Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130362e302f32342d3234203d3e20313333383334.roa
File: 3130332e35382e3130362e302f32342d3234203d3e20313333383334.roa (raw, json)
Hash identifier: NYtM+rCGNgofffgrEIqgQH7h2tpm3XWnqbf4fk8+x/c=
Subject key identifier: CA:25:88:FA:39:3F:4F:A8:6D:21:1D:50:1B:56:E6:37:80:10:AF:CC
Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Certificate serial: 377FBC1F4AA0980D9173D63CE3807A7FB117AC4F
Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130362e302f32342d3234203d3e20313333383334.roa
Signing time: Mon 06 Nov 2023 06:24:16 +0000
ROA not before: Mon 06 Nov 2023 06:19:16 +0000
ROA not after: Mon 04 Nov 2024 06:24:16 +0000
asID: 133834
IP address blocks: 103.58.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7f:bc:1f:4a:a0:98:0d:91:73:d6:3c:e3:80:7a:7f:b1:17:ac:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Validity
Not Before: Nov 6 06:19:16 2023 GMT
Not After : Nov 4 06:24:16 2024 GMT
Subject: CN=CA2588FA393F4FA86D211D501B56E6378010AFCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:78:7a:e8:a2:61:4b:28:d6:c0:ab:64:21:
a5:2c:07:49:92:49:ea:1b:c5:fa:80:75:96:2e:4d:
66:1c:89:f2:41:a8:63:06:c4:9f:b0:1a:6b:4a:15:
d3:e9:20:aa:86:8e:e5:e0:9c:12:e5:41:95:28:28:
f7:a0:95:71:23:98:b3:e5:91:ea:a9:70:37:a0:a1:
d2:4f:0b:66:9c:a7:fa:da:4b:f2:83:ff:79:0f:a9:
6a:25:6a:11:1b:b4:7b:1c:80:33:14:82:87:e2:2e:
32:8c:26:e6:62:40:f3:01:dc:57:8b:81:19:79:85:
ff:22:fc:b5:75:06:3f:28:36:89:71:cb:57:0f:da:
5f:7d:1c:d0:cc:69:25:fd:7c:88:36:e3:7c:bc:f7:
13:ec:02:16:57:40:87:fc:e7:54:17:c0:73:1e:2d:
41:67:54:13:95:a0:7a:7f:43:26:97:d3:0d:6c:3e:
df:ef:61:e8:c3:eb:2f:38:f0:b8:c2:3e:27:83:df:
5e:2f:00:f3:2e:62:3e:bb:f1:a1:8c:c2:a0:a3:e2:
6f:a5:eb:49:b4:d9:b4:92:30:0b:8e:dc:72:5e:06:
4c:21:89:1a:c7:85:45:70:f4:a1:86:cf:72:88:65:
7f:33:f0:65:7a:cf:48:2b:a0:81:5d:d8:1f:54:27:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:88:FA:39:3F:4F:A8:6D:21:1D:50:1B:56:E6:37:80:10:AF:CC
X509v3 Authority Key Identifier:
keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130362e302f32342d3234203d3e20313333383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.106.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e5:4f:bf:25:06:d6:cf:9f:fc:0d:21:74:be:ef:17:e9:a8:
bb:0c:d0:35:bb:b0:32:c3:97:78:21:3a:2a:49:2a:b0:86:dc:
d7:58:93:38:d0:bb:ca:da:4b:97:c0:2d:62:9c:d5:c0:a2:69:
46:d4:4b:36:29:c6:9e:ee:69:a4:51:89:c6:32:d2:72:bf:c3:
0d:30:f9:33:c2:c4:b3:3c:30:6b:62:54:11:9d:dc:48:b1:03:
0e:3d:2c:7b:89:d8:c8:84:ac:20:8f:04:87:36:c4:36:9e:b4:
dd:72:b8:ac:d6:57:ea:f9:c8:71:70:e9:5e:1c:2c:7f:cd:8d:
b5:51:2e:5b:0f:2c:b2:ec:ba:95:3e:ee:58:3a:ba:6e:24:f4:
80:0b:6b:52:cb:14:12:fd:e6:57:83:2f:5d:73:dd:6b:fa:48:
21:1e:fa:0f:d0:89:f0:e9:6a:53:db:33:e6:61:54:a8:73:4f:
b4:e6:57:72:b3:0f:44:0c:70:71:03:74:5a:4e:5a:e9:1e:5b:
39:63:22:0c:d4:61:99:eb:2f:91:c2:f1:6c:94:25:1b:34:ad:
9d:ff:81:f0:19:fb:72:07:b1:12:78:09:14:64:00:98:fe:69:
ea:87:d2:87:4b:66:34:c4:a6:df:f0:35:ee:42:e0:a5:87:7a:
81:fa:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:37 2025 by rpki-client