Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32322d3234203d3e20313439373130.roa
File: 3130332e3132312e3139362e302f32322d3234203d3e20313439373130.roa (raw, json)
Hash identifier: P+INMdLXXWBDk6pIuN+/HTJIBound2mth8XKwNS4h+8=
Subject key identifier: 9F:61:21:A8:19:84:11:50:FD:60:77:95:BB:04:31:6E:D4:40:FD:76
Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7
Certificate serial: 01F48BB95F44E21B9E3D6FAEA9566B48E2745D2B
Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32322d3234203d3e20313439373130.roa
Signing time: Mon 22 Aug 2022 08:28:22 +0000
ROA not before: Mon 22 Aug 2022 08:23:22 +0000
ROA not after: Mon 21 Aug 2023 08:28:22 +0000
asID: 149710
IP address blocks: 103.121.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f4:8b:b9:5f:44:e2:1b:9e:3d:6f:ae:a9:56:6b:48:e2:74:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7
Validity
Not Before: Aug 22 08:23:22 2022 GMT
Not After : Aug 21 08:28:22 2023 GMT
Subject: CN=9F6121A819841150FD607795BB04316ED440FD76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:14:97:a1:7e:5c:35:08:34:46:e2:0c:b6:
b3:74:77:2c:24:47:a5:52:5e:4a:44:a5:fd:41:01:
73:8c:f9:31:27:96:bd:a1:52:3d:00:24:b9:47:ae:
df:08:91:12:7c:18:c3:63:6c:12:90:30:c0:bb:a5:
ee:c5:6b:9e:da:27:4e:55:0d:b1:09:71:d0:bc:2d:
d0:db:06:fb:b9:a7:e1:df:bf:f2:aa:cb:53:52:6a:
c4:e0:c0:db:4d:ef:e3:4d:df:ef:95:3d:82:3c:14:
d1:9b:5f:74:e2:91:97:dd:ac:21:85:a6:2f:a1:f1:
a1:42:90:89:1b:5b:f9:e4:2f:8f:76:05:3c:b6:7e:
3a:10:2a:50:3a:29:34:7c:4c:d3:de:7a:2c:e3:48:
43:96:95:8a:16:7f:c5:6d:05:29:00:92:5f:db:99:
d3:91:a0:4f:19:86:74:cf:5e:f3:3a:3f:63:80:bd:
3e:72:88:7d:08:b0:c9:3d:bd:5b:45:22:a6:4b:90:
1f:1b:4e:9d:08:b0:6b:5c:26:3d:50:13:6e:7b:f0:
22:58:88:d6:c7:7f:9b:97:67:5f:39:b9:14:88:ff:
95:f1:f9:cb:5a:d3:25:97:5b:6f:11:07:64:a0:ae:
ce:4e:f9:b2:a2:37:13:a8:6e:03:4c:ca:63:3a:08:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:61:21:A8:19:84:11:50:FD:60:77:95:BB:04:31:6E:D4:40:FD:76
X509v3 Authority Key Identifier:
keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32322d3234203d3e20313439373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.196.0/22
Signature Algorithm: sha256WithRSAEncryption
01:71:5b:42:71:84:bd:01:65:ad:5e:78:cd:00:71:98:76:3b:
7e:fd:a8:98:fa:f3:1b:6d:dc:59:5a:ed:22:75:81:66:55:e4:
3a:8d:33:56:25:49:2b:4b:04:b0:dd:f7:1a:cd:a5:c0:ec:03:
45:3b:e9:a8:dd:7a:8c:0e:0b:c6:61:48:b5:ab:6e:77:12:e4:
cc:a5:4e:65:b5:35:7d:7e:68:42:e9:18:ef:cc:d4:39:5b:98:
53:de:22:da:33:b6:7b:d8:6e:13:77:b2:c4:95:06:28:2e:5e:
03:ac:bd:89:95:e1:fd:8d:9a:4a:1c:94:56:b0:37:4e:73:60:
c7:13:9c:8e:15:66:31:42:a0:ed:6b:8a:78:e2:a4:c5:a8:7a:
57:60:59:62:37:06:f4:55:af:85:a6:91:36:d5:27:77:4d:60:
c8:28:11:48:f3:4f:30:ae:89:e1:98:09:e2:d4:56:20:7b:5a:
e0:07:c5:3f:e0:b6:85:ab:65:b9:c8:c6:04:f7:80:e7:d5:e5:
66:2f:91:5f:af:9d:36:b5:b2:4d:7f:96:17:84:68:f7:1a:5d:
1e:f0:67:be:c8:b5:4b:a7:50:dc:b5:93:43:e1:d4:35:f7:6f:
90:45:6c:4c:a4:d7:6b:d2:fe:4f:a1:97:90:4f:93:9f:ff:56:
f1:1c:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:06 2025 by rpki-client