Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32332d3233203d3e20313430333936.roa
File: 3130332e3135302e3137342e302f32332d3233203d3e20313430333936.roa (raw, json)
Hash identifier: mYTXc7zIYgMhbkB6kI+jdp3DhIOGN0OYoNAE7NbZMd0=
Subject key identifier: B7:A2:6E:AE:47:B3:25:76:86:09:BF:FE:8F:E1:51:C8:52:7D:BC:C5
Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial: 67FD0D7E054CFC2A807F8493A3560B2FBE1F404B
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32332d3233203d3e20313430333936.roa
Signing time: Tue 06 Sep 2022 02:00:01 +0000
ROA not before: Tue 06 Sep 2022 01:55:01 +0000
ROA not after: Tue 05 Sep 2023 02:00:01 +0000
asID: 140396
IP address blocks: 103.150.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fd:0d:7e:05:4c:fc:2a:80:7f:84:93:a3:56:0b:2f:be:1f:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Validity
Not Before: Sep 6 01:55:01 2022 GMT
Not After : Sep 5 02:00:01 2023 GMT
Subject: CN=B7A26EAE47B325768609BFFE8FE151C8527DBCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:04:cc:cb:d9:8e:2c:f0:01:ff:d6:10:20:
d5:b5:8f:27:93:0f:be:59:9b:94:16:0b:64:50:98:
b4:d3:25:a7:4b:3e:dd:49:ab:28:18:14:97:43:55:
2b:46:d3:ac:6b:85:ea:37:c2:b3:f2:02:41:e9:f5:
95:3f:0d:f7:cd:bd:55:b0:c2:fe:49:fb:72:f1:50:
24:48:ed:24:6c:b0:71:29:1d:f9:12:c6:ee:e5:c0:
2f:3e:04:4c:43:ab:49:30:03:8b:fc:53:2d:a8:f2:
68:c2:1f:c7:6b:a3:de:88:49:3c:66:0b:fe:d8:8e:
9c:9d:90:37:fd:9e:3c:9b:9a:73:ce:5c:3d:7b:2b:
2d:46:3d:c1:f0:02:d8:e5:95:9f:85:cc:28:cf:c8:
ad:a8:56:49:e8:c4:7d:b8:1a:dc:79:fd:ac:d3:a6:
8b:f9:64:6c:13:f2:ad:f8:1f:30:0a:89:3d:f5:ee:
13:86:9d:30:a1:90:70:75:dc:b6:6c:e9:d0:e8:46:
ae:23:0e:93:9d:06:e1:13:a5:a1:92:8e:bd:a3:8a:
49:4e:85:59:4d:a3:29:f3:b8:c6:5f:0e:e0:10:5a:
70:32:3d:b0:8d:f8:da:72:7e:3e:98:e6:d1:06:40:
88:29:96:00:8b:1a:15:75:29:28:60:ce:a4:16:e8:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:6E:AE:47:B3:25:76:86:09:BF:FE:8F:E1:51:C8:52:7D:BC:C5
X509v3 Authority Key Identifier:
keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32332d3233203d3e20313430333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.174.0/23
Signature Algorithm: sha256WithRSAEncryption
30:f0:90:24:79:fa:aa:24:85:38:33:cb:fd:12:f8:65:ff:e6:
ae:49:d8:d3:09:0c:67:d9:b0:5e:be:e5:76:07:5c:0e:3d:30:
14:bb:12:61:16:25:e8:2f:af:90:85:78:64:45:b6:6a:5d:9c:
fd:18:88:e5:20:32:05:be:10:ad:c0:34:ba:6f:57:5a:f0:c4:
5c:62:4c:32:9a:c5:97:d1:d2:a4:d5:58:3a:cd:88:91:59:89:
16:c3:f4:4d:09:03:41:07:c1:32:e4:dc:f8:5f:c8:f7:a0:00:
42:3e:94:1e:b7:1f:a8:88:73:08:ba:64:db:47:43:18:b6:74:
66:e1:97:70:5f:19:37:cd:ac:34:65:40:f9:c2:c2:de:c4:57:
f7:30:40:d9:f1:36:21:34:72:49:3b:98:e3:95:a3:49:91:11:
2c:8f:6f:da:a6:1c:b4:32:e4:1c:4f:37:de:6b:c6:0e:61:72:
35:9d:99:fa:2d:09:64:a7:35:58:ca:7d:59:c4:bb:d9:90:63:
98:d6:f8:f4:d6:52:e0:b3:2d:cd:b9:27:e3:7e:db:ee:71:ac:
e5:ed:83:d8:e2:cd:75:8c:a3:38:ec:b6:4a:86:f7:0b:79:99:
f8:87:0a:ac:ee:95:68:44:61:08:a1:e2:84:a5:85:35:31:b9:
1c:a7:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org