Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130372e302f32342d3234203d3e20313530393833.roa
File: 3130332e36392e3130372e302f32342d3234203d3e20313530393833.roa (raw, json)
Hash identifier: kRsBW7+m4OPZIRrVTLfvbE3vVvTjK4oKG3OdUn6VYec=
Subject key identifier: FC:D3:04:37:6A:4B:72:D8:29:BF:AF:76:17:33:4C:E7:7D:11:4E:EC
Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial: 1A4E4991659A7A0F984382B46C2B1034A6414D8E
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130372e302f32342d3234203d3e20313530393833.roa
Signing time: Mon 22 May 2023 18:22:25 +0000
ROA not before: Mon 22 May 2023 18:17:25 +0000
ROA not after: Mon 20 May 2024 18:22:25 +0000
asID: 150983
IP address blocks: 103.69.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4e:49:91:65:9a:7a:0f:98:43:82:b4:6c:2b:10:34:a6:41:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Validity
Not Before: May 22 18:17:25 2023 GMT
Not After : May 20 18:22:25 2024 GMT
Subject: CN=FCD304376A4B72D829BFAF7617334CE77D114EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:0f:48:d8:69:7b:0b:ff:4f:d6:9d:3a:48:
95:74:06:e8:f6:d1:eb:6e:dd:b9:bd:fb:35:06:89:
3b:53:be:63:e7:ba:8e:1e:e8:89:31:70:a0:60:ba:
36:d7:45:41:b8:a2:33:c4:5c:92:ac:91:83:a8:82:
80:7b:6d:43:5b:13:70:7d:62:00:ff:76:ce:4f:0e:
07:02:84:f6:01:f6:4e:29:4b:08:c1:73:04:5b:5f:
07:16:d8:fc:f5:41:ad:af:77:58:f3:a8:8e:43:80:
09:f4:9e:07:81:53:94:98:c7:d9:73:31:b0:d9:81:
0f:99:e5:89:f5:30:69:53:b9:cc:d8:4e:57:28:7c:
5d:0a:0c:77:ed:d0:ef:40:09:1a:3a:d1:fe:ea:8d:
96:0f:52:61:db:5a:e6:e2:36:95:8c:2d:9d:1b:cc:
cf:d8:b0:77:99:d5:f7:2b:09:e8:2f:dc:87:f5:3d:
5f:21:6d:8a:67:52:42:23:e6:40:a1:36:f6:04:22:
8c:c3:88:0b:b6:27:87:c4:13:79:d1:a6:84:07:6f:
24:b4:c6:b5:b1:46:b7:fb:aa:64:f8:3c:e4:7f:2e:
fa:d3:c8:ce:3d:96:31:f1:77:b4:6a:67:7a:53:0b:
0c:3c:2b:71:78:c6:26:e1:13:4a:70:0a:12:7f:33:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:04:37:6A:4B:72:D8:29:BF:AF:76:17:33:4C:E7:7D:11:4E:EC
X509v3 Authority Key Identifier:
keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130372e302f32342d3234203d3e20313530393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.107.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7d:81:2e:12:cf:d2:f2:25:3d:93:b0:0f:52:eb:08:d8:5d:
43:fd:8b:ca:13:4e:8a:a9:5a:44:17:b0:79:42:64:11:9d:ff:
42:3a:c7:4a:23:ff:5c:12:b0:07:39:26:d5:8e:f1:9d:7b:4d:
5e:9f:10:21:00:5e:1a:af:86:fa:a5:a3:ba:67:00:49:94:6b:
3e:2e:4f:28:6a:3f:d0:d3:c0:26:9c:6a:76:6f:b2:24:ac:ca:
a0:bf:f0:08:b8:4d:5d:36:db:70:19:a6:06:fc:e6:6b:bc:6f:
40:43:f9:e1:cf:3a:63:26:7e:08:bd:4a:ee:e2:25:71:84:05:
84:58:c5:0e:af:19:db:4c:69:83:2b:58:e2:ca:7f:8e:dc:74:
3b:44:af:19:40:3b:1f:e5:e0:0b:65:d9:ab:66:34:cb:04:4f:
8b:64:55:35:dc:a7:b3:5b:05:1f:29:d8:3e:74:f7:bd:8b:1f:
a2:38:98:f9:28:cf:ae:5f:6e:b0:81:5e:68:19:db:3c:b6:5a:
33:f5:ba:f0:1d:82:fc:83:76:fd:08:5d:bb:15:20:94:65:27:
f4:ec:04:77:0f:4f:6b:74:97:21:e1:30:00:73:99:e3:11:10:
2f:64:22:02:e2:8c:0f:c4:d7:68:c4:76:14:40:5b:94:e4:1e:
98:ac:41:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org