Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa
File: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: /V0SXF60WM8OObdlUaJWGaVIHvKfw+p9glalpr3QqR4=
Subject key identifier: 56:61:0D:4A:E9:5A:AA:B0:A1:DD:A7:45:62:35:79:D6:80:DE:AE:00
Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Certificate serial: 4D6BD71750AFD972845FE95B555416EADE662ADB
Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa
Signing time: Fri 24 Feb 2023 06:40:00 +0000
ROA not before: Fri 24 Feb 2023 06:35:00 +0000
ROA not after: Fri 23 Feb 2024 06:40:00 +0000
asID: 55685
IP address blocks: 103.108.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6b:d7:17:50:af:d9:72:84:5f:e9:5b:55:54:16:ea:de:66:2a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Validity
Not Before: Feb 24 06:35:00 2023 GMT
Not After : Feb 23 06:40:00 2024 GMT
Subject: CN=56610D4AE95AAAB0A1DDA745623579D680DEAE00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:54:c4:f0:ed:54:51:79:c5:32:a0:01:ab:
a9:37:70:d2:c1:9a:91:73:5e:10:19:f4:19:ba:4e:
76:a9:4a:7f:47:9e:5e:97:66:9c:cc:88:26:ca:82:
a9:c9:e2:ef:2f:fd:d3:87:db:43:aa:0d:b9:f8:cb:
59:b5:ff:74:87:4c:77:77:c7:87:44:e1:1d:8d:21:
31:9a:6f:4e:a7:aa:b2:0e:35:a4:ea:6e:6c:09:4f:
df:40:e0:98:84:98:ef:7e:2d:a6:d0:f7:96:d9:e0:
b2:a3:01:c8:53:93:58:53:ea:a1:18:64:6b:59:9c:
5a:50:80:dd:d5:cc:87:01:1f:64:ed:04:cc:c4:8d:
73:a6:d9:6f:85:1a:31:f3:c1:21:b8:20:3e:36:c1:
4f:f7:9d:36:cb:3e:5a:69:80:51:a9:ec:75:0e:72:
dd:6c:63:c4:b1:f0:de:1e:cd:5f:79:5e:57:ff:24:
57:f0:be:38:64:b7:74:d6:37:fd:aa:0d:2b:fc:98:
c9:95:76:34:dd:53:fa:72:58:bf:b8:fd:2a:1d:ed:
6f:4f:13:47:4b:3f:26:75:7c:6d:49:8f:d8:45:4a:
ed:00:25:67:4b:57:f0:60:e9:24:c0:2c:8a:3b:00:
9f:c8:fe:6b:ce:5e:40:06:76:b7:0b:f7:46:6e:8b:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:0D:4A:E9:5A:AA:B0:A1:DD:A7:45:62:35:79:D6:80:DE:AE:00
X509v3 Authority Key Identifier:
keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c9:c4:c4:20:df:d4:67:6c:cd:00:c8:d8:ac:92:f0:09:e6:
05:29:03:60:70:32:4b:7f:e1:5b:82:7c:9f:da:66:28:d0:60:
94:57:ba:1f:7e:ec:07:29:99:60:a5:b8:2c:af:bf:10:a3:3b:
56:52:34:ba:63:74:62:c3:52:9f:fe:02:90:77:eb:84:94:20:
3e:a9:af:c0:6e:14:77:76:8c:51:d7:f5:95:ea:0a:ce:83:7b:
42:df:10:17:51:19:fd:f6:62:f1:af:df:f5:d7:d8:f3:a3:f8:
67:81:20:df:ed:5e:3d:b6:7c:d8:8d:2c:15:08:8e:d1:77:3b:
cd:ac:bd:d0:cf:8d:49:3b:eb:55:1f:58:ad:fc:a8:a7:fd:3e:
14:c2:a8:95:6c:4f:d9:ef:a7:5e:2a:c1:0f:aa:f8:07:9d:3b:
35:18:9e:33:9c:91:24:f1:0a:96:ae:e8:9e:86:26:9c:71:f9:
6b:ec:2d:2d:50:c9:d7:94:c5:f1:12:00:b0:e0:44:b3:87:e0:
dd:b0:72:84:e8:b7:88:58:af:60:db:b7:27:8d:e6:82:da:fc:
f0:c0:3c:8e:05:4e:65:58:74:21:c3:16:35:2b:4d:4a:fe:d9:
77:88:23:d7:01:b3:52:e7:d4:39:49:8d:ff:52:03:d8:7b:13:
38:20:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org