Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e203435333035.roa
File: 3130332e3136322e36302e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: tstA7VGI7GPVeK9fqHyqJOAOa5tVi8/ph+Gj31enLpE=
Subject key identifier: F0:2D:A6:89:0F:56:F9:EE:19:72:0F:E9:19:B7:C9:4B:17:26:B9:58
Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial: 453F087818AC1A0F7EBD34716204F8CC2F0F17B2
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e203435333035.roa
Signing time: Thu 02 Mar 2023 05:55:20 +0000
ROA not before: Thu 02 Mar 2023 05:50:20 +0000
ROA not after: Thu 29 Feb 2024 05:55:20 +0000
asID: 45305
IP address blocks: 103.162.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3f:08:78:18:ac:1a:0f:7e:bd:34:71:62:04:f8:cc:2f:0f:17:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Validity
Not Before: Mar 2 05:50:20 2023 GMT
Not After : Feb 29 05:55:20 2024 GMT
Subject: CN=F02DA6890F56F9EE19720FE919B7C94B1726B958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:8b:1b:ff:50:96:6c:43:34:8a:4b:7a:e1:
01:2a:30:d6:74:d1:00:b7:f8:e7:eb:11:ff:c9:a4:
c5:6b:4f:e9:f3:ed:90:de:a7:7f:86:89:f8:ef:bb:
bc:51:3c:21:b7:d8:e5:e3:54:a7:b8:4a:61:ae:53:
ff:79:f0:71:6a:75:a5:ad:c9:ee:19:e6:a5:93:3d:
86:1d:87:dc:ba:c9:06:0c:a4:de:7d:93:b6:5e:f4:
ee:92:f7:05:63:07:67:df:bd:21:c1:b5:64:bb:42:
f9:36:61:c2:f1:d5:56:25:1d:ff:73:aa:d2:86:73:
df:f3:46:15:a6:c6:a0:f5:9a:8a:53:20:c3:cd:e6:
07:0a:00:23:2a:76:04:e2:e6:3a:02:9f:ae:39:f8:
5c:34:8f:c5:8c:83:3c:a3:36:cd:5a:1e:a9:f5:10:
31:47:4b:73:32:b6:f5:2f:19:bb:06:c9:b4:54:b5:
67:df:02:64:91:e4:8b:7a:3c:fe:f1:0e:db:8a:72:
ce:a3:6b:41:51:b1:18:21:65:07:c2:91:28:1f:52:
51:70:a7:63:dd:e8:e7:5a:5f:f7:0a:ea:c7:a9:25:
da:a5:2b:ae:28:66:c7:2c:3e:0e:92:d1:4b:c8:22:
2d:15:e5:23:2a:b2:88:1e:89:22:71:45:11:0b:13:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:A6:89:0F:56:F9:EE:19:72:0F:E9:19:B7:C9:4B:17:26:B9:58
X509v3 Authority Key Identifier:
keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:a2:2f:2d:e8:bb:41:7c:5c:4a:77:ad:83:f1:0f:43:32:53:
2f:d2:89:f8:77:1c:d3:7e:e0:85:db:97:45:ab:16:bf:2d:94:
24:91:2f:01:0f:be:24:3a:64:7b:91:54:48:1f:1a:ee:ec:48:
1d:83:bb:d9:44:5a:5b:1a:bf:ad:47:11:99:8a:99:9e:e2:34:
d2:b0:56:b5:2b:75:09:90:ee:ad:89:73:f9:6c:a0:3f:38:19:
70:ad:19:1c:32:9f:07:aa:4e:ca:cb:bd:48:a8:fb:93:9a:fa:
ef:18:bb:51:1f:ae:ed:af:f9:bb:e0:91:e9:c4:4c:88:d6:ae:
90:a0:ec:ab:a4:02:bb:f9:5d:0b:d6:ed:6d:9f:73:ea:6d:62:
5b:65:59:b4:3e:25:83:34:9a:7d:05:de:c9:b4:97:44:b3:5b:
41:c3:bb:74:47:e7:46:a3:0b:69:59:f4:f9:82:50:83:4f:dd:
1d:34:7f:55:4f:d3:97:6d:49:a3:65:e3:c2:25:c3:d3:d3:09:
0f:46:2a:a8:ca:bd:25:23:11:98:73:d2:e9:6e:fc:71:88:79:
76:e4:db:45:38:e6:e5:97:52:13:fc:eb:4d:d7:2d:fe:07:c3:
17:f8:c6:f7:96:b9:1b:5b:4b:98:28:b3:1f:c0:00:22:14:e3:
a3:bd:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org