:4b:9a:59:9a:e4:29:62:a4:33:e3:
72:18:20:8b:b3:58:4d:21:29:4b:59:87:09:e1:2b:73:fa:73:
98:ed:ee:e2:26:47:e8:79:1f:fc:72:21:ea:af:63:0e:ac:94:
b3:87:1e:03:c8:f0:d1:12:f6:4b:53:ed:f8:99:21:b0:b0:21:
48:4f:13:d5:bd:23:c4:b1:96:60:a6:c7:fd:75:90:3e:6f:1c:
c0:44:0d:96:fd:ad:51:86:36:45:51:1b:00:45:c2:b3:ab:ef:
98:51:02:35:7a:17:0f:6c:89:97:f4:2c:a5:b3:a7:8b:cb:64:
f3:50:45:21:02:c6:3b:94:c9:85:ca:bf:11:35:70:4e:c3:0d:
02:38:bd:b4:93:90:9f:a3:40:46:e6:22:a2:e1:94:90:67:0f:
31:59:8a:23:c6:3c:eb:43:c4:65:8d:39:44:41:46:84:23:be:
aa:34:75:1d:b8:38:db:66:e2:11:e0:51:60:d2:28:95:b2:a2:
64:56:46:15:b6:cb:a9:f3:66:94:bb:e6:af:2d:44:be:45:4b:
07:89:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org