Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa
File: 3130332e3132322e382e302f32332d3233203d3e20313530393635.roa (raw, json)
Hash identifier: 9/7X4KjmpSU6gFGPq1YWwRDp5XvTDG39XyefYFY1pL8=
Subject key identifier: B2:93:EA:C2:DA:AD:AD:45:BE:ED:A2:DD:96:A6:3A:B5:E2:C9:DF:B8
Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial: 45C3C068D51ED9F63F666F02E6405955C93FD862
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa
Signing time: Mon 17 Apr 2023 03:25:30 +0000
ROA not before: Mon 17 Apr 2023 03:20:30 +0000
ROA not after: Mon 15 Apr 2024 03:25:30 +0000
asID: 150965
IP address blocks: 103.122.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c3:c0:68:d5:1e:d9:f6:3f:66:6f:02:e6:40:59:55:c9:3f:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Validity
Not Before: Apr 17 03:20:30 2023 GMT
Not After : Apr 15 03:25:30 2024 GMT
Subject: CN=B293EAC2DAADAD45BEEDA2DD96A63AB5E2C9DFB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:6e:a1:10:13:64:10:5e:81:41:ac:60:3d:
34:86:d0:ce:8e:d5:08:6a:90:1e:7b:a9:53:7b:51:
33:d7:fc:cb:d1:73:84:bb:bf:bd:4a:0b:97:0e:3d:
e2:f3:f3:81:0a:58:8b:97:cc:97:c8:f1:90:af:b6:
81:81:c4:f0:55:3b:3b:4a:ec:fb:86:b3:04:0f:36:
4a:25:b8:17:2d:23:8a:5a:fd:fc:ed:f8:a4:13:db:
16:70:52:92:db:e8:74:92:0d:d4:0e:de:c4:af:cf:
3c:65:54:93:f5:a5:9f:27:ca:06:07:97:ef:43:f4:
14:75:aa:2a:98:5e:fe:e8:c7:0f:9d:4d:00:89:67:
90:78:58:a4:a1:ea:c5:5a:e1:2a:55:e1:29:8e:f7:
22:1e:ae:c1:c7:16:fd:46:e3:6a:ba:d6:53:8e:18:
fc:8e:64:c6:f8:fc:3b:06:25:b5:47:32:e9:b3:25:
76:7b:df:dd:76:76:8c:87:7b:b3:d7:b2:07:ac:1d:
27:36:76:ad:8a:ac:30:79:db:55:1c:b7:f6:bf:76:
bf:f0:05:73:b1:67:fc:35:ca:ce:4a:55:c8:cb:a3:
d0:b8:1f:d8:5e:0e:3c:00:e4:04:eb:b0:74:3e:f8:
50:54:ec:a6:c7:50:5c:8c:48:d1:95:07:54:d7:84:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:EA:C2:DA:AD:AD:45:BE:ED:A2:DD:96:A6:3A:B5:E2:C9:DF:B8
X509v3 Authority Key Identifier:
keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:4b:63:6d:87:fe:ea:79:cb:53:c5:3b:c1:12:19:95:d1:50:
ef:03:10:d1:72:77:82:12:0a:65:92:80:c5:1e:06:9d:69:51:
2c:7a:c5:9e:cd:69:0b:94:6b:0b:05:56:41:eb:bb:62:5e:a3:
1c:0f:aa:6a:f8:bc:ca:60:4c:9b:40:8a:9a:a4:06:ed:2c:95:
97:84:13:d8:2c:55:a2:03:3c:a3:e4:9f:ee:67:15:dc:cd:db:
50:fb:43:ad:e0:d6:2e:06:81:3a:ad:7c:8a:7f:af:83:a8:d5:
64:69:3e:8d:07:04:42:2b:b8:af:e2:af:69:17:aa:23:44:d1:
a8:36:d7:67:eb:e3:0f:1a:15:84:bf:c2:d2:28:c6:bb:d8:35:
0b:7e:48:77:3a:01:45:fd:2c:d2:ea:4b:f4:f5:e8:f2:3f:1f:
2d:ac:fc:8b:34:93:0e:fb:da:b6:b7:66:39:bf:ab:16:f0:ac:
93:64:ef:71:7c:24:3d:d7:53:b5:62:59:df:bc:6d:86:19:8f:
3e:13:60:1e:0a:3f:46:07:b9:e6:0c:f8:06:96:73:67:eb:08:
31:ab:f1:6d:58:62:da:ca:03:01:40:af:7d:b8:4f:f8:f0:b0:
ac:7c:6a:e5:0a:87:09:b0:2b:54:2c:e5:01:1a:20:31:ec:a1:
24:40:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org