Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e2034373631.roa
File: 3130332e3138392e302e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: GyZGVAjLyK1OqnafABmAaglGJIIL+T5oxKZIhvccJAc=
Subject key identifier: B2:82:E6:99:18:70:98:DB:C5:C1:FC:5D:9B:B1:31:31:BF:4B:B9:94
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 0C110363EEE187CA43F46AC66EC966D9657451FC
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e2034373631.roa
Signing time: Thu 07 Jul 2022 11:01:44 +0000
ROA not before: Thu 07 Jul 2022 10:56:44 +0000
ROA not after: Thu 06 Jul 2023 11:01:44 +0000
asID: 4761
IP address blocks: 103.189.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:11:03:63:ee:e1:87:ca:43:f4:6a:c6:6e:c9:66:d9:65:74:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Jul 7 10:56:44 2022 GMT
Not After : Jul 6 11:01:44 2023 GMT
Subject: CN=B282E699187098DBC5C1FC5D9BB13131BF4BB994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:0a:ff:4e:dd:03:c5:11:1c:c4:e8:46:4d:
6a:53:e7:2c:fa:67:0c:04:0f:68:98:f1:a9:dd:cd:
05:bf:e2:ef:ea:7d:06:da:05:b4:bd:bc:60:f8:d0:
58:0d:8a:a1:72:13:be:6b:70:63:c1:70:8f:53:f0:
2b:b5:bb:d5:57:9d:13:13:e6:25:d3:c3:a0:85:ed:
1a:8e:4d:e9:cf:25:41:b4:dd:21:f7:67:cf:10:a8:
15:a5:39:48:26:6f:56:c2:f9:84:29:24:6f:a2:ba:
21:26:43:c4:89:2f:47:2e:9c:9e:05:b5:8e:fc:87:
d8:34:e0:b1:7c:2e:dd:03:0a:62:33:dc:b9:6e:2b:
a5:b4:46:db:ef:94:62:5d:a6:01:91:4f:c9:0c:5e:
03:0b:81:e5:e0:5f:25:0c:39:37:f8:18:d2:8c:f0:
86:f8:8c:9c:40:83:b2:c3:27:29:75:c1:99:fd:06:
db:0f:6e:5a:84:9e:4c:53:83:44:5f:c5:51:fa:c2:
91:de:7f:5e:23:b6:ae:25:73:0c:9d:e0:1f:17:27:
ea:8f:41:87:02:6a:c6:4e:de:5a:85:fb:21:07:aa:
19:30:20:bf:e7:0e:c7:61:c2:d7:5f:e3:68:f6:a1:
74:2f:d1:ec:5e:a8:89:06:fe:25:2e:50:59:a4:23:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:E6:99:18:70:98:DB:C5:C1:FC:5D:9B:B1:31:31:BF:4B:B9:94
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7c:40:a9:bd:fa:b0:a2:a2:84:0e:67:0a:ef:fb:10:47:1a:
fc:e7:f5:b0:e4:8e:c2:0e:56:57:1f:15:f2:41:dd:6c:89:02:
02:3d:a1:53:b4:65:19:bf:7c:49:4c:43:c5:4b:fb:6a:21:b8:
96:a1:15:df:54:14:25:55:1a:e5:ae:b6:a0:54:fd:4e:a3:5d:
7d:ab:9a:01:ab:ca:9d:91:a5:ca:4f:61:57:48:44:2a:24:5f:
69:6c:32:d7:ed:c8:95:f6:ed:b4:44:83:64:0c:a2:49:e7:cc:
79:04:4c:8f:99:10:45:9b:4e:75:64:4b:05:af:f0:db:a8:de:
ef:f2:4c:ed:e5:09:27:9d:36:83:49:0b:2a:f2:36:99:fa:57:
36:6c:80:04:66:19:a8:ec:6a:7e:16:a5:f7:76:9b:4b:03:d9:
93:47:7e:12:08:11:f4:6f:97:44:d8:0b:d1:41:0d:07:88:1f:
d5:d0:7e:eb:d6:af:4d:6b:fe:c8:7c:3b:f9:de:a9:91:2d:c7:
9a:51:b1:f4:8c:45:a8:40:6e:63:ee:93:6e:21:36:53:b3:d6:
77:53:9a:eb:ae:72:5c:18:5e:f2:57:65:56:9e:28:32:57:e3:
cb:9e:a4:dc:54:f7:ea:c4:c6:78:64:5d:b9:27:24:b7:a6:b5:
9c:19:6a:3a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUDBEDY+7hh8pD9GrGbslm2WV0UfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0
RkY3QTQ4QjAeFw0yMjA3MDcxMDU2NDRaFw0yMzA3MDYxMTAxNDRaMDMxMTAvBgNV
BAMTKEIyODJFNjk5MTg3MDk4REJDNUMxRkM1RDlCQjEzMTMxQkY0QkI5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76Qr/Tt0DxREcxOhGTWpT5yz6
ZwwED2iY8andzQW/4u/qfQbaBbS9vGD40FgNiqFyE75rcGPBcI9T8Cu1u9VXnRMT
5iXTw6CF7RqOTenPJUG03SH3Z88QqBWlOUgmb1bC+YQpJG+iuiEmQ8SJL0cunJ4F
tY78h9g04LF8Lt0DCmIz3LluK6W0RtvvlGJdpgGRT8kMXgMLgeXgXyUMOTf4GNKM
8Ib4jJxAg7LDJyl1wZn9BtsPblqEnkxTg0RfxVH6wpHef14jtq4lcwyd4B8XJ+qP
QYcCasZO3lqF+yEHqhkwIL/nDsdhwtdf42j2oXQv0exeqIkG/iUuUFmkI8+3AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUsoLmmRhwmNvFwfxdm7ExMb9LuZQwHwYDVR0j
BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF
QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3
QTQ4Qi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm
MjEtMDhmMjg0Njc3YWEzLzAvMzEzMDMzMmUzMTM4MzkyZTMwMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvQAwDQYJKoZIhvcNAQEL
BQADggEBAA18QKm9+rCiooQOZwrv+xBHGvzn9bDkjsIOVlcfFfJB3WyJAgI9oVO0
ZRm/fElMQ8VL+2ohuJahFd9UFCVVGuWutqBU/U6jXX2rmgGryp2RpcpPYVdIRCok
X2lsMtftyJX27bREg2QMoknnzHkETI+ZEEWbTnVkSwWv8Nuo3u/yTO3lCSedNoNJ
CyryNpn6VzZsgARmGajsan4Wpfd2m0sD2ZNHfhIIEfRvl0TYC9FBDQeIH9XQfuvW
r01r/sh8O/neqZEtx5pRsfSMRahAbmPuk24hNlOz1ndTmuuuclwYXvJXZVaeKDJX
48uepNxU9+rExnhkXbknJLemtZwZajo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org