Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3233203d3e20313439343031.roa
File: 3130332e3138322e38302e302f32332d3233203d3e20313439343031.roa (raw, json)
Hash identifier: vJfwtYK1avcNDTq9jpuRbCF9NRWN7eTlsiuWCs0jq4U=
Subject key identifier: 00:DF:33:B4:E3:0D:55:CE:AF:85:AA:03:2E:55:69:41:6D:06:DE:5E
Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial: 3C1708BCCA762D3B798FE125326E5A4E8960BB8D
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3233203d3e20313439343031.roa
Signing time: Wed 01 Mar 2023 06:58:50 +0000
ROA not before: Wed 01 Mar 2023 06:53:50 +0000
ROA not after: Wed 28 Feb 2024 06:58:50 +0000
asID: 149401
IP address blocks: 103.182.80.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:17:08:bc:ca:76:2d:3b:79:8f:e1:25:32:6e:5a:4e:89:60:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Validity
Not Before: Mar 1 06:53:50 2023 GMT
Not After : Feb 28 06:58:50 2024 GMT
Subject: CN=00DF33B4E30D55CEAF85AA032E5569416D06DE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:02:d0:d7:46:07:5c:1d:0d:78:d2:8f:00:
92:1e:83:24:92:ea:0f:3d:8e:7b:2b:d4:77:7f:4f:
c4:01:a3:84:f1:5d:57:75:23:bc:ef:7f:28:58:87:
ef:3e:33:43:2f:35:91:c4:b3:80:8f:df:1b:cf:31:
c6:14:34:2f:fa:57:7f:ac:0b:cb:be:0b:10:8e:7a:
77:d1:ee:7c:a8:05:a8:7a:0a:61:2c:c3:4f:5b:93:
16:bb:7e:e8:e1:c6:85:3a:60:21:a8:15:4c:94:fc:
fe:0d:c7:3b:f7:78:64:f9:da:13:6f:3d:a7:ee:e8:
d2:c4:c0:3c:cf:89:ed:d6:3f:a2:aa:c6:50:3c:25:
8c:0c:64:1d:2c:fb:f7:b5:42:a7:36:13:e8:fc:60:
95:42:48:33:3f:1e:4c:e3:a5:0a:63:97:37:46:37:
88:88:85:e6:43:35:4a:83:d8:0a:79:6a:ab:94:9f:
c0:49:5c:b6:fa:30:0b:20:a5:fa:0d:cc:c9:de:b0:
de:00:55:7d:de:25:7b:64:c8:12:db:f9:07:14:e0:
76:b8:26:2f:ca:76:64:04:65:5c:f4:51:04:7e:45:
ce:94:b4:4f:90:48:86:37:db:db:85:0c:2f:8a:30:
bd:90:cc:05:23:e5:93:ed:de:d7:b5:4f:fb:33:dd:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:33:B4:E3:0D:55:CE:AF:85:AA:03:2E:55:69:41:6D:06:DE:5E
X509v3 Authority Key Identifier:
keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3233203d3e20313439343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:6a:24:3a:5b:bf:e4:db:1a:41:83:df:b4:0d:bf:3b:a2:a5:
06:08:29:63:6f:6e:d2:89:94:15:fc:f4:9c:ab:d0:38:38:96:
25:30:0b:1e:4f:3a:a7:01:cd:c7:13:b4:0b:41:d0:82:b2:52:
b6:65:db:de:b7:fa:5f:a5:b0:49:03:3e:a9:e2:c0:a9:d2:e7:
68:28:88:c0:e1:d1:9f:15:23:a6:20:3f:6d:54:2d:3f:48:2a:
ca:a7:78:09:54:4b:26:08:a3:f8:33:e6:60:5d:04:a2:d9:cd:
6a:6b:3a:40:3f:5a:33:c3:8f:44:7a:52:fd:d1:03:3c:dc:6d:
7c:b0:b0:0b:bb:44:a7:e4:7c:51:14:70:fd:18:91:14:db:82:
3f:9e:8d:52:dd:00:2d:65:60:01:a7:37:ff:de:7b:f7:13:60:
a6:0f:7b:d9:34:88:26:d0:c1:d2:85:3e:2b:79:96:26:8d:b3:
22:1b:8e:b8:ad:f7:b0:c3:fb:ee:a1:1e:91:28:20:88:bb:81:
cd:b4:4c:4e:7d:90:6b:9e:60:2d:75:ef:01:e1:b0:b7:f7:e4:
30:ac:3c:17:ee:f5:89:ab:fa:26:db:bf:f6:79:26:ff:f3:e3:
fe:f7:4f:ce:4f:62:f5:d8:a2:14:c5:65:ca:af:61:5e:f1:9a:
89:62:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:57:35 2025 by rpki-client