Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa
File: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: 5UNWF+1ODydo2z2HrRcq8c40U3YnLInTjJ7JxPr4kOQ=
Subject key identifier: 68:E8:7A:A1:FE:86:E5:10:59:D3:9B:CB:2D:5E:4E:0C:40:FA:E3:BD
Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Certificate serial: 7C4BFABB98C77A0196DFAA18B8DD7CF5FE1214A4
Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa
Signing time: Wed 10 May 2023 08:00:01 +0000
ROA not before: Wed 10 May 2023 07:55:01 +0000
ROA not after: Wed 08 May 2024 08:00:01 +0000
asID: 55685
IP address blocks: 103.108.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4b:fa:bb:98:c7:7a:01:96:df:aa:18:b8:dd:7c:f5:fe:12:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Validity
Not Before: May 10 07:55:01 2023 GMT
Not After : May 8 08:00:01 2024 GMT
Subject: CN=68E87AA1FE86E51059D39BCB2D5E4E0C40FAE3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:61:5d:e5:16:2c:a3:4f:e0:dc:f9:e2:c1:
4a:c2:39:2c:84:b3:2b:dd:e0:70:53:9d:9d:d3:62:
6b:8a:20:c2:80:16:f9:67:f0:84:70:fe:2c:38:11:
4c:5c:57:05:c1:fe:2e:86:aa:32:55:1a:08:2c:2c:
0a:08:5b:42:1e:9f:d5:81:42:c2:0d:3e:0e:97:7c:
cc:48:e9:7b:8d:6f:68:2b:7c:a8:f4:95:64:eb:a0:
81:84:6a:40:3b:9e:89:60:c6:90:06:76:36:71:56:
74:0c:0a:ea:c2:bb:6a:92:f4:fe:5e:da:c8:47:0f:
a9:af:c3:55:81:66:28:5c:b1:99:ae:dd:15:10:d2:
e7:f3:f2:56:a0:32:6c:8a:db:fa:2a:71:10:7c:d0:
db:04:b2:07:fd:a6:74:4e:15:8b:7d:e0:81:fa:4d:
c7:5f:77:26:8f:8b:b7:6b:c9:44:58:0d:ac:76:de:
fa:7c:17:32:7e:58:85:8c:97:f6:ca:b0:86:a9:ed:
c7:84:89:dd:65:65:aa:15:b7:a5:fc:0e:43:98:f0:
80:d1:c6:ad:7c:f9:59:37:a5:88:00:5d:51:82:5f:
19:e3:f8:86:c3:9e:15:21:aa:93:7c:10:2f:68:5e:
54:db:f2:f8:cc:d1:5b:ee:35:75:d8:74:10:7c:6f:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:7A:A1:FE:86:E5:10:59:D3:9B:CB:2D:5E:4E:0C:40:FA:E3:BD
X509v3 Authority Key Identifier:
keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0d:ad:ec:b7:70:54:c1:00:8b:7f:71:9d:47:ce:40:49:3e:
6f:c2:b9:8a:44:c1:b1:33:65:4c:fd:12:51:97:44:de:95:bf:
42:e9:33:89:f5:d8:07:22:fa:29:d3:ac:56:c5:55:84:0d:02:
c2:9a:2a:fc:de:68:72:f2:20:fc:df:8d:69:af:07:11:53:75:
91:79:02:da:9f:3c:91:48:22:8b:05:2f:9d:7c:f5:a8:37:51:
6c:9f:2c:15:a2:00:43:a0:cc:10:54:45:3a:fa:16:b2:fb:a3:
d5:1a:44:f2:c0:68:e0:7d:58:00:57:2a:fd:68:a5:42:1a:1a:
23:3b:e1:06:5b:a3:56:e7:4f:27:d8:52:e5:8c:3a:ee:c1:99:
1f:b9:45:df:51:2f:59:c5:82:b8:f0:df:a5:11:eb:66:a7:8c:
35:59:bd:39:b8:52:ec:a8:f6:3f:4d:02:b6:d7:0b:53:34:94:
69:c1:e2:74:df:5a:ff:bd:22:37:a3:b1:fc:67:a2:d5:63:12:
94:d2:e2:6d:10:ae:18:4e:dd:dd:4e:e0:ef:07:28:62:f5:70:
7c:bb:c7:53:c2:f0:b2:f9:e1:e3:13:25:bf:b2:23:ca:4a:c4:
13:29:28:99:eb:0d:e8:03:fe:f9:b6:5f:ce:ba:1f:b5:19:bd:
a0:0d:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org