Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa
File: 3130332e35352e3235342e302f32342d3234203d3e203436303334.roa (raw, json)
Hash identifier: b/pPNXUVTdgb9N974730YeNWhtOqAq1g83B1L1G7PnI=
Subject key identifier: AE:A3:8C:BA:44:C4:65:34:77:5C:20:52:47:FF:8C:7F:05:B7:47:46
Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial: 5B5DA4ADD7D19A3509DE8B23F3DDBCF6A29E4CD9
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa
Signing time: Wed 10 Jan 2024 07:50:54 +0000
ROA not before: Wed 10 Jan 2024 07:45:54 +0000
ROA not after: Wed 08 Jan 2025 07:50:54 +0000
asID: 46034
IP address blocks: 103.55.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5d:a4:ad:d7:d1:9a:35:09:de:8b:23:f3:dd:bc:f6:a2:9e:4c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Validity
Not Before: Jan 10 07:45:54 2024 GMT
Not After : Jan 8 07:50:54 2025 GMT
Subject: CN=AEA38CBA44C46534775C205247FF8C7F05B74746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:7d:37:11:8b:88:1a:2c:f1:ae:7b:5e:1c:
8e:15:71:27:d8:ef:9d:11:1e:96:0b:64:56:bd:ad:
b1:32:c2:6d:cc:7b:73:ae:4b:1a:48:02:20:7d:32:
d2:c8:a7:7f:56:f6:04:cc:de:db:de:5d:76:46:a0:
23:4b:0b:53:27:9b:69:70:e1:d6:f3:b7:b2:59:dd:
79:db:03:ce:2f:d3:36:b3:3e:47:88:3a:d1:88:1c:
c3:03:95:b5:52:c4:76:62:d9:82:88:5d:d4:72:30:
26:be:4f:4c:1b:e1:00:c8:1e:96:23:99:41:ef:32:
53:94:8c:85:2d:9d:7e:87:68:34:fd:ac:e4:6e:98:
c1:3d:cf:69:a5:51:e4:45:bb:69:7d:b1:4b:b4:d9:
57:e0:ae:10:46:bc:53:16:e1:16:5b:1f:52:a9:b6:
0a:d7:67:cf:9a:6f:56:78:c0:ce:a5:a0:43:9a:a8:
d3:fc:1f:70:a0:11:8d:89:04:8e:50:54:db:ae:ae:
ee:a2:82:3e:a8:00:23:37:4b:e4:3e:38:f0:ae:ce:
51:62:c2:55:67:85:c9:17:97:84:e3:30:a0:f4:5b:
d2:82:ff:a1:71:5a:5c:2c:a1:2b:9f:e0:0e:37:8b:
37:83:45:0a:fe:ef:7e:ea:6b:bc:13:8f:07:b7:48:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:8C:BA:44:C4:65:34:77:5C:20:52:47:FF:8C:7F:05:B7:47:46
X509v3 Authority Key Identifier:
keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e203436303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.254.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cf:2e:37:3b:3d:d5:41:ff:1e:d4:d5:df:3b:ec:c0:3f:00:
b3:9e:13:c2:6f:5d:74:89:30:70:78:d9:e0:70:c6:5c:42:58:
d5:fc:61:64:17:02:4e:8c:ae:c1:bd:c6:15:37:5f:1d:fc:23:
88:aa:f3:9a:9e:12:86:95:45:6d:23:71:b1:61:08:20:79:e3:
6d:0f:c5:14:fa:34:d8:49:9c:00:19:94:21:53:25:31:43:5b:
ca:d1:bf:3b:07:42:78:b2:05:a8:2f:26:b8:87:e9:3e:b3:25:
14:e8:04:53:1e:51:c0:b1:53:65:9e:f9:eb:3c:d5:11:50:33:
70:c3:d8:5b:52:41:a9:ab:e5:0a:59:be:5b:c2:a4:55:d6:64:
49:58:77:90:e3:30:8d:89:38:55:15:2d:2e:b3:86:8d:3a:e7:
76:90:26:70:de:97:2e:9f:dd:77:68:42:82:9d:22:c5:10:c8:
f0:20:c1:19:26:e1:4b:6f:ef:fc:4d:5a:78:6c:4f:54:25:2c:
d6:09:22:16:36:54:30:d8:2a:0e:41:a7:3b:fc:27:3e:96:a9:
bf:fe:7b:d0:2e:c7:17:cb:e5:93:88:aa:c1:9c:9d:ea:4f:30:
11:cb:aa:d7:1b:f7:8e:bd:f4:0e:10:ed:24:f8:13:24:70:09:
4a:af:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:44 2025 by rpki-client