Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e2037353937.roa
File: 3130332e3135302e3137352e302f32342d3234203d3e2037353937.roa (raw, json)
Hash identifier: jgNn4hR6tMIz17uXapr3BOqX2XnZjl9M76NHZda39t4=
Subject key identifier: 7A:32:62:B4:0F:75:FE:81:1A:C0:AF:7A:26:83:20:6A:74:EF:77:C3
Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial: 08E2527F360F85F8485D8AA150A36A8774DF438F
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e2037353937.roa
Signing time: Wed 11 Jan 2023 15:25:08 +0000
ROA not before: Wed 11 Jan 2023 15:20:08 +0000
ROA not after: Wed 10 Jan 2024 15:25:08 +0000
asID: 7597
IP address blocks: 103.150.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e2:52:7f:36:0f:85:f8:48:5d:8a:a1:50:a3:6a:87:74:df:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Validity
Not Before: Jan 11 15:20:08 2023 GMT
Not After : Jan 10 15:25:08 2024 GMT
Subject: CN=7A3262B40F75FE811AC0AF7A2683206A74EF77C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:f5:ee:59:6b:46:3f:ea:a0:0a:34:93:03:
03:5d:4c:75:e1:5b:5d:19:44:f1:10:19:1e:99:1f:
44:b4:52:62:52:5a:29:34:b1:8d:52:17:2e:9e:5d:
94:73:e8:62:b5:fc:48:02:6a:bb:bd:b1:b5:16:6e:
29:e5:29:b6:2e:b7:3b:89:9a:ca:92:55:b1:15:7b:
c6:2a:a0:d1:dd:c4:32:1a:ea:f5:1b:84:69:19:70:
0a:97:01:2d:f6:7c:45:2a:02:b4:7c:2c:75:37:5a:
83:81:6a:d5:41:d6:40:91:2b:5e:94:6f:4e:ee:87:
ec:4f:89:45:38:59:17:8a:a0:d5:d3:4e:6b:d1:9a:
bf:09:e2:dd:fb:9b:4b:a6:01:59:3d:8d:95:ad:1d:
34:29:32:cb:4e:c4:0d:08:26:9e:bc:90:83:6d:16:
98:be:ff:85:1f:84:d7:10:f5:4c:c0:dc:eb:6a:78:
d7:71:ac:08:e0:f6:eb:9a:19:03:91:61:e5:fb:6e:
ee:d3:42:0d:4c:37:c3:92:42:93:84:d7:a1:da:f6:
6a:fd:cf:65:7d:e5:36:a1:69:e3:63:e7:06:62:57:
8b:c6:63:67:8a:43:b9:a6:32:cd:cb:ed:1e:20:92:
d4:7d:57:de:52:e7:15:af:ef:e1:ad:70:f3:6f:8b:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:62:B4:0F:75:FE:81:1A:C0:AF:7A:26:83:20:6A:74:EF:77:C3
X509v3 Authority Key Identifier:
keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e2037353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6a:a3:64:35:79:35:14:9f:ca:e5:69:17:c5:38:4e:f3:91:
4c:0a:c2:e1:bd:c2:4f:a3:4a:67:30:fb:3c:47:bd:c7:fb:74:
25:5a:ee:31:42:14:e3:36:a4:02:08:e9:e5:f4:00:f5:08:cb:
68:5d:bb:8f:ec:51:e3:88:1b:81:d4:b8:4a:14:8c:e5:55:05:
f9:86:bf:21:3c:fd:b5:09:5a:de:9b:2b:13:5c:fc:0f:94:c9:
0e:fe:ce:39:76:82:6d:7a:ad:bc:34:c0:51:e5:18:f7:cc:f6:
e0:e1:24:7c:a7:a7:85:82:73:fa:6f:23:73:35:bc:30:30:c6:
79:96:f6:a4:d2:2b:a9:e2:68:d8:ca:1b:6c:a3:70:ad:4d:44:
54:ba:89:13:45:1b:8e:94:d4:0d:b8:90:d8:48:29:0d:16:db:
26:4d:6d:b1:4b:22:51:43:89:08:a0:f8:50:40:2a:e5:f0:6b:
18:48:75:59:c5:ab:ca:35:e3:85:0d:8d:c7:fa:01:0c:b0:78:
1b:c9:93:a3:6e:52:9e:3b:79:03:24:81:a7:da:70:80:b2:fc:
9e:ae:bb:64:38:c6:c1:2e:31:a9:49:f8:11:17:50:68:0d:ad:
1e:8d:7a:b0:32:6b:1a:f0:93:c3:16:b3:57:00:86:4a:33:03:
3a:55:cb:da
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCOJSfzYPhfhIXYqhUKNqh3TfQ48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG
RDE3QzQ4NzAeFw0yMzAxMTExNTIwMDhaFw0yNDAxMTAxNTI1MDhaMDMxMTAvBgNV
BAMTKDdBMzI2MkI0MEY3NUZFODExQUMwQUY3QTI2ODMyMDZBNzRFRjc3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNfXuWWtGP+qgCjSTAwNdTHXh
W10ZRPEQGR6ZH0S0UmJSWik0sY1SFy6eXZRz6GK1/EgCaru9sbUWbinlKbYutzuJ
msqSVbEVe8YqoNHdxDIa6vUbhGkZcAqXAS32fEUqArR8LHU3WoOBatVB1kCRK16U
b07uh+xPiUU4WReKoNXTTmvRmr8J4t37m0umAVk9jZWtHTQpMstOxA0IJp68kINt
Fpi+/4UfhNcQ9UzA3OtqeNdxrAjg9uuaGQORYeX7bu7TQg1MN8OSQpOE16Ha9mr9
z2V95TahaeNj5wZiV4vGY2eKQ7mmMs3L7R4gktR9V95S5xWv7+GtcPNviz7pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUejJitA91/oEawK96JoMganTvd8MwHwYDVR0j
BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC
RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3
QzQ4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05
NmExLTdmZDc2MzAxMTk0NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNzM1MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeWrzANBgkqhkiG
9w0BAQsFAAOCAQEASGqjZDV5NRSfyuVpF8U4TvORTArC4b3CT6NKZzD7PEe9x/t0
JVruMUIU4zakAgjp5fQA9QjLaF27j+xR44gbgdS4ShSM5VUF+Ya/ITz9tQla3psr
E1z8D5TJDv7OOXaCbXqtvDTAUeUY98z24OEkfKenhYJz+m8jczW8MDDGeZb2pNIr
qeJo2MobbKNwrU1EVLqJE0UbjpTUDbiQ2EgpDRbbJk1tsUsiUUOJCKD4UEAq5fBr
GEh1WcWryjXjhQ2Nx/oBDLB4G8mTo25Snjt5AySBp9pwgLL8nq67ZDjGwS4xqUn4
ERdQaA2tHo16sDJrGvCTwxazVwCGSjMDOlXL2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org