Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32332e302f32342d3234203d3e20313530343930.roa
File: 3130332e35352e32332e302f32342d3234203d3e20313530343930.roa (raw, json)
Hash identifier: x8XVHmk2+Ro2uoOOSp9a+XGPLc7Ztm5KgQFfAZQbZdE=
Subject key identifier: 4C:E5:7A:40:56:76:1C:C0:F1:B0:C0:C7:AF:5C:D7:E1:1C:55:02:03
Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial: 42E1822066676B92CA5FF1CDA7F18D8FFF8496BA
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32332e302f32342d3234203d3e20313530343930.roa
Signing time: Sat 25 Mar 2023 10:20:25 +0000
ROA not before: Sat 25 Mar 2023 10:15:25 +0000
ROA not after: Sat 23 Mar 2024 10:20:25 +0000
asID: 150490
IP address blocks: 103.55.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e1:82:20:66:67:6b:92:ca:5f:f1:cd:a7:f1:8d:8f:ff:84:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Validity
Not Before: Mar 25 10:15:25 2023 GMT
Not After : Mar 23 10:20:25 2024 GMT
Subject: CN=4CE57A4056761CC0F1B0C0C7AF5CD7E11C550203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:a1:37:d8:b6:8f:88:8e:64:cf:53:0d:97:
7d:0f:a8:d3:44:b2:9b:15:62:0c:52:b8:d1:d3:0d:
2d:94:ca:bc:e7:89:e0:d3:74:c4:4a:bd:4c:21:26:
d4:79:80:c1:43:1a:8f:2a:75:ce:89:4f:77:9c:80:
f4:a7:44:43:31:44:7b:89:31:05:ff:4b:02:40:dd:
d9:9e:1e:45:94:82:45:f4:bd:77:75:db:f6:87:12:
22:39:df:cc:be:7c:40:5a:82:77:ec:be:87:d8:cc:
fe:f5:fe:46:d3:1d:66:8a:ef:6f:db:9b:00:0d:b1:
69:c6:4b:dc:28:e6:6c:c4:99:80:a7:f8:d1:d0:33:
d9:c7:ce:ef:36:9a:9a:88:4d:e8:fb:26:32:a7:82:
b6:5a:2c:f5:a8:66:c0:1b:a3:47:6e:76:84:ac:dd:
c7:5d:c0:26:8a:60:2f:1d:ad:07:8f:0c:8d:1d:63:
ec:1e:b3:7e:c4:53:f6:3b:96:7f:e7:7f:53:ae:bb:
e0:37:e4:88:46:a9:40:ed:45:33:aa:ed:cd:08:43:
53:ab:9b:cb:71:a3:0c:7a:33:e8:6c:57:55:a3:d1:
ee:c1:fd:72:e4:4b:82:a3:ee:07:72:26:64:4f:f7:
67:75:2e:1e:e3:cc:0a:28:8d:97:38:32:78:9c:48:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:7A:40:56:76:1C:C0:F1:B0:C0:C7:AF:5C:D7:E1:1C:55:02:03
X509v3 Authority Key Identifier:
keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32332e302f32342d3234203d3e20313530343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:df:83:3c:41:68:9e:77:37:d2:ff:0d:bd:f1:0a:e0:e2:b0:
d7:61:19:bb:1d:0e:0e:64:46:11:03:dc:8f:eb:25:ed:e0:3a:
ce:02:a0:61:ab:b7:c0:b1:8f:da:bc:34:56:9d:04:7d:85:d6:
64:06:dd:d7:2c:39:85:aa:21:e8:04:12:38:d4:90:f5:5d:f6:
41:3d:3a:1a:54:d6:f5:52:f0:c5:a3:c5:fb:a9:f6:a9:21:ad:
a1:0f:9b:85:77:dd:ed:61:60:81:89:48:e8:01:0b:ce:af:f0:
d8:f0:5b:c7:14:dc:52:8d:4a:06:99:d7:17:68:c0:4b:84:7c:
6b:b5:bf:bb:a8:de:d0:0c:2a:60:8e:29:7f:5e:46:16:2c:2d:
65:9f:c0:86:1e:ea:47:90:52:6c:7c:57:0c:47:42:85:ff:0f:
fe:73:07:71:26:92:b0:01:43:0b:77:d3:68:38:a7:b6:5b:a0:
69:ac:dc:e9:3c:ec:a1:38:6b:c6:1d:7b:9e:20:61:1c:53:d6:
3c:8c:ed:34:22:a6:8f:8b:0a:eb:6f:f1:ed:76:8e:ca:59:95:
a1:b0:54:5c:a0:ca:22:36:a3:32:77:6e:88:ab:79:92:6b:42:
a9:2a:d9:0d:ad:78:93:36:9e:8d:c8:ea:8d:2c:60:f5:df:82:
c5:7e:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org