Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa
File: 3130332e35352e32322e302f32342d3234203d3e20313530343930.roa (raw, json)
Hash identifier: W2q0O5C9U1gahzCSV+qeFRrZCUjT9KXf1mVv7p92EOo=
Subject key identifier: 9B:59:0C:F7:C5:44:6F:C7:43:75:F3:1C:94:E5:F8:D0:64:DE:84:E3
Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial: 20AE3AD8E9305FBBF6D3D46680B2C8295266FA63
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa
Signing time: Sat 25 Mar 2023 10:19:33 +0000
ROA not before: Sat 25 Mar 2023 10:14:33 +0000
ROA not after: Sat 23 Mar 2024 10:19:33 +0000
asID: 150490
IP address blocks: 103.55.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ae:3a:d8:e9:30:5f:bb:f6:d3:d4:66:80:b2:c8:29:52:66:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Validity
Not Before: Mar 25 10:14:33 2023 GMT
Not After : Mar 23 10:19:33 2024 GMT
Subject: CN=9B590CF7C5446FC74375F31C94E5F8D064DE84E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:6f:9b:7c:8c:2e:67:54:a5:b3:b5:f8:19:
d3:bc:fc:15:b0:23:6e:90:2b:66:7e:7f:cb:80:9f:
d9:30:7b:c0:de:28:e6:ed:c0:e2:17:d9:a9:a0:f8:
fe:18:2f:93:cb:a5:dd:93:60:e7:18:08:a5:0e:d2:
58:ad:d4:0d:aa:f1:66:54:29:f1:c3:ca:5e:5f:17:
df:37:80:d3:ca:63:b7:c2:d7:fb:17:01:af:b2:6e:
ef:dd:14:cd:3c:33:c1:32:f0:f6:ba:95:de:e7:56:
2e:18:08:06:50:e3:e3:b3:a6:36:32:de:37:c6:17:
0f:4f:8d:f5:41:3d:f4:07:e6:e4:7e:1c:29:41:07:
27:1a:e5:65:41:43:47:da:10:a3:4a:36:d0:56:49:
c4:27:7e:bd:16:be:3c:f1:93:c5:c7:3e:d2:8a:ca:
b2:33:08:9f:de:78:23:cf:fa:62:71:7e:6d:07:17:
11:c1:73:36:ed:45:b5:65:a1:d4:37:0e:2e:b1:a6:
44:d1:57:6d:1c:9d:3b:9c:16:93:43:24:ab:a5:57:
a1:e7:ce:9f:a4:08:22:d8:66:6f:a8:41:9e:e5:30:
dd:98:b7:5e:c8:8a:7c:1f:08:01:da:1e:b1:1a:cc:
5f:41:99:d7:a3:6c:ba:4a:4d:d4:4f:59:65:a2:c3:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:0C:F7:C5:44:6F:C7:43:75:F3:1C:94:E5:F8:D0:64:DE:84:E3
X509v3 Authority Key Identifier:
keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a3:5a:a3:e3:4e:5f:7a:dc:ed:eb:31:cb:76:c4:45:6e:8c:
0b:a3:14:b1:73:42:15:5f:01:22:2c:05:1f:5f:2e:7e:18:8a:
b6:51:1d:0c:f1:87:62:87:53:57:65:db:9f:d8:c1:a9:bf:43:
24:20:82:b8:dd:28:38:51:68:76:6b:ee:d2:4e:37:2b:85:7d:
4f:a3:14:80:15:69:fb:e1:98:da:3e:db:69:7c:e5:74:bf:d6:
4b:6e:55:e8:d3:0c:a5:0f:76:05:74:bc:de:29:af:3b:a6:90:
57:5a:f1:da:da:15:d7:0b:fb:a2:29:c8:7d:71:aa:76:05:e0:
75:7f:a6:d7:dc:7a:88:54:89:67:b2:0f:97:6d:b7:58:a7:ad:
34:b0:b6:b2:f1:63:9d:62:68:af:ee:f6:0e:8d:5d:96:3d:2b:
91:a5:58:c6:62:50:79:50:9c:cb:29:39:d8:d0:02:e1:f7:5b:
eb:84:5d:75:57:79:b0:8a:e0:f3:da:1f:a6:25:4a:18:dd:68:
c5:05:91:8e:3a:bb:98:b2:98:69:d1:6c:52:e6:ed:97:c8:17:
ef:7b:f3:46:30:3c:78:38:46:2a:05:d8:24:76:ac:08:e6:e8:
3a:21:ff:ec:75:fe:89:76:24:80:24:6b:dc:06:2e:a9:05:0f:
20:39:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org