Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e2037353937.roa
File: 3130332e3135302e3137342e302f32342d3234203d3e2037353937.roa (raw, json)
Hash identifier: BGlLFGqCSTbQAUqYasHfc+b/5trRE/SbDEmjirKRcAs=
Subject key identifier: 9B:3E:19:B3:9B:98:91:26:8B:3E:38:F2:84:B2:56:27:20:17:B9:8B
Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial: 33E322896B698DE71CCA02F80EE6B98A2CB630D6
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e2037353937.roa
Signing time: Wed 11 Jan 2023 15:24:54 +0000
ROA not before: Wed 11 Jan 2023 15:19:54 +0000
ROA not after: Wed 10 Jan 2024 15:24:54 +0000
asID: 7597
IP address blocks: 103.150.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e3:22:89:6b:69:8d:e7:1c:ca:02:f8:0e:e6:b9:8a:2c:b6:30:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Validity
Not Before: Jan 11 15:19:54 2023 GMT
Not After : Jan 10 15:24:54 2024 GMT
Subject: CN=9B3E19B39B9891268B3E38F284B256272017B98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:0c:ba:3d:e0:7f:d1:84:f8:71:5d:de:ce:
a6:1a:60:69:af:db:e9:24:1e:cb:a1:12:e4:3e:6d:
fd:96:60:fd:fa:ee:22:80:f0:46:c8:5e:c5:7c:97:
62:13:5f:ec:82:95:64:2c:a9:a5:9a:85:38:85:a0:
13:46:6f:c4:fe:ef:dd:71:ff:bf:e3:af:20:59:71:
5c:26:75:61:d0:1d:df:02:dc:48:b8:6b:63:aa:90:
ef:92:d8:a2:b4:cb:ba:c9:8b:3b:73:af:36:35:10:
69:73:73:bd:68:ea:b3:f6:b0:f0:d0:1d:94:a6:10:
15:57:67:37:47:cc:7a:38:19:91:4a:10:52:b0:9a:
d1:10:90:3d:38:72:c2:7d:88:76:a5:86:b9:69:07:
bd:b6:5f:81:01:80:75:93:68:3e:98:05:7a:1b:2e:
1d:fa:bc:64:3d:6b:42:b4:20:eb:7b:4f:bd:8b:b0:
5a:fd:4a:dc:bf:13:26:6b:c4:a4:2c:4e:ac:5a:1e:
52:a5:d4:56:79:91:12:15:e9:7b:3f:0c:77:48:33:
37:be:00:a6:64:7f:ae:fd:f3:43:ec:93:22:6a:4d:
b6:88:de:5a:21:82:1f:be:5b:8c:b4:f9:c5:b3:c6:
25:d9:6c:50:cd:0d:50:0d:92:26:43:05:87:f2:9f:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:19:B3:9B:98:91:26:8B:3E:38:F2:84:B2:56:27:20:17:B9:8B
X509v3 Authority Key Identifier:
keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137342e302f32342d3234203d3e2037353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.174.0/24
Signature Algorithm: sha256WithRSAEncryption
23:74:34:46:47:a8:53:4b:04:2d:f2:9e:18:1b:bc:a4:f0:42:
94:a4:00:3a:58:37:7c:9f:0c:4d:69:d2:ef:62:b1:d8:d0:94:
42:f0:c8:f7:f1:19:e8:bb:c7:dd:ed:48:20:29:2c:1f:91:e9:
c8:80:79:1a:2e:10:3f:4c:eb:24:e5:c0:10:4f:4a:ac:0d:19:
0d:f6:42:89:23:8d:92:f2:87:7a:48:65:08:ee:33:05:4e:83:
fb:d4:ea:06:74:d5:f7:3a:ac:b3:e3:85:b3:12:68:8e:a6:42:
09:a2:e3:6d:ae:26:4f:84:73:90:53:d2:5e:75:2e:b9:f4:8f:
29:53:06:7a:bd:ec:32:d8:88:60:52:59:69:b8:af:6e:40:2a:
14:82:3b:12:1f:4a:38:0f:2b:9d:f8:ab:07:b1:e7:2a:72:dd:
bc:4c:0e:cf:7c:99:30:20:15:53:08:4b:fe:28:e1:96:0f:37:
a3:eb:e5:da:98:12:66:4b:a2:d8:50:16:df:f3:2c:97:88:45:
a5:c5:3b:3d:4d:ce:53:7a:af:b7:ec:7f:b8:60:b2:ae:f3:1c:
23:98:80:73:39:4b:b3:a2:b4:77:bf:83:7f:b5:ff:84:db:a8:
7c:96:75:c8:b2:a1:6d:03:46:6b:a7:82:11:9a:05:39:10:cc:
c8:19:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org