Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3234203d3e20313431393834.roa
File: 3130332e3136372e3136362e302f32332d3234203d3e20313431393834.roa (raw, json)
Hash identifier: POhY7bUEz6RDK75tjK2WK8zg/RfVMU1dLgureXIzipg=
Subject key identifier: 17:30:FE:BF:03:91:0D:C7:7E:2A:02:8B:50:A1:32:83:87:06:F8:3B
Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial: 4A9A8CA125944FF83D7E2B564F21F6394C9C1601
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3234203d3e20313431393834.roa
Signing time: Sat 21 May 2022 14:00:00 +0000
ROA not before: Sat 21 May 2022 13:55:00 +0000
ROA not after: Sat 20 May 2023 14:00:00 +0000
asID: 141984
IP address blocks: 103.167.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9a:8c:a1:25:94:4f:f8:3d:7e:2b:56:4f:21:f6:39:4c:9c:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
Validity
Not Before: May 21 13:55:00 2022 GMT
Not After : May 20 14:00:00 2023 GMT
Subject: CN=1730FEBF03910DC77E2A028B50A132838706F83B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:da:19:4b:11:72:e7:10:d1:80:11:c1:5b:
b4:4b:c7:dc:bd:7b:3b:03:ec:7c:5f:a6:ca:ac:57:
1b:ce:cb:9d:42:4c:da:a2:62:a0:ff:40:5d:26:db:
da:5b:72:1e:b7:b0:8e:fc:4f:b1:c2:6d:60:42:63:
5c:9c:3a:32:62:60:ba:c6:be:99:35:81:79:c5:d7:
20:58:4a:c1:ff:ea:ce:3e:83:e9:e5:51:c5:89:10:
fe:c9:bf:d3:90:6e:62:59:70:25:b9:57:69:e3:84:
c7:d5:11:73:d5:7c:97:1c:19:a2:fd:26:0d:05:61:
c0:56:80:89:16:30:5f:3d:70:08:f4:81:a3:9a:a2:
9b:6b:19:c9:ed:94:f6:8d:58:68:5b:cf:82:a2:fd:
b8:ff:fd:74:c9:a6:2b:ce:72:57:e6:15:a5:98:44:
fa:4e:23:6a:6b:2b:f7:82:9f:68:b9:0a:af:88:52:
50:bb:ad:ab:5f:58:8d:a4:e2:69:e7:b5:01:24:2a:
02:c1:ab:2c:4a:7f:1a:72:99:89:42:ac:3c:ce:6e:
41:58:73:78:8c:4d:f0:ce:f1:6d:00:1e:de:44:36:
91:ef:39:59:f1:19:47:49:f7:1d:71:9e:56:12:db:
88:34:a2:36:36:73:92:8a:c3:66:29:34:35:43:33:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:FE:BF:03:91:0D:C7:7E:2A:02:8B:50:A1:32:83:87:06:F8:3B
X509v3 Authority Key Identifier:
keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3234203d3e20313431393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:a8:73:ba:c4:62:1c:40:46:6a:a3:19:95:06:fb:a2:5b:b7:
c8:c5:7c:a6:f8:f1:58:e9:5a:b2:91:4f:1d:7c:5b:69:8c:40:
a5:97:42:d6:71:99:da:51:c0:3d:25:47:60:71:5d:11:29:fc:
4f:86:fd:4c:14:30:6e:4d:59:99:ae:6b:06:d8:25:de:97:d0:
30:fb:ba:b2:f7:3a:41:24:f6:59:62:2f:d6:81:28:7e:49:84:
18:1c:7d:43:3e:77:61:14:77:f8:0e:f8:4b:51:10:d4:5a:77:
cb:de:0f:ef:80:6b:d2:71:a2:ec:55:cb:b8:22:30:56:c2:6e:
06:2d:a8:f2:5f:da:19:6e:8b:02:95:73:83:a7:07:c5:8f:a5:
b6:30:40:05:37:a6:69:ff:35:9b:68:a8:52:e3:91:d3:8e:58:
5c:2d:bd:87:2c:cf:7f:8e:87:83:aa:26:ad:a0:b0:5b:a4:26:
18:35:e9:ca:0d:a7:fa:24:85:b7:60:d2:1d:d1:52:18:44:7b:
82:de:54:cc:fa:0e:c2:d2:dc:0d:ae:9d:0e:2a:d6:92:12:49:
e5:48:cb:74:0f:ff:10:d4:e4:ec:50:c2:f7:f9:ae:86:a2:c4:
b9:92:90:44:ed:c7:69:16:a4:ab:25:1f:68:a8:b4:ad:48:ba:
49:c3:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org