Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa
File: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: I5YTqt2IFWJcRDvF/XKaZACj/xYOJkcMFg435XQEmEY=
Subject key identifier: 07:80:22:69:D1:89:83:78:F3:11:70:E9:2D:05:EF:EA:72:6F:3A:40
Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Certificate serial: 38BFCA336735F1B5F2F47941A083F85734883876
Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa
Signing time: Wed 10 May 2023 08:00:00 +0000
ROA not before: Wed 10 May 2023 07:55:00 +0000
ROA not after: Wed 08 May 2024 08:00:00 +0000
asID: 55685
IP address blocks: 103.108.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bf:ca:33:67:35:f1:b5:f2:f4:79:41:a0:83:f8:57:34:88:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Validity
Not Before: May 10 07:55:00 2023 GMT
Not After : May 8 08:00:00 2024 GMT
Subject: CN=07802269D1898378F31170E92D05EFEA726F3A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:62:c8:12:03:1d:9b:31:0e:be:d9:88:62:
f6:e0:f4:37:d4:ae:96:90:4f:eb:a5:89:1f:45:be:
d7:b8:3c:60:19:a0:21:2c:2b:f2:f9:50:d9:be:df:
ca:6d:07:03:9d:f8:95:bc:00:d4:a5:5c:0c:57:4f:
0e:d0:83:5a:fb:1b:9a:be:86:64:1e:b7:99:94:64:
ae:55:38:e5:a3:eb:7f:73:09:f1:c7:c2:88:e6:c8:
7f:7c:2b:0f:a8:51:1a:7e:fc:7e:27:0d:33:20:4d:
6c:b4:79:67:ce:fe:5e:f5:02:84:ca:69:a9:0b:b1:
52:d3:92:bf:60:f0:58:ae:a3:0f:50:a6:9b:d3:fb:
17:76:ae:fc:76:9e:df:f0:4d:68:3c:e4:59:f6:c0:
87:4c:f0:94:2d:bc:7b:cf:18:c4:ba:f4:b2:a1:d7:
a6:08:9e:56:8c:54:61:5d:72:93:f0:57:0a:04:06:
bf:34:cc:22:db:4d:75:49:01:5e:3f:11:8f:82:72:
24:64:32:e9:f2:72:a8:dc:43:43:57:f8:a1:e1:10:
80:55:7d:5f:df:06:ab:dd:69:c4:fe:2a:69:ae:ad:
b2:23:6d:23:30:71:5a:20:eb:b4:c5:d3:e5:2e:65:
85:ed:01:bf:41:87:6c:3f:a9:4d:af:16:3e:ea:1b:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:22:69:D1:89:83:78:F3:11:70:E9:2D:05:EF:EA:72:6F:3A:40
X509v3 Authority Key Identifier:
keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.129.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fd:2b:74:a4:fa:c4:cc:02:f0:aa:bb:fc:bd:78:7e:eb:ef:
13:13:ac:f3:63:fc:57:be:18:bd:ff:2b:5a:0f:9e:53:ed:9c:
23:f2:79:a1:0b:d1:1e:4a:f6:32:6a:0c:a1:83:54:b0:06:5e:
ec:9e:53:fd:6b:0b:8b:28:ae:f9:0d:37:47:a3:b7:04:0b:f9:
90:48:1d:1d:93:af:c6:c9:c1:55:5d:67:8b:d8:eb:f3:f1:ba:
f9:a8:76:48:e7:79:1e:87:ae:69:9e:d7:1c:16:cc:15:a2:b6:
63:f6:b0:b5:46:9e:87:89:4e:08:8a:7e:4f:4d:c4:6d:75:5a:
e8:24:6f:12:b2:e5:39:42:76:66:1f:82:2e:8e:4a:dc:cd:5d:
60:3c:ee:6f:cf:4d:2f:09:68:8a:6f:2d:c3:0e:8f:98:b1:23:
e3:49:98:6d:8c:79:f3:8c:ed:2d:0b:0a:18:b0:c8:d6:c4:8d:
c1:fb:52:c0:e4:71:30:bd:c1:1b:a4:04:52:88:7b:fd:b8:53:
92:10:87:70:21:d5:56:fc:b9:93:6a:c1:b0:f4:d8:33:38:89:
bd:f4:21:48:e5:2b:89:ff:51:15:27:53:38:08:59:e1:de:3e:
6f:b7:39:f0:4d:1d:98:18:f0:72:6a:e8:47:f8:c7:6b:d6:63:
33:7f:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org