Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235352e302f32342d3234203d3e203436303334.roa
File: 3130332e35352e3235352e302f32342d3234203d3e203436303334.roa (raw, json)
Hash identifier: Wc2W4bqMGv+X5aCzvFQo6rlN77Z1oDmAlOwXVClMNk0=
Subject key identifier: CF:D7:8B:D2:1A:FC:09:58:FD:DA:96:85:BA:56:29:E3:FA:0C:1C:4C
Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial: 0BCFA46E4B95854387581E696BD0B820D5153AC1
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235352e302f32342d3234203d3e203436303334.roa
Signing time: Wed 10 Jan 2024 07:51:40 +0000
ROA not before: Wed 10 Jan 2024 07:46:40 +0000
ROA not after: Wed 08 Jan 2025 07:51:40 +0000
asID: 46034
IP address blocks: 103.55.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cf:a4:6e:4b:95:85:43:87:58:1e:69:6b:d0:b8:20:d5:15:3a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Validity
Not Before: Jan 10 07:46:40 2024 GMT
Not After : Jan 8 07:51:40 2025 GMT
Subject: CN=CFD78BD21AFC0958FDDA9685BA5629E3FA0C1C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:c7:a8:e4:e9:cd:3b:0a:65:bc:69:e4:51:
4e:a3:11:4a:f8:d1:e2:51:20:ca:da:d2:a3:51:8d:
50:e5:5f:f0:90:bf:ac:27:7a:09:03:c9:de:88:23:
cd:ed:09:cb:c9:22:98:c4:0b:ae:79:25:e3:49:a9:
60:22:1e:08:81:15:7d:76:87:37:6a:d3:7d:d7:32:
55:f3:7b:15:83:3b:40:5b:c1:93:f0:66:33:ef:c1:
a8:70:14:04:57:2b:bc:bb:d6:76:4a:60:eb:b9:15:
63:1c:76:ef:ce:50:eb:5e:fc:ad:df:d9:72:a2:b0:
05:8c:b3:11:7d:f7:9a:20:9e:08:e8:33:a1:9a:12:
c7:09:6c:0a:ef:27:bb:cf:99:60:6a:32:10:46:ce:
dd:9f:8b:39:5a:ca:42:18:02:db:60:0d:3f:84:9c:
2a:78:b4:cc:c3:93:73:7a:3e:f2:1d:8f:a5:41:e6:
46:f0:14:2f:b0:ed:eb:0d:0d:1a:2a:9f:36:ff:91:
07:07:a8:64:fc:15:67:d2:97:b4:c3:f7:cc:74:e0:
4f:c7:03:ce:01:af:06:57:49:f5:81:12:61:e6:ce:
56:d2:d4:61:4e:e2:e6:25:26:5c:5d:f7:b2:46:f9:
fe:4b:a3:04:52:16:fa:8f:d0:bd:2c:ec:c5:fe:aa:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:8B:D2:1A:FC:09:58:FD:DA:96:85:BA:56:29:E3:FA:0C:1C:4C
X509v3 Authority Key Identifier:
keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235352e302f32342d3234203d3e203436303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:00:cf:8d:c1:1f:2f:1d:d7:60:32:73:e1:5c:93:76:04:b2:
22:29:36:45:a1:45:62:b6:aa:d8:1c:01:90:92:7b:1c:c6:14:
7d:26:b6:67:fd:f0:33:5b:5b:28:0a:5b:b4:c0:f9:14:9b:fa:
e9:33:d7:ec:18:e6:ac:ba:54:31:3f:ae:e0:a0:40:21:bf:80:
e4:3a:b6:f6:3c:b1:54:4d:fb:6d:7f:4a:32:18:c6:c7:0e:7a:
4d:88:10:70:df:27:2a:44:78:b1:47:f0:6c:8b:5a:60:14:00:
1d:8d:9f:ba:9e:cc:a4:8c:04:63:fc:60:68:b5:3f:4b:7d:0d:
ca:d9:7e:27:19:44:d9:20:63:83:db:a9:15:26:b9:c8:5a:10:
fa:b1:ad:ff:ba:ae:7f:cb:7c:1b:9b:5e:8c:77:18:e1:70:54:
7f:8f:0a:02:60:60:8c:7d:cd:5b:e5:ff:c5:53:76:81:42:57:
d1:54:b4:f9:b6:8b:66:9b:38:9a:e5:18:1d:d2:4a:15:27:25:
ec:20:08:bd:ec:87:56:22:85:bc:74:de:32:6e:3b:d7:a2:c5:
ba:99:80:6b:f0:87:3e:14:ce:30:31:22:b6:94:88:c2:3e:1c:
17:e0:3e:ba:a3:f1:b4:fa:dc:23:22:90:99:a0:fe:c2:68:e3:
13:d0:d3:df
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUC8+kbkuVhUOHWB5pa9C4INUVOsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1
NUY0RjBBOTAeFw0yNDAxMTAwNzQ2NDBaFw0yNTAxMDgwNzUxNDBaMDMxMTAvBgNV
BAMTKENGRDc4QkQyMUFGQzA5NThGRERBOTY4NUJBNTYyOUUzRkEwQzFDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjMeo5OnNOwplvGnkUU6jEUr4
0eJRIMra0qNRjVDlX/CQv6wnegkDyd6II83tCcvJIpjEC655JeNJqWAiHgiBFX12
hzdq033XMlXzexWDO0BbwZPwZjPvwahwFARXK7y71nZKYOu5FWMcdu/OUOte/K3f
2XKisAWMsxF995ogngjoM6GaEscJbArvJ7vPmWBqMhBGzt2fizlaykIYAttgDT+E
nCp4tMzDk3N6PvIdj6VB5kbwFC+w7esNDRoqnzb/kQcHqGT8FWfSl7TD98x04E/H
A84BrwZXSfWBEmHmzlbS1GFO4uYlJlxd97JG+f5LowRSFvqP0L0s7MX+qrEjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUz9eL0hr8CVj92paFulYp4/oMHEwwHwYDVR0j
BBgwFoAUcyedrbTrmzG4jMq19oPdoFX08KkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMC83MzI3OURBREI0
RUI5QjMxQjg4Q0NBQjVGNjgzRERBMDU1RjRGMEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzMyNzlEQURCNEVCOUIzMUI4OENDQUI1RjY4M0REQTA1NUY0
RjBBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjNjM2YTQ2LTM4ZmYtNDQ5Ni05
NzIxLThjMDNjZjA0NjM0NS8wLzMxMzAzMzJlMzUzNTJlMzIzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc3/zANBgkqhkiG
9w0BAQsFAAOCAQEABwDPjcEfLx3XYDJz4VyTdgSyIik2RaFFYraq2BwBkJJ7HMYU
fSa2Z/3wM1tbKApbtMD5FJv66TPX7BjmrLpUMT+u4KBAIb+A5Dq29jyxVE37bX9K
MhjGxw56TYgQcN8nKkR4sUfwbItaYBQAHY2fup7MpIwEY/xgaLU/S30Nytl+JxlE
2SBjg9upFSa5yFoQ+rGt/7quf8t8G5tejHcY4XBUf48KAmBgjH3NW+X/xVN2gUJX
0VS0+baLZps4muUYHdJKFScl7CAIveyHViKFvHTeMm4716LFupmAa/CHPhTOMDEi
tpSIwj4cF+A+uqPxtPrcIyKQmaD+wmjjE9DT3w==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:17 2025 by rpki-client