Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313530393833.roa
File: 3130332e36392e3130362e302f32342d3234203d3e20313530393833.roa (raw, json)
Hash identifier: 57cFO1ZHOecEhp3xu/pHLuqpwN/nRyg8aecxTseUOPE=
Subject key identifier: AB:F8:2C:64:AF:9C:5A:86:40:C4:75:D8:10:4F:E0:C1:D7:70:14:36
Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial: 2BF84785931E2E944344C9FB2FAADDA9CC250850
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313530393833.roa
Signing time: Mon 22 May 2023 18:22:04 +0000
ROA not before: Mon 22 May 2023 18:17:04 +0000
ROA not after: Mon 20 May 2024 18:22:04 +0000
asID: 150983
IP address blocks: 103.69.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f8:47:85:93:1e:2e:94:43:44:c9:fb:2f:aa:dd:a9:cc:25:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Validity
Not Before: May 22 18:17:04 2023 GMT
Not After : May 20 18:22:04 2024 GMT
Subject: CN=ABF82C64AF9C5A8640C475D8104FE0C1D7701436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:c3:01:76:be:4c:72:f9:db:12:cb:3e:71:
5c:9f:63:14:04:ec:60:04:1e:a2:27:02:e0:af:32:
99:6f:f2:d8:c4:60:a0:c2:85:97:31:4b:2c:69:43:
cc:8a:82:6d:8e:d7:b9:3a:ca:8d:c8:7c:6c:10:4d:
dd:71:cc:ed:37:9d:a7:60:37:d7:26:92:c7:2b:8a:
65:ad:7c:45:2f:15:b7:f5:6a:e2:3c:35:fd:be:7a:
82:ea:52:6c:4b:3b:6d:80:83:f5:ec:60:ca:76:07:
4f:12:b7:1c:07:d4:52:83:f5:0f:8e:4f:d8:a6:03:
eb:81:b4:3e:d8:9e:8c:05:3b:6e:b7:2a:cb:ce:3f:
27:8b:c0:77:48:94:38:1a:50:e9:1b:08:c5:74:14:
6c:38:13:ee:d0:6a:ba:ef:96:af:87:0d:1e:21:58:
a3:d7:f0:fc:5e:16:4e:95:2f:d3:35:9e:09:c2:10:
c4:43:37:f0:41:e0:f5:9e:93:64:74:10:0b:09:1d:
00:fd:61:b1:e7:15:92:75:43:af:e0:3d:60:cf:28:
d0:88:89:b8:8b:29:33:95:d7:f3:88:8e:eb:c9:26:
00:5a:50:9a:03:3a:6d:72:f3:12:30:bb:ef:e2:d8:
93:a0:ee:7a:93:36:d3:9f:49:09:f4:d9:8d:5d:5c:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F8:2C:64:AF:9C:5A:86:40:C4:75:D8:10:4F:E0:C1:D7:70:14:36
X509v3 Authority Key Identifier:
keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313530393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.106.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ec:71:77:35:02:1f:24:80:41:84:3f:11:0e:53:4b:0f:16:
89:24:9c:2b:66:63:75:57:6d:71:54:b8:98:32:c4:a7:69:7b:
5b:4f:c2:07:e9:fc:24:79:9c:95:ac:79:f6:e7:41:60:d4:d1:
1a:93:54:2a:8e:2f:21:3d:24:6e:06:c1:23:8a:00:d4:1f:e2:
cd:e4:77:7f:af:9e:c9:6d:29:cf:93:ef:f6:e0:87:8d:0a:58:
ed:07:b9:5a:c1:d8:48:a6:d2:45:f6:62:41:4b:77:cc:26:ec:
bf:78:fd:49:27:32:45:a0:2c:ad:28:16:b5:c7:31:84:11:c9:
bf:58:93:d2:7e:0c:cf:fb:1a:03:9c:d6:00:10:b3:67:be:8f:
83:61:23:ce:7d:7a:db:43:38:a0:9d:ca:ab:29:2f:fd:9d:eb:
36:54:95:ad:05:d0:56:88:34:d6:9a:27:31:6d:e5:ae:6b:e3:
20:4f:f0:4b:8a:2a:2f:8c:51:09:00:3d:01:8f:fc:39:f1:30:
8b:a2:32:cb:45:68:73:28:eb:65:ee:0b:d9:b8:fd:80:cf:89:
a4:65:5f:cc:5e:38:23:3f:b7:d5:0f:27:d2:c6:d6:67:84:61:
c2:a2:10:66:5b:71:07:7b:65:15:37:7f:76:68:a3:4d:36:5e:
63:62:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org