Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32342d3234203d3e203634323938.roa
File: 3130332e37372e3232362e302f32342d3234203d3e203634323938.roa (raw, json)
Hash identifier: z1DNpZM1iI970sIEHAF8OoP29mIU8wUQ6umWp551Dl8=
Subject key identifier: C6:07:D4:04:AF:EE:6D:7E:FA:A6:E7:25:4A:02:D2:30:74:A3:7A:9D
Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial: 51C69A50680E7B122C175E7374C43E31D2BD74E6
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32342d3234203d3e203634323938.roa
Signing time: Mon 13 Mar 2023 02:43:32 +0000
ROA not before: Mon 13 Mar 2023 02:38:32 +0000
ROA not after: Mon 11 Mar 2024 02:43:32 +0000
asID: 64298
IP address blocks: 103.77.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c6:9a:50:68:0e:7b:12:2c:17:5e:73:74:c4:3e:31:d2:bd:74:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Validity
Not Before: Mar 13 02:38:32 2023 GMT
Not After : Mar 11 02:43:32 2024 GMT
Subject: CN=C607D404AFEE6D7EFAA6E7254A02D23074A37A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:ed:b9:e8:0e:4c:5f:71:70:55:ae:50:a1:
26:c8:d4:f3:4c:cb:25:f3:cc:96:9f:b6:94:d6:7a:
5a:7d:f1:5d:6d:5f:83:68:15:e2:ef:9c:49:c7:8b:
7e:99:2b:21:1d:bb:24:05:37:c9:4c:be:40:7e:81:
46:9a:d0:19:2d:1a:7b:ca:c8:ef:af:24:de:ce:2f:
74:92:ea:12:76:31:3b:5a:41:6d:b3:fb:66:a8:5b:
b4:b0:34:43:4f:91:32:94:45:d8:bf:26:dd:de:8d:
92:0c:0d:76:ce:d5:e0:0c:d6:d7:ca:10:5e:d0:9e:
f2:c2:d2:5a:c1:08:26:9e:03:e0:5a:61:4d:b4:20:
ee:fc:8b:ea:5b:fd:22:fe:9c:6d:a6:cb:8b:f8:86:
68:21:c6:de:9f:24:a7:69:55:9a:1a:a1:ce:09:92:
e2:32:24:00:13:87:49:71:a4:c9:1a:ce:a6:26:0e:
49:2d:0b:d4:6e:49:78:a4:3d:09:64:58:d5:d6:07:
76:c9:0a:ac:b5:54:a6:50:fd:c4:13:f7:b9:f9:c7:
9a:26:4d:eb:1f:5e:e1:6e:c3:ac:02:8e:f5:5e:43:
74:48:21:87:5b:0e:76:84:8d:cf:22:a3:71:89:70:
52:b9:ec:82:8b:3b:80:f2:9f:38:f2:e5:d4:ab:bb:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:D4:04:AF:EE:6D:7E:FA:A6:E7:25:4A:02:D2:30:74:A3:7A:9D
X509v3 Authority Key Identifier:
keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32342d3234203d3e203634323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:56:06:e7:d5:0e:b8:b3:19:6b:a2:32:a0:c9:c0:ed:ac:0e:
b1:2c:6a:cd:cc:fd:59:6d:50:96:77:18:91:94:e4:69:d4:89:
76:cb:d3:f8:77:9e:d7:48:48:fb:28:b2:e4:9b:30:ce:56:d9:
65:d8:10:1e:e3:e6:79:9a:fa:e9:b6:c2:6e:8c:f0:89:3a:50:
99:8e:c0:9c:ea:0e:a9:41:f9:c6:36:f2:23:9d:91:67:9b:3a:
bd:e5:00:52:0a:18:07:de:4b:43:44:7c:d3:c4:d1:8d:00:96:
00:b9:ea:7c:e4:23:bb:bc:fe:ea:96:21:95:5a:01:85:d8:3d:
95:15:82:61:c1:8a:65:bb:e8:2c:e2:6b:e2:3f:dd:9c:c8:f4:
a6:0b:b2:a5:97:36:9d:2b:57:5f:73:f3:15:71:83:56:32:2a:
96:18:55:ed:c6:e1:86:17:7a:2f:ec:12:72:5f:ca:ec:e0:0a:
d9:22:d3:67:90:6a:13:58:55:f3:e7:db:46:11:55:cb:98:a0:
2f:28:d2:00:d5:d7:8f:4e:0d:1e:fe:d5:aa:79:43:6b:55:d0:
ea:7d:8d:ac:28:74:c5:5a:bc:27:e1:34:ed:20:63:c6:31:7e:
b7:42:81:6b:da:5c:0c:32:cb:11:60:ba:9f:d6:1e:ba:6d:25:
6b:07:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org