Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa
File: 3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa (raw, json)
Hash identifier: X+pZ/SFl9Ok0RwwZKeaisg3p9Mx3StYZ/LyvgjJnkRM=
Subject key identifier: F3:3E:8B:9F:7B:11:ED:71:42:74:6F:36:43:0D:13:2F:BF:BA:58:6B
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 7BF9D19E75B3BE7939F048FED0FB36B4FBBF1782
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa
Signing time: Mon 13 Feb 2023 15:31:56 +0000
ROA not before: Mon 13 Feb 2023 15:26:56 +0000
ROA not after: Mon 12 Feb 2024 15:31:56 +0000
asID: 150276
IP address blocks: 103.41.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f9:d1:9e:75:b3:be:79:39:f0:48:fe:d0:fb:36:b4:fb:bf:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Feb 13 15:26:56 2023 GMT
Not After : Feb 12 15:31:56 2024 GMT
Subject: CN=F33E8B9F7B11ED7142746F36430D132FBFBA586B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:2f:b6:b3:22:2e:cf:ea:aa:14:1e:50:e0:
cc:ea:d8:f5:6d:0e:f8:b2:a2:2d:75:38:ea:71:4b:
c9:72:76:ca:f7:19:12:4c:cf:d5:88:5e:1c:6a:fe:
b1:f0:3e:b7:09:f6:3f:17:1d:98:59:2d:fe:9f:7f:
e1:ec:e1:76:27:95:0b:02:74:8b:1e:ca:66:53:ce:
59:57:6b:c2:ea:aa:65:ab:81:6d:e2:3a:0d:75:71:
3f:d1:24:12:7c:33:fe:5f:a9:2b:88:ea:9f:4e:dd:
5f:d2:58:e0:a9:a1:bd:b4:a0:c2:e4:92:0e:bc:63:
33:70:6c:d5:82:8b:8a:59:84:8c:d3:12:17:2c:51:
3b:46:e8:e8:d7:d8:9e:92:61:42:ab:87:64:3d:fb:
e9:c1:91:22:33:8e:3c:78:88:19:43:5b:96:e3:60:
46:30:a3:7f:b5:bd:f1:9d:bb:ec:46:3c:3d:bc:16:
50:44:14:db:41:28:a7:d7:da:55:89:99:ad:06:96:
a7:2f:13:4d:23:51:4d:1b:fb:ff:86:79:2e:da:c6:
fe:ae:fd:38:57:c4:49:ef:d0:d8:dd:3a:c1:b3:95:
cc:97:83:3e:89:d4:0b:7f:c3:be:91:b9:fe:f6:59:
0b:62:16:c4:23:f0:f9:c2:47:0a:a1:c7:e7:57:12:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:8B:9F:7B:11:ED:71:42:74:6F:36:43:0D:13:2F:BF:BA:58:6B
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.249.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1c:92:5d:88:b3:f9:93:0d:25:41:01:03:a6:85:95:e6:f6:
0c:ff:80:f0:e6:32:c7:7a:22:cf:09:10:ef:1c:0e:91:9c:70:
78:25:b1:6b:39:76:47:6e:56:9d:81:dd:b1:23:37:fe:68:95:
51:1b:67:74:b7:13:e5:d1:97:b4:67:eb:d5:88:d2:de:e6:83:
74:3e:e8:f0:98:3e:49:46:43:9f:8b:a8:a7:00:05:f9:75:08:
1c:48:ee:4c:7d:b4:3b:35:9e:ab:4d:b2:c3:af:4d:0f:79:f5:
70:30:cb:dc:cb:7d:2b:80:44:28:05:13:2c:50:cd:a8:7d:d9:
ca:6d:dd:d7:0b:25:01:98:6d:72:d7:21:22:f5:24:de:c2:2c:
e0:09:71:79:de:88:71:73:23:5e:18:fe:b1:ae:a5:01:e2:54:
2d:fe:be:e5:2d:b9:3c:51:66:e0:c0:4e:79:f8:cb:26:25:c8:
25:0e:54:51:52:d1:a8:15:70:2c:ed:5b:bc:5d:55:78:a2:a4:
bc:6b:22:19:48:73:65:ad:93:56:26:fe:8e:52:72:f3:56:bf:
b8:16:96:07:01:6e:83:61:8e:3a:27:bc:f6:4e:06:a9:62:09:
0d:ab:c2:f7:69:66:5f:79:0f:14:3e:44:cd:f1:0f:21:c2:3b:
6b:36:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org