Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa
File: 3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa (raw, json)
Hash identifier: xwdj3P7d0LeUeM3Gx0LVgL1NZNMk+usdTqfNVU7inYA=
Subject key identifier: 55:43:17:AB:4C:09:DC:08:64:C4:C2:C6:33:EE:01:CC:78:5F:4E:5A
Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Certificate serial: 6E2F42F393DC84412DBAA490DE355593230950B8
Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa
Signing time: Mon 12 Feb 2024 02:28:56 +0000
ROA not before: Mon 12 Feb 2024 02:23:56 +0000
ROA not after: Mon 10 Feb 2025 02:28:56 +0000
asID: 139412
IP address blocks: 103.143.224.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2f:42:f3:93:dc:84:41:2d:ba:a4:90:de:35:55:93:23:09:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Validity
Not Before: Feb 12 02:23:56 2024 GMT
Not After : Feb 10 02:28:56 2025 GMT
Subject: CN=554317AB4C09DC0864C4C2C633EE01CC785F4E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:90:64:6a:06:df:94:70:4a:da:9b:ec:17:
3a:5e:f4:4e:59:06:bd:ad:cd:f9:9e:5f:30:1f:e5:
c9:c5:aa:5c:e9:2f:5b:45:4a:dd:3d:2c:7c:c0:f0:
c0:18:9c:7a:e8:61:78:31:9a:f6:90:99:a1:8e:da:
6f:e0:d8:f4:4c:40:aa:8f:89:93:12:f3:2d:bd:ee:
97:35:56:bd:dc:e7:e8:68:f1:71:36:b2:8f:73:31:
8b:e9:9b:da:62:95:f4:84:24:0c:8e:30:ae:ab:7d:
13:43:97:0b:3b:6d:a6:c9:e4:0c:f1:46:f7:60:e5:
ca:c3:6b:5d:d7:f9:a5:53:d0:1e:05:e0:e0:0d:c9:
71:99:84:1b:99:fc:4b:3c:63:01:f8:0a:d6:cd:2a:
a1:df:e3:10:15:9a:6f:78:af:df:f2:65:42:ba:f0:
e2:1b:fe:94:cc:c6:35:73:98:28:c8:f0:84:1a:da:
96:8d:47:de:78:27:b9:96:76:3f:a4:24:33:43:eb:
3b:93:82:1c:f6:10:73:6d:df:49:42:2a:c5:a4:39:
b9:de:7d:a4:03:2d:c8:c0:f9:d0:3f:a2:33:46:d7:
b6:f4:fa:2a:39:92:71:ba:0a:b0:95:8b:a4:d9:35:
d8:2f:43:ff:25:bc:ec:b4:24:11:f2:0b:72:ec:43:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:17:AB:4C:09:DC:08:64:C4:C2:C6:33:EE:01:CC:78:5F:4E:5A
X509v3 Authority Key Identifier:
keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3234203d3e20313339343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.224.0/23
Signature Algorithm: sha256WithRSAEncryption
34:78:89:5d:13:21:17:87:be:bb:0d:19:a3:1c:96:e0:40:56:
6d:fd:94:0d:76:12:f5:38:86:66:03:53:ac:33:bc:ae:3a:61:
99:46:f1:f2:0f:34:a8:a9:89:ef:74:6f:ae:8b:12:a1:b1:dd:
5d:c2:f5:71:73:d5:06:28:c5:00:33:1a:49:2f:c9:c6:61:a5:
a3:51:e8:7e:be:15:1c:9f:34:83:09:cf:96:22:0f:2a:42:b0:
35:b0:c5:93:f1:af:98:8c:db:96:d1:40:bc:2e:b9:1e:ee:b2:
40:d1:b0:b3:53:17:f7:29:79:bd:8f:ae:5b:43:15:51:44:f0:
b8:52:bc:5c:0e:dc:6e:ac:44:1a:e5:94:1a:25:73:e2:9d:f4:
15:9a:13:ec:9a:5c:b2:ca:44:d8:18:57:ec:ab:3e:7d:b0:fe:
af:ca:6b:91:0e:81:e5:48:6a:59:6a:36:36:50:dc:36:d0:4f:
63:64:ff:11:11:7e:88:09:6b:68:d8:14:5f:4a:64:8b:14:fc:
02:7d:f3:de:de:f5:30:3f:f5:a9:d1:74:66:6b:e4:14:d5:28:
79:18:02:a2:a7:e3:35:fd:38:c6:66:26:fe:a8:71:ff:3f:84:
59:a0:77:46:29:9d:1c:45:66:88:8d:07:ba:30:5d:c1:15:d4:
05:da:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:47:45 2025 by rpki-client