Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313934343232.roa
File: 3130332e3139312e3134312e302f32342d3234203d3e20313934343232.roa (raw, json)
Hash identifier: 0k0tuGd6pEr75iOk+HHDLPnFcOP8GNl3agGkuHd7+co=
Subject key identifier: 06:9A:CE:7C:89:B8:0F:48:5C:8F:24:0C:17:1B:67:B2:B4:28:9C:9D
Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial: 6CA8C5632DA81E4A2E3D3A11F0CF0C4B4D2A7350
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313934343232.roa
Signing time: Fri 12 Aug 2022 11:25:13 +0000
ROA not before: Fri 12 Aug 2022 11:20:13 +0000
ROA not after: Fri 11 Aug 2023 11:25:13 +0000
asID: 194422
IP address blocks: 103.191.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a8:c5:63:2d:a8:1e:4a:2e:3d:3a:11:f0:cf:0c:4b:4d:2a:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Validity
Not Before: Aug 12 11:20:13 2022 GMT
Not After : Aug 11 11:25:13 2023 GMT
Subject: CN=069ACE7C89B80F485C8F240C171B67B2B4289C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:66:fd:c6:cb:75:53:2f:3b:e9:a3:03:26:
47:af:4c:21:7d:24:ee:fc:76:41:29:d8:56:5f:38:
07:52:4a:2c:8e:b3:32:0b:d4:42:7d:a7:06:6b:9a:
c5:73:a4:55:e4:7e:61:2e:0f:76:02:57:47:23:c5:
4a:24:65:5f:57:c8:6b:9b:4d:d6:48:fb:b6:ab:a6:
32:b5:da:d2:e1:0d:93:3d:93:3a:01:36:09:96:1f:
9f:e1:96:8f:da:bc:f9:05:cf:96:d0:cf:3b:d6:f2:
a7:67:37:ab:98:e0:be:8b:92:f8:4a:cf:4c:54:cd:
1a:c2:8c:f5:4b:a4:a3:6a:11:d3:ff:54:5b:de:30:
2a:c5:1c:70:10:77:90:b5:44:64:54:65:92:2a:9b:
a6:0b:d8:82:99:84:e2:e4:40:9d:2b:ab:da:70:2a:
dc:e6:9b:8c:c2:1a:75:a4:20:af:cd:ed:a9:8b:f1:
cb:a9:be:2e:bd:d8:6e:b0:71:f9:da:27:d6:86:bd:
75:41:58:39:4c:ec:eb:80:56:7e:45:e4:d1:3a:7d:
1e:4f:6f:d1:8c:38:07:1f:88:71:fe:5c:fa:9e:d4:
48:af:34:75:e5:c9:43:9d:01:5c:5f:7a:7c:3f:af:
f2:49:48:ba:31:0e:30:8b:79:76:58:79:88:f3:e9:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:CE:7C:89:B8:0F:48:5C:8F:24:0C:17:1B:67:B2:B4:28:9C:9D
X509v3 Authority Key Identifier:
keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313934343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.141.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5e:fd:37:8b:6a:f1:50:d1:fc:68:53:99:ee:f4:f3:4f:e9:
5e:48:96:59:1d:0e:00:59:36:67:a9:b1:2b:66:4b:6a:0d:ef:
9d:49:ef:a6:0f:34:9f:d8:02:12:88:cc:1e:35:fb:65:d8:e7:
8b:85:a8:d2:a0:3b:2a:2d:03:00:29:3c:f5:b3:32:eb:0c:4c:
99:55:d2:88:3b:58:af:c2:af:90:cc:6d:9f:f2:37:3d:26:4f:
0e:cb:f7:62:7e:06:20:3b:88:48:9d:00:4c:6a:62:ba:74:f8:
40:6d:ad:fe:09:55:67:e7:08:fc:fd:0e:33:bc:08:a8:0b:6b:
d8:53:bc:54:21:8e:d6:b0:1b:ca:59:af:a3:b8:0e:dd:0a:54:
93:15:b8:8d:fb:b1:b0:45:07:50:33:86:2e:a7:dd:eb:15:92:
19:2e:77:d7:92:26:5a:ca:0e:38:d2:e9:f1:9f:1a:c4:ac:f8:
fc:a2:90:85:ce:27:f4:35:04:0d:d4:ff:fe:91:fb:5e:a8:54:
87:82:8e:05:bd:a7:65:d8:4f:c4:33:c0:9c:d6:b4:6f:36:59:
5f:89:2e:41:a4:50:3c:2f:c9:20:13:48:96:7e:89:6e:35:11:
c5:4a:c0:f2:80:a5:f3:a5:13:1d:d4:31:90:ee:8d:46:af:d5:
39:08:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org