Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32332d3233203d3e20313339393532.roa
File: 3130332e33312e3234302e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier: 1ABmJqAQbsmkQfl34u/sUFhN8G/8fjR5XW+FnkCoTNY=
Subject key identifier: E3:09:39:46:10:9A:6F:4B:97:CC:3D:55:9F:17:A0:14:D3:75:6A:B1
Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B
Certificate serial: 4471EAAC02F8BC04DD5CFB07A2E4F1F27F5291B2
Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32332d3233203d3e20313339393532.roa
Signing time: Wed 23 Nov 2022 23:55:29 +0000
ROA not before: Wed 23 Nov 2022 23:50:29 +0000
ROA not after: Wed 22 Nov 2023 23:55:29 +0000
asID: 139952
IP address blocks: 103.31.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:71:ea:ac:02:f8:bc:04:dd:5c:fb:07:a2:e4:f1:f2:7f:52:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B
Validity
Not Before: Nov 23 23:50:29 2022 GMT
Not After : Nov 22 23:55:29 2023 GMT
Subject: CN=E3093946109A6F4B97CC3D559F17A014D3756AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:8e:97:8c:8f:ab:69:d7:93:a9:c8:e4:2b:
13:32:ab:a9:9e:7b:86:1c:7f:a9:ca:9a:ed:c0:1c:
ed:a9:08:39:05:c4:83:4d:9d:a5:66:c6:dd:9e:26:
70:63:7f:d3:f1:f4:d2:53:4f:d8:16:54:d1:81:e3:
f9:07:a4:d3:e6:b9:4a:32:dc:36:4e:a7:ab:91:ee:
2d:b2:63:07:bf:ea:2e:2f:ec:9e:0a:35:9f:a9:6e:
e5:cc:84:37:a1:d5:66:e7:ab:1f:41:a1:3b:5c:3d:
6f:e8:a2:a8:af:86:9d:02:21:0e:78:f2:ae:fa:58:
3f:77:f7:e2:97:81:8b:b8:f0:d2:72:bd:46:52:e3:
30:38:9f:83:3a:41:16:16:2d:b3:c7:bd:d4:f8:93:
0e:b3:12:8b:b3:eb:d4:07:2f:03:ff:3c:d7:84:80:
3b:13:59:7a:45:59:54:d9:0e:30:b3:d1:1f:d3:85:
6c:c1:ae:c0:e6:ac:5f:d1:03:94:be:c9:84:e8:7f:
6b:92:4b:8d:19:95:f3:2a:5a:43:49:c5:10:10:7b:
7a:71:30:9e:85:e0:3f:32:80:79:28:b3:19:0a:6b:
cc:2d:ea:c7:b8:4a:54:9f:70:9f:e9:d5:3d:e2:04:
68:d8:46:3e:64:4f:21:df:f0:b9:3f:dd:36:b6:3b:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:39:46:10:9A:6F:4B:97:CC:3D:55:9F:17:A0:14:D3:75:6A:B1
X509v3 Authority Key Identifier:
keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32332d3233203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.240.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c4:54:8b:ea:79:d5:46:50:8a:f3:b1:e8:02:b4:af:5e:b0:
16:93:f5:61:f0:d8:e7:da:ca:a3:12:6b:09:6f:e3:fd:32:41:
3b:dd:4b:4d:cd:3c:8a:69:42:b8:63:aa:ed:e4:76:35:4a:0b:
fd:1d:c6:b1:10:b9:2b:00:79:e1:14:4a:f3:f6:8c:94:09:a9:
4f:bc:08:ae:e5:d5:d4:24:71:a1:f1:02:54:5f:ea:f0:03:bf:
08:e6:bd:7f:db:16:5a:7c:d8:b9:83:52:45:17:b3:11:c6:6c:
97:f5:39:a1:96:f3:17:88:7c:45:5c:79:68:92:21:20:d7:be:
5c:1f:2e:b5:8a:5c:2c:aa:cd:7c:2c:92:6f:55:7d:19:56:a4:
92:74:d1:6e:ac:36:b4:7a:f7:14:97:97:24:87:8b:31:de:bd:
33:00:2f:46:a7:23:b8:12:86:00:ff:bd:d3:6b:0b:8d:a5:59:
bb:49:30:10:83:8a:97:64:67:6d:fc:ae:d5:d8:0a:81:24:43:
a5:66:74:f6:cc:52:64:f6:ab:74:53:2c:46:f4:89:94:e4:6a:
a1:d7:29:27:9d:62:eb:22:c9:5c:65:6e:2e:13:41:63:d5:cd:
3f:ca:a3:d3:25:92:47:63:55:92:e0:f6:b5:18:cb:d5:6e:4a:
c5:20:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org