Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e203233363739.roa
File: 3130332e3130332e3133362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: 4TRBwY+YthAx/ZNXn9bNTSFVdO0qlk03PFEwIDERY+U=
Subject key identifier: 10:32:02:91:56:AA:7F:DC:70:D0:51:07:70:43:21:19:9B:23:AA:B9
Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial: 016C43F58DB62578374D4D92753E1389E4D3A84C
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e203233363739.roa
Signing time: Thu 10 Nov 2022 07:00:00 +0000
ROA not before: Thu 10 Nov 2022 06:55:00 +0000
ROA not after: Thu 09 Nov 2023 07:00:00 +0000
asID: 23679
IP address blocks: 103.103.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6c:43:f5:8d:b6:25:78:37:4d:4d:92:75:3e:13:89:e4:d3:a8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Validity
Not Before: Nov 10 06:55:00 2022 GMT
Not After : Nov 9 07:00:00 2023 GMT
Subject: CN=1032029156AA7FDC70D05107704321199B23AAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:8d:ac:c1:80:d7:ff:5a:9b:74:fc:50:24:
33:02:2b:04:f7:48:b1:8e:aa:23:40:0e:47:95:6c:
39:fe:b8:15:e8:01:0f:a4:be:5e:5b:2a:ef:77:91:
39:62:52:fb:a4:ba:7a:63:e7:df:ce:0e:30:a7:d7:
3d:a1:e8:a4:f9:5e:27:9c:42:35:c1:47:13:82:b9:
b0:de:3c:0c:46:9d:51:04:c0:12:11:b9:81:97:0a:
9c:07:bd:17:28:05:c4:83:16:03:c9:a4:ad:f1:08:
69:49:1b:3f:d4:2c:c2:d2:f0:41:59:eb:9a:8e:85:
4e:1e:73:51:a7:6e:f2:dd:1a:d1:df:29:02:0a:c5:
54:a9:7d:1f:a2:d1:4a:13:37:3d:20:0c:48:b9:4f:
af:95:6a:70:9d:cf:80:2c:21:f7:7b:8c:64:a9:74:
76:b7:cd:54:bb:1b:db:88:ee:c4:40:0f:2d:80:43:
68:a4:b0:7a:df:e5:91:24:ec:61:0d:26:de:0b:41:
a3:aa:89:01:e9:39:43:c8:c9:de:ad:cd:10:7e:91:
6c:e2:8c:6a:08:d1:54:df:8d:a7:6f:6d:2d:f7:c3:
ad:08:ea:7f:d8:28:98:ee:c1:df:a6:67:bf:e6:5b:
79:63:13:72:3d:97:69:64:13:30:75:c9:eb:c3:15:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:02:91:56:AA:7F:DC:70:D0:51:07:70:43:21:19:9B:23:AA:B9
X509v3 Authority Key Identifier:
keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e4:16:b1:ae:00:76:05:a7:cd:d0:6a:2c:70:7f:85:d0:38:
71:44:e7:59:4b:3c:58:68:0a:57:0b:a5:f2:ba:86:d9:60:ac:
c0:df:e0:16:41:40:4e:4f:18:c1:76:4e:90:f1:1e:77:e4:3f:
b1:89:0b:36:64:06:8d:e9:ea:7d:cf:af:5c:b2:94:49:02:51:
01:b6:bc:ac:ec:a8:a1:3f:06:1a:72:b4:72:bb:d5:0a:63:e0:
85:48:11:03:d8:b5:89:b7:e1:7f:4d:e4:d8:63:a5:ac:e3:60:
a3:8b:f8:8c:08:ae:94:6f:b5:d2:38:ba:34:78:23:04:69:e4:
d6:31:0f:d2:e1:5c:82:bc:9a:2e:18:c0:c4:de:d9:a1:dd:c1:
39:36:ad:97:43:c5:52:e8:bb:87:82:2e:67:b0:30:5b:e8:46:
9f:8b:c2:06:95:76:16:a7:f7:0f:5f:e3:7c:64:00:6f:63:05:
3e:6c:1a:b4:93:7d:da:5c:e3:28:6c:52:81:ec:11:78:ea:19:
b7:78:f8:21:b0:7c:ea:1d:26:cd:05:fc:da:41:2f:02:0e:7e:
63:29:ae:c4:51:ce:4e:5c:6a:de:79:b8:b4:90:36:06:ac:c5:
9d:a6:3b:ff:f9:eb:0d:39:03:1a:95:02:8f:70:b2:87:66:d3:
71:2c:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org