Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32322d3234203d3e20313338303930.roa
File: 3130332e3132342e3234342e302f32322d3234203d3e20313338303930.roa (raw, json)
Hash identifier: TreWp1olwIjAwb+SCsOxrDVCGYoZ3IEyTDIM7uP9nSM=
Subject key identifier: 62:0E:96:2E:75:A9:1D:16:CE:71:62:16:AE:5B:49:09:FB:A8:FA:72
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 156CFE35C1CE58B3818CC11F71D6A44626F38DE8
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32322d3234203d3e20313338303930.roa
Signing time: Wed 29 Jun 2022 22:32:15 +0000
ROA not before: Wed 29 Jun 2022 22:27:15 +0000
ROA not after: Wed 28 Jun 2023 22:32:15 +0000
asID: 138090
IP address blocks: 103.124.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6c:fe:35:c1:ce:58:b3:81:8c:c1:1f:71:d6:a4:46:26:f3:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Jun 29 22:27:15 2022 GMT
Not After : Jun 28 22:32:15 2023 GMT
Subject: CN=620E962E75A91D16CE716216AE5B4909FBA8FA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:7c:71:53:85:88:db:bd:db:b6:67:e4:b1:
16:9f:6a:ba:73:5d:69:4f:ec:f4:93:fd:3f:b9:de:
76:b1:ff:8f:b4:d0:04:17:37:65:70:11:b3:d1:72:
f6:91:71:cc:3d:e1:c3:e4:1d:cc:2a:c9:e8:97:41:
0f:09:dd:d1:d4:d8:d6:ed:6f:05:7a:7c:31:25:e8:
69:59:e3:cc:bb:38:14:b8:44:b2:95:f0:e5:6d:f6:
bf:e9:02:90:0f:a9:6e:94:fb:4d:6d:e5:f2:0d:db:
4c:2c:2a:17:89:87:df:0d:bb:49:f7:5d:84:c7:61:
2c:f6:5c:ff:9d:b4:c6:48:bd:0d:81:de:17:ce:f7:
2d:7c:3d:e9:6c:d2:8c:26:87:62:83:57:24:97:2b:
55:8b:c8:69:c2:04:88:26:5a:78:e1:c1:88:d4:c8:
8c:ca:30:ef:82:45:37:e4:bc:fc:dc:4d:f3:ee:9a:
be:30:85:ee:a0:cd:7e:ef:7c:52:89:d3:a9:9f:88:
23:16:7a:ab:43:d6:73:ae:6f:b3:f2:55:47:13:e9:
f6:da:f2:46:b9:5d:fe:46:87:9e:18:4d:f4:76:12:
86:fc:12:0b:ae:1a:f0:66:88:62:4a:a2:c9:34:ad:
50:33:ae:b5:84:ef:b6:e6:22:a9:ba:c0:32:69:b3:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:96:2E:75:A9:1D:16:CE:71:62:16:AE:5B:49:09:FB:A8:FA:72
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32322d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.244.0/22
Signature Algorithm: sha256WithRSAEncryption
44:66:2e:0a:7d:a7:a9:e2:83:be:56:29:d9:80:af:0e:ec:24:
cf:24:08:2e:55:b3:7b:35:a9:5e:57:d3:14:de:34:73:77:c8:
9a:1f:d5:15:7b:c2:ae:93:b9:5c:0f:2d:e7:23:2d:47:ed:d6:
9d:75:e9:21:4b:95:ff:31:ba:bc:ff:cc:bf:2e:dd:dd:ec:f6:
bd:33:1e:d6:e4:07:36:7d:a8:d5:20:b2:c3:17:b5:a6:05:47:
1e:65:48:68:e4:7c:f0:71:af:86:99:75:5d:f8:78:06:70:a3:
8d:1f:36:44:09:ac:76:a9:dd:31:5d:7b:87:63:41:31:18:2c:
3c:e8:de:0e:8d:ef:9a:e0:09:ee:03:d4:09:cb:43:53:95:8f:
e4:04:49:15:2b:f5:53:c3:01:95:38:d3:74:89:80:4b:18:8f:
03:33:c7:ae:47:be:89:49:32:bd:ef:1e:2b:90:d9:82:e4:9b:
e3:95:35:f6:06:4c:24:f3:d7:f3:32:79:35:fd:a6:b8:f2:a8:
d5:00:f8:76:52:ee:73:74:45:de:22:b1:31:f3:ad:61:b1:60:
37:9b:19:3b:fc:45:5a:73:35:61:0e:f7:1d:fb:96:23:82:e8:
45:92:f3:ce:df:08:70:2a:03:43:a0:31:b0:33:0c:9f:bc:0a:
19:2f:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org