Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e2034373631.roa
File: 3130332e3138392e302e302f32332d3233203d3e2034373631.roa (raw, json)
Hash identifier: Hob0nGAZGTzft2RnlPdig9zq5Gnyl7+vEtmH86kX+kI=
Subject key identifier: C3:ED:9B:3A:32:FC:2D:2A:62:94:46:0C:7E:67:DA:64:53:81:4F:77
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 07B817F3705CF32EDE584DFFF9F47F3FB0310CD0
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e2034373631.roa
Signing time: Thu 07 Jul 2022 09:02:28 +0000
ROA not before: Thu 07 Jul 2022 08:57:28 +0000
ROA not after: Thu 06 Jul 2023 09:02:28 +0000
asID: 4761
IP address blocks: 103.189.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b8:17:f3:70:5c:f3:2e:de:58:4d:ff:f9:f4:7f:3f:b0:31:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Jul 7 08:57:28 2022 GMT
Not After : Jul 6 09:02:28 2023 GMT
Subject: CN=C3ED9B3A32FC2D2A6294460C7E67DA6453814F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:ce:92:24:d5:89:fd:93:af:71:b4:1f:b0:
7c:29:ed:31:ff:3c:a1:ad:a7:b3:41:47:f2:65:7f:
32:e3:4f:8c:63:bf:df:ce:6e:1d:81:07:13:cf:aa:
ba:c3:20:08:19:16:c9:39:42:1d:32:b1:80:af:98:
1a:84:ae:45:b4:43:1a:65:f5:9d:fa:fa:e8:44:54:
50:10:f2:37:2f:69:9c:e3:a5:7b:97:58:65:a6:a7:
eb:cb:d9:12:bf:34:da:09:58:6e:fd:c4:2a:eb:f1:
8f:4e:cb:74:6f:00:79:92:f9:dc:15:da:36:0f:27:
b3:d9:cd:c6:e5:df:5e:10:c8:77:98:a0:dd:36:ed:
03:5c:3e:44:aa:10:bf:6f:59:ec:cd:73:45:5b:4c:
78:c0:b9:cc:7f:d7:5e:2f:22:94:d0:a5:ad:96:83:
e6:ee:57:28:66:e0:b8:93:67:3c:44:36:68:8c:3b:
9b:93:c4:e1:1e:92:4a:03:b2:98:cc:11:49:79:06:
c8:2d:93:0f:d5:32:91:30:fe:2b:3e:07:18:ef:83:
b9:c4:33:62:98:81:ad:e8:95:8a:ec:a6:90:f7:fc:
15:c4:d7:13:8f:0d:9c:b1:2a:8f:75:23:47:77:c9:
6d:75:bf:4c:64:be:bc:67:00:ac:2d:ee:e8:f7:f8:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:9B:3A:32:FC:2D:2A:62:94:46:0C:7E:67:DA:64:53:81:4F:77
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.0.0/23
Signature Algorithm: sha256WithRSAEncryption
54:ce:c2:42:0b:94:8b:9a:cd:2c:3d:06:85:ed:c8:97:87:c5:
85:35:a5:c0:9f:88:72:62:a8:d5:c2:41:a5:5d:49:6a:76:91:
32:9f:f5:22:ed:a6:65:48:42:2a:2b:0c:52:0d:54:ed:61:7a:
3b:ca:de:52:27:69:ec:35:8e:34:94:32:2f:f4:cc:0f:4d:95:
08:55:dd:b3:2c:84:b3:00:25:fd:31:f3:4e:a4:cf:13:0c:8e:
bd:3e:a4:1a:91:96:33:9e:44:6f:6b:e2:c4:3a:39:47:66:f9:
a3:73:8c:ab:c6:a7:2c:7b:f6:eb:1c:3d:e5:47:42:49:f6:66:
27:cc:6e:90:45:0f:71:c3:af:d7:71:58:fa:7a:6d:f1:02:37:
6c:c2:a7:ed:cf:a6:60:9a:ea:e5:40:fb:81:a9:3d:10:85:d2:
9e:58:39:c6:5a:f2:58:27:cf:e0:db:36:16:1e:51:1e:33:da:
82:b2:3b:08:80:32:da:d7:94:6a:b7:a2:18:f7:60:cc:d1:85:
f4:aa:af:57:d5:e8:09:66:44:2d:72:b6:e4:d1:31:9b:d9:b2:
96:31:71:9c:e1:50:52:3a:9f:bf:c9:9e:17:67:df:35:1c:8b:
d8:5a:e1:11:7b:9e:7e:9f:89:a4:e3:89:1b:0b:11:1b:c0:1e:
13:54:c4:58
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUB7gX83Bc8y7eWE3/+fR/P7AxDNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0
RkY3QTQ4QjAeFw0yMjA3MDcwODU3MjhaFw0yMzA3MDYwOTAyMjhaMDMxMTAvBgNV
BAMTKEMzRUQ5QjNBMzJGQzJEMkE2Mjk0NDYwQzdFNjdEQTY0NTM4MTRGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVM6SJNWJ/ZOvcbQfsHwp7TH/
PKGtp7NBR/JlfzLjT4xjv9/Obh2BBxPPqrrDIAgZFsk5Qh0ysYCvmBqErkW0Qxpl
9Z36+uhEVFAQ8jcvaZzjpXuXWGWmp+vL2RK/NNoJWG79xCrr8Y9Oy3RvAHmS+dwV
2jYPJ7PZzcbl314QyHeYoN027QNcPkSqEL9vWezNc0VbTHjAucx/114vIpTQpa2W
g+buVyhm4LiTZzxENmiMO5uTxOEekkoDspjMEUl5Bsgtkw/VMpEw/is+Bxjvg7nE
M2KYga3olYrsppD3/BXE1xOPDZyxKo91I0d3yW11v0xkvrxnAKwt7uj3+P/VAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUw+2bOjL8LSpilEYMfmfaZFOBT3cwHwYDVR0j
BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF
QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3
QTQ4Qi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm
MjEtMDhmMjg0Njc3YWEzLzAvMzEzMDMzMmUzMTM4MzkyZTMwMmUzMDJmMzIzMzJk
MzIzMzIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvQAwDQYJKoZIhvcNAQEL
BQADggEBAFTOwkILlIuazSw9BoXtyJeHxYU1pcCfiHJiqNXCQaVdSWp2kTKf9SLt
pmVIQiorDFINVO1hejvK3lInaew1jjSUMi/0zA9NlQhV3bMshLMAJf0x806kzxMM
jr0+pBqRljOeRG9r4sQ6OUdm+aNzjKvGpyx79uscPeVHQkn2ZifMbpBFD3HDr9dx
WPp6bfECN2zCp+3PpmCa6uVA+4GpPRCF0p5YOcZa8lgnz+DbNhYeUR4z2oKyOwiA
MtrXlGq3ohj3YMzRhfSqr1fV6AlmRC1ytuTRMZvZspYxcZzhUFI6n7/Jnhdn3zUc
i9ha4RF7nn6fiaTjiRsLERvAHhNUxFg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org