Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439373630.roa
File: 3130332e38302e39352e302f32342d3234203d3e20313439373630.roa (raw, json)
Hash identifier: 7YJ7AR8V99IT+65+TYFjtJ2E2G4Eel0e7OwZ8aecPYQ=
Subject key identifier: 16:DC:F9:BB:F4:1B:22:D2:68:09:AE:4B:72:FC:49:C7:79:6A:64:FF
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 4BC78AD881525064B88C243070C49207199C3A23
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439373630.roa
Signing time: Thu 07 Jul 2022 05:17:06 +0000
ROA not before: Thu 07 Jul 2022 05:12:06 +0000
ROA not after: Thu 06 Jul 2023 05:17:06 +0000
asID: 149760
IP address blocks: 103.80.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c7:8a:d8:81:52:50:64:b8:8c:24:30:70:c4:92:07:19:9c:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Jul 7 05:12:06 2022 GMT
Not After : Jul 6 05:17:06 2023 GMT
Subject: CN=16DCF9BBF41B22D26809AE4B72FC49C7796A64FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:f8:34:5a:29:4f:b3:d5:3b:27:07:ef:f5:
95:ba:71:e4:a1:87:57:58:62:41:d9:e7:41:0d:ce:
bb:de:a6:2f:5d:90:e3:d5:a5:ae:78:83:7b:29:ad:
8f:7a:16:bf:e5:7e:b4:74:be:ef:c6:97:fa:b2:42:
42:bd:1f:3f:92:39:4e:2d:87:24:54:6f:8e:e5:8f:
34:af:fa:b5:f9:38:c1:e8:f1:d0:4c:f9:5e:cb:49:
a8:25:ec:35:d1:52:6e:2c:04:4e:6a:a9:bd:19:b5:
44:3a:5a:75:11:3a:cd:77:6c:fa:eb:28:64:fb:9e:
9a:04:6d:6d:1f:53:f2:af:ef:07:97:66:48:25:fd:
f6:7f:da:2d:70:5f:0b:52:78:17:7a:86:a8:b4:34:
af:8c:56:99:53:2b:d5:8f:50:f5:0d:e7:35:fb:cc:
9d:f1:eb:8c:79:64:fe:39:20:45:fc:18:aa:b0:b4:
18:fd:3a:89:50:dd:44:5c:40:04:f7:cf:dc:3e:86:
93:77:61:d7:69:a2:21:7a:94:49:e4:df:ef:01:33:
d1:ac:b2:35:d0:e5:03:6a:0e:d5:1e:62:ab:cd:d9:
64:d4:92:22:05:5a:26:ca:e6:9b:40:f5:d6:3d:fd:
61:c5:3c:92:35:81:1e:f0:93:4f:a4:35:06:90:fc:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:F9:BB:F4:1B:22:D2:68:09:AE:4B:72:FC:49:C7:79:6A:64:FF
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.95.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b3:c3:03:e8:8f:25:97:2f:9c:a4:6b:19:77:75:50:3f:7a:
06:60:5c:de:25:da:14:05:b3:ac:63:46:ec:d2:0f:28:65:4a:
25:d1:90:c9:28:4e:8b:52:fc:83:65:43:4e:8c:3a:39:d9:58:
e3:cc:70:67:04:a0:34:f2:59:62:ed:47:2a:a9:aa:7f:31:62:
00:74:7b:4b:0d:13:39:36:3c:15:25:a7:c3:aa:bd:cf:1d:18:
06:b6:9f:d9:a5:a8:2b:be:24:87:65:0b:d2:aa:b2:35:17:b2:
76:76:02:dd:61:ea:18:af:8e:25:e4:19:80:dd:f9:f9:64:f7:
d4:e3:d1:a6:8d:b2:63:78:b8:bb:93:34:a8:d5:5e:5f:0e:77:
4b:bc:c5:0b:32:48:72:f5:bb:98:9c:08:de:9c:63:37:f8:b9:
60:d8:c8:24:d7:5c:9e:4a:79:89:dc:16:e9:7c:3c:57:38:a9:
85:6e:2f:e8:8b:2a:cc:ec:af:f7:d3:6d:bd:4c:81:a0:77:8d:
b1:42:a1:30:70:41:06:a7:99:cd:6c:7d:c9:80:75:aa:40:7f:
04:2c:45:b9:39:2d:52:88:34:6e:a5:a9:31:9b:63:3f:3e:ee:
cb:a6:d0:12:53:19:9f:ea:f6:da:fd:da:50:fd:f7:cd:8c:a0:
85:f7:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org