Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203338373733.roa
File: 3130332e3130332e3133382e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: gqrf0R/g7XnhClaiz7N8Jyd/5F8qDy0WbIj8nmTd2eM=
Subject key identifier: B4:3D:32:D8:6C:B3:F9:72:FD:04:D0:7D:D2:BA:9D:B0:F6:A3:3E:C1
Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial: 468A74BD68E8F74777B2C56E722C7443B77B5083
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203338373733.roa
Signing time: Wed 15 Mar 2023 17:11:11 +0000
ROA not before: Wed 15 Mar 2023 17:06:11 +0000
ROA not after: Wed 13 Mar 2024 17:11:11 +0000
asID: 38773
IP address blocks: 103.103.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8a:74:bd:68:e8:f7:47:77:b2:c5:6e:72:2c:74:43:b7:7b:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Validity
Not Before: Mar 15 17:06:11 2023 GMT
Not After : Mar 13 17:11:11 2024 GMT
Subject: CN=B43D32D86CB3F972FD04D07DD2BA9DB0F6A33EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:28:51:67:71:fc:38:52:84:0a:2a:64:f2:
18:42:09:02:49:8d:96:f8:af:7f:60:c3:35:73:cd:
86:8f:82:95:5a:84:f1:f1:65:33:8b:37:76:23:66:
69:30:08:b9:47:cb:05:49:e8:70:3f:23:5f:ba:b7:
ae:89:13:ff:30:53:37:b8:0c:a1:ee:62:a5:a5:d6:
5f:49:cb:d6:2c:57:df:99:4f:f8:b7:02:9a:86:a4:
9a:8f:5d:6d:e7:57:32:03:48:68:fd:59:4d:41:5b:
c4:dc:75:84:75:f3:c2:aa:8e:6d:39:ba:c1:28:bf:
53:b3:a4:c0:74:52:9d:2d:f8:75:cf:35:eb:ce:de:
f2:a4:9c:d1:30:dd:59:7d:39:a6:20:f9:f3:6f:6b:
89:8c:c3:db:c7:31:e9:6c:b8:5d:9e:18:a9:98:8b:
f4:da:0b:78:d2:c5:eb:70:8e:b7:e7:84:b2:3d:7f:
64:7b:5b:6e:ce:3a:2d:fd:e8:16:ff:63:be:a1:ee:
8c:61:02:0f:6e:a2:cb:17:02:cf:43:29:16:8d:25:
87:76:fc:07:99:fb:23:24:48:2f:9c:9b:2c:7b:bd:
21:50:dd:f2:69:ba:e2:12:0c:06:2c:46:fb:4d:7d:
87:44:76:f5:ab:9e:57:00:a2:ea:da:50:3a:56:77:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:32:D8:6C:B3:F9:72:FD:04:D0:7D:D2:BA:9D:B0:F6:A3:3E:C1
X509v3 Authority Key Identifier:
keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f1:71:b5:6e:72:3a:79:67:f4:e5:72:af:e1:70:a0:89:52:
fd:9b:40:b0:00:b4:1c:f0:7e:8c:70:f0:d9:03:f0:fc:87:20:
ba:ca:24:36:c5:a1:0f:d8:05:e3:64:7d:3f:96:28:a3:49:71:
02:8e:51:f2:4b:25:41:fe:96:f7:2f:84:32:83:c6:54:9d:48:
28:79:ee:be:23:af:44:06:a7:fb:b9:9a:0b:1a:b2:f5:b8:ee:
dc:fe:ff:1d:ce:8d:3f:10:29:d5:d3:f7:b2:eb:ef:5b:57:56:
d3:c6:fe:9d:dd:bb:5c:ac:a7:ad:c5:e9:b9:9b:28:fe:8f:97:
0b:97:db:1a:d3:7d:36:4c:29:19:00:14:c4:d6:a5:a4:fe:b9:
3c:49:21:df:98:c7:eb:3a:1a:63:56:49:bb:72:fa:98:8b:1e:
5a:ee:a2:67:7f:20:72:3e:14:0b:a6:53:43:63:d3:86:60:3c:
1f:2c:34:ec:20:d8:ea:04:3c:25:48:34:7f:f7:ad:2f:7c:a0:
8a:9f:74:c3:66:23:52:e9:8e:b0:86:b1:be:1e:52:66:64:ca:
07:3b:e9:86:d3:ba:d9:a5:b7:cc:0c:86:d7:04:de:95:6a:c6:
85:30:fa:59:8b:ff:c6:93:71:77:a4:76:73:41:27:41:74:d5:
6d:2c:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org