Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa
File: 3130332e35352e3235342e302f32332d3233203d3e203436303334.roa (raw, json)
Hash identifier: dSrHgdSWpHkHaZbm5+lb3FsnvvwestmzotEsUBvPxcU=
Subject key identifier: 64:03:4C:61:E9:9A:AA:E9:C6:F5:6C:D4:60:3F:7B:A4:64:7A:53:2A
Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial: 2D5DA39C613C3F0E63F09B273FFFDC183AA62C24
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa
Signing time: Wed 10 Jan 2024 07:50:02 +0000
ROA not before: Wed 10 Jan 2024 07:45:02 +0000
ROA not after: Wed 08 Jan 2025 07:50:02 +0000
asID: 46034
IP address blocks: 103.55.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5d:a3:9c:61:3c:3f:0e:63:f0:9b:27:3f:ff:dc:18:3a:a6:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Validity
Not Before: Jan 10 07:45:02 2024 GMT
Not After : Jan 8 07:50:02 2025 GMT
Subject: CN=64034C61E99AAAE9C6F56CD4603F7BA4647A532A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:70:70:ee:39:a2:d4:d8:64:f5:14:d1:98:
94:b1:ec:1e:a0:da:34:0e:e1:94:62:ae:76:e0:b0:
45:06:c4:ae:75:8d:47:51:c6:91:78:e0:67:4f:67:
bf:67:b7:03:eb:94:50:db:2c:96:a9:db:d9:ad:22:
00:ac:9f:91:4f:2d:5d:3e:28:7a:dd:ef:99:29:1f:
28:f7:db:6d:37:f2:d8:45:62:b3:3b:01:0e:5b:0c:
92:38:8c:56:5a:0b:db:03:71:21:ee:11:8c:d3:04:
13:fc:2d:d3:fe:4c:58:5d:fb:ff:a8:29:fa:b4:5e:
b0:83:59:96:37:da:e7:e1:f0:9d:c6:0e:15:dc:29:
6b:04:c6:12:ac:1f:f2:93:1c:88:7e:89:d4:ee:0d:
20:75:9e:d5:20:9f:02:26:0a:25:a1:ec:5f:3f:3c:
73:ed:cb:34:80:ea:39:5a:62:01:3e:9c:0d:51:8f:
a1:55:04:6c:52:43:60:ff:b7:c6:69:9e:ef:a8:3f:
88:76:4b:e6:28:d8:0d:c8:b4:9b:a3:c3:5b:99:96:
ff:5f:34:28:30:15:5f:52:c7:6a:fb:51:02:30:86:
02:83:3c:f8:db:19:ec:2e:a6:67:66:c1:61:bd:c5:
ed:cd:3b:0c:92:3f:59:19:25:da:0e:95:a7:fc:12:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:4C:61:E9:9A:AA:E9:C6:F5:6C:D4:60:3F:7B:A4:64:7A:53:2A
X509v3 Authority Key Identifier:
keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3233203d3e203436303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.254.0/23
Signature Algorithm: sha256WithRSAEncryption
39:c4:ce:be:0c:29:3f:1f:34:5b:30:c1:7c:1d:38:2c:21:4a:
a7:c5:eb:e7:61:2b:bd:f6:49:75:bd:96:d8:fa:49:f1:8c:ef:
b9:92:1b:13:82:82:68:62:10:d7:0e:09:7f:48:df:a7:2d:80:
47:91:ea:90:83:c7:da:81:06:a1:f3:ee:50:ac:91:ad:de:3c:
55:74:c4:a1:91:5b:40:8b:10:8e:dc:32:21:23:b7:7b:9e:10:
cc:f0:00:f2:da:cd:51:6f:91:d9:ca:78:80:89:6c:42:4c:4b:
5a:08:97:73:5b:18:c0:17:a7:2a:02:33:c8:f2:15:cf:17:08:
3e:51:94:cf:4c:5b:5e:c6:0a:13:a9:9d:a2:f0:f0:79:eb:6b:
b6:b7:a1:89:89:84:ba:ba:3e:ec:9c:79:4a:a6:ac:f5:50:61:
9f:20:64:78:96:0c:7d:15:12:af:4f:3b:da:28:7a:1b:6b:f3:
49:f3:bd:eb:7c:a2:3a:f2:0f:c2:ff:c7:1e:55:77:62:67:1a:
7e:42:b9:d8:4a:91:92:b9:4b:95:69:3e:0e:aa:36:02:b3:f5:
b9:89:12:ce:9b:11:20:7b:88:5c:45:a5:b8:c3:33:c9:74:74:
8b:c5:c9:a3:44:84:fe:ec:ae:e2:b8:57:42:9a:dc:dc:11:bd:
77:e9:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:39 2025 by rpki-client