Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313530353232.roa
File: 3130332e3134382e3133302e302f32332d3234203d3e20313530353232.roa (raw, json)
Hash identifier: VPvc7uWyWld4WYbIeW0OR7jzh19XUIXlfIz8VLKn9ls=
Subject key identifier: C2:E3:2B:46:A6:10:54:14:88:DF:18:2B:2F:FF:64:B4:26:6D:1B:AF
Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E
Certificate serial: 1F1C49333235877A3A547DEE202C3B46C6C201E7
Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313530353232.roa
Signing time: Sun 19 Feb 2023 14:16:52 +0000
ROA not before: Sun 19 Feb 2023 14:11:52 +0000
ROA not after: Sun 18 Feb 2024 14:16:52 +0000
asID: 150522
IP address blocks: 103.148.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1c:49:33:32:35:87:7a:3a:54:7d:ee:20:2c:3b:46:c6:c2:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E
Validity
Not Before: Feb 19 14:11:52 2023 GMT
Not After : Feb 18 14:16:52 2024 GMT
Subject: CN=C2E32B46A610541488DF182B2FFF64B4266D1BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:e4:8d:78:11:80:c4:44:93:ec:29:ae:6a:
42:0f:46:12:3f:4d:76:be:fc:d8:e8:1e:1f:4d:1b:
97:9d:f9:66:40:eb:b2:e9:bb:73:ad:6c:0d:37:91:
7e:36:66:99:5b:7f:94:f8:80:55:8e:f1:f5:a7:f7:
4a:98:c9:53:56:5a:95:33:a9:e1:7f:ec:0c:ee:aa:
53:56:9a:2b:ab:12:e8:37:dc:89:c9:71:b9:be:fb:
19:0c:75:85:87:74:a4:10:72:e3:b8:3f:3f:6d:4e:
ac:f3:fe:28:12:d0:2e:43:26:32:16:bf:92:e8:6a:
3d:3b:0f:f2:e9:d8:9f:d4:44:2e:8f:4f:bf:26:7b:
fa:e1:84:38:97:ac:fa:68:f0:cc:2b:f1:eb:2b:e3:
0e:41:49:43:74:09:35:54:a3:43:33:df:be:8c:a4:
3e:dc:19:8f:a5:66:63:bd:93:b0:4f:d9:d8:9b:8a:
15:7a:3d:d6:0e:b3:6e:d1:9a:d1:bb:d9:33:74:bb:
25:de:18:b9:d8:ed:7a:ab:47:bd:8a:c3:98:bc:a6:
32:60:89:20:e0:1a:0a:75:61:24:9f:6d:bc:9f:94:
6d:e1:20:27:6d:98:62:c8:25:3c:6f:bb:28:65:16:
74:1f:f6:da:25:35:bf:b1:19:32:b1:cb:9b:1d:7e:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:2B:46:A6:10:54:14:88:DF:18:2B:2F:FF:64:B4:26:6D:1B:AF
X509v3 Authority Key Identifier:
keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313530353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.130.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:d3:cb:e8:ea:01:40:6d:0e:fa:52:89:0c:94:3d:16:ac:92:
74:f5:0b:e5:96:bf:7b:29:21:6c:54:05:58:d1:e8:fe:a0:91:
83:9d:0d:33:61:fb:47:50:40:23:6d:84:e3:10:84:5c:f4:34:
03:56:f9:e4:0d:37:0f:81:1a:98:f2:95:2f:e8:68:2b:5e:28:
56:cb:d5:4c:51:f6:60:20:f1:41:f2:64:cf:b0:e8:96:c6:a5:
06:4b:48:90:5c:58:ed:0a:77:50:29:dc:fb:dd:71:96:ea:4f:
7a:87:3c:ee:28:1c:bb:ea:f6:2e:1f:3a:05:65:bb:82:87:ea:
0e:ed:f4:e9:a4:22:c1:39:40:f7:cc:09:2e:27:4b:2d:d4:05:
44:a8:59:dd:52:9a:15:51:7d:c5:fa:81:d1:36:5f:50:25:93:
ac:a3:3b:63:5d:2e:66:a1:9c:ac:64:54:a4:14:56:dd:7f:81:
39:da:c3:16:40:d4:33:a4:04:f0:0b:e8:96:63:eb:34:c7:e9:
d5:52:b0:f4:fa:cf:a3:dd:42:db:ec:6e:d8:79:48:b2:b1:0b:
75:28:24:f4:07:e4:9d:62:c6:93:8d:04:35:57:e3:03:da:b1:
9c:d8:ab:b0:61:0d:72:62:c4:0b:d4:38:ec:38:47:9d:48:3c:
c7:f4:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org