Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313338383636.roa
File: 3130332e3135372e32352e302f32342d3234203d3e20313338383636.roa (raw, json)
Hash identifier: 8axXYCyODfP0u1D/MTRd6GFNsWGmR3Modsjy2Sp9Cv4=
Subject key identifier: 7B:84:3F:6E:C8:DF:CB:8A:E8:33:20:F6:80:BB:C0:46:5E:8A:BC:F7
Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial: 2CE5EBB05F57C8B759C6B2FC1CC9BC558A5A99A0
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313338383636.roa
Signing time: Mon 08 May 2023 17:54:30 +0000
ROA not before: Mon 08 May 2023 17:49:30 +0000
ROA not after: Mon 06 May 2024 17:54:30 +0000
asID: 138866
IP address blocks: 103.157.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e5:eb:b0:5f:57:c8:b7:59:c6:b2:fc:1c:c9:bc:55:8a:5a:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Validity
Not Before: May 8 17:49:30 2023 GMT
Not After : May 6 17:54:30 2024 GMT
Subject: CN=7B843F6EC8DFCB8AE83320F680BBC0465E8ABCF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:7a:7a:3c:fb:24:a1:29:04:7f:9a:75:8c:
d2:8d:53:04:81:62:4c:72:12:13:87:c5:15:f0:bc:
b6:1b:59:6e:25:dd:5b:2a:b6:30:a8:e5:75:da:3a:
3d:11:68:ca:14:49:94:91:e9:19:02:09:cb:50:0e:
15:e5:90:9b:5f:2f:1e:97:bc:a3:79:a7:3d:47:eb:
80:1a:88:06:f2:bc:84:46:00:4f:14:ab:ad:24:46:
65:c4:9e:1f:b7:a1:64:1a:08:08:4a:0c:16:df:f4:
af:aa:a7:1d:2f:72:a2:b9:0e:8d:78:bc:f0:c4:c2:
70:9a:7c:8d:bc:af:51:2d:24:5a:37:9b:0d:e3:8d:
ef:b3:a9:a4:5d:19:b5:09:f1:f1:6c:cc:5d:41:6a:
22:ba:ff:23:0a:d5:9e:55:a5:4f:c6:3e:68:ed:d7:
9a:bb:91:0e:fd:ae:e7:f7:3a:52:a7:2f:8f:6e:2a:
eb:83:65:f2:4f:f2:71:96:a0:52:13:ef:6a:22:91:
d8:1c:58:00:89:c1:fb:d9:d6:f1:81:e5:f7:cf:fa:
45:4c:0e:fd:a8:70:b6:72:32:1f:85:54:2f:27:d4:
10:e0:2f:80:cb:a8:98:96:32:79:74:f3:36:f0:5a:
03:dd:e0:6e:39:6f:c9:52:c6:21:45:b2:fa:13:f4:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:3F:6E:C8:DF:CB:8A:E8:33:20:F6:80:BB:C0:46:5E:8A:BC:F7
X509v3 Authority Key Identifier:
keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.25.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3d:7a:5d:11:43:78:f0:1c:3f:b0:3c:f4:f0:f8:15:1d:3b:
40:67:2d:cc:d2:0c:4f:ba:24:c4:cb:18:c5:69:97:9e:06:50:
cb:0e:2d:04:06:b7:14:42:3f:2a:49:3a:4b:62:72:25:7e:5b:
93:93:5f:eb:ea:ae:0e:c8:91:c3:db:db:68:dd:1d:87:9f:ea:
81:c7:c9:b4:07:e7:a2:ed:4a:a2:32:32:38:54:a6:7b:cc:7a:
81:e3:fc:be:3e:12:6a:53:68:f1:ff:0d:d1:e3:5a:25:65:0f:
d5:c6:99:46:f8:28:81:4e:98:1b:38:85:c6:e1:fa:ec:52:a2:
7f:1d:a5:3d:fa:9e:72:23:c2:ff:0d:c9:09:88:12:da:37:46:
ab:1f:28:70:0b:34:7e:55:11:8c:8c:13:11:1b:03:a5:9e:96:
6c:16:e9:7b:cd:45:a6:3e:6f:36:df:dc:d2:5d:19:4e:ac:99:
03:60:19:0a:de:67:bb:ff:84:3f:82:d6:09:2c:96:2a:14:b5:
02:bb:e4:57:0b:04:68:54:08:6e:a5:a4:83:1f:f0:38:d6:37:
a9:07:15:aa:c3:90:bf:08:e8:33:13:87:72:56:62:57:98:16:
9a:f1:00:9c:60:97:76:ea:f3:ff:89:3c:e2:db:09:33:20:a8:
23:56:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org