Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3233203d3e2037353937.roa
File: 3130332e3136322e3135322e302f32332d3233203d3e2037353937.roa (raw, json)
Hash identifier: WRZgleNBSTClisYAQ9HnQF06eqmGaoq9xcJ6FadiRxg=
Subject key identifier: 92:CB:A2:4E:38:D5:B7:FD:78:0E:53:30:92:D9:6B:DA:43:78:09:9F
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 3C658E1C568F2EF6D61168440B90AD0B05739C77
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3233203d3e2037353937.roa
Signing time: Sat 23 Jul 2022 17:15:00 +0000
ROA not before: Sat 23 Jul 2022 17:10:00 +0000
ROA not after: Sat 22 Jul 2023 17:15:00 +0000
asID: 7597
IP address blocks: 103.162.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:65:8e:1c:56:8f:2e:f6:d6:11:68:44:0b:90:ad:0b:05:73:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Jul 23 17:10:00 2022 GMT
Not After : Jul 22 17:15:00 2023 GMT
Subject: CN=92CBA24E38D5B7FD780E533092D96BDA4378099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:17:06:43:1b:f6:41:d4:ef:08:bc:ff:1b:
2f:6f:bc:17:27:87:d2:f5:2d:d3:bc:3c:ac:b0:9f:
72:84:bb:a2:63:bb:35:7b:a3:4b:c9:bb:ba:a6:f4:
8c:35:b3:14:00:ea:02:b4:3e:21:47:0d:76:c6:74:
47:9b:e3:f8:1e:24:1c:3a:cd:2a:74:9b:63:36:d3:
98:e6:39:73:29:e0:a0:64:ba:fc:24:6c:d1:02:7e:
5b:ef:cc:1c:c3:85:7e:e0:c7:e0:08:c5:cb:01:eb:
1b:80:ed:67:e2:8a:5a:61:fa:06:db:a7:fb:91:17:
da:63:6d:ad:0d:bd:60:86:c8:53:84:97:f7:ff:24:
7a:3e:5b:fa:61:9f:99:10:3b:cf:3b:db:99:0c:76:
23:2c:4b:04:d1:de:be:ad:e4:21:3b:b8:c7:43:74:
06:82:e5:55:21:7b:0b:8a:87:c8:f9:5d:57:23:e8:
a6:bd:e6:d8:41:cd:53:0e:94:60:af:7a:3a:f5:7d:
f8:46:13:64:a0:e2:6e:7e:7c:e5:4b:76:07:cb:2e:
62:b7:69:d1:b8:40:18:5e:a4:96:79:10:25:e4:12:
5b:8b:18:55:65:53:b8:53:fc:d4:53:4d:1e:dd:60:
4b:80:7a:28:8e:04:26:dc:fa:07:6f:0d:73:97:a1:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:A2:4E:38:D5:B7:FD:78:0E:53:30:92:D9:6B:DA:43:78:09:9F
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3233203d3e2037353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:f3:9b:ba:b0:5e:52:0c:0e:c7:ba:da:db:99:1d:8b:df:ea:
33:44:de:91:c3:b2:d6:bc:71:84:ba:a0:3b:79:1b:1f:f1:80:
a0:1f:34:0b:99:4a:fe:ad:80:e8:bd:fa:a3:b9:e5:d8:3f:0e:
a3:8e:4a:e9:9c:4e:00:02:2c:04:8a:35:fb:19:01:fd:28:07:
1a:13:b1:de:7f:4e:97:61:0b:b6:b4:ce:ce:58:77:48:fa:ce:
71:b8:ea:15:50:3d:f9:53:43:e4:ca:90:95:96:45:44:cb:ea:
15:44:70:2e:7e:ee:64:5b:75:07:8c:5e:16:2f:e5:e1:a6:ca:
e8:1c:2c:69:e8:b6:72:de:79:59:4a:e3:87:43:1b:f7:2b:f3:
94:01:95:5d:8a:b8:75:a5:01:41:7c:d6:0c:02:96:66:27:ac:
85:5b:9c:ab:c2:60:dd:54:fa:b0:85:e4:3f:d0:34:51:a0:0e:
d2:86:67:c1:57:79:7a:c7:1f:eb:9c:b9:ff:2c:7a:e8:65:43:
64:27:17:2c:55:97:47:91:50:a9:40:14:f1:04:97:ac:19:10:
c1:4b:f2:ef:84:bf:30:e0:28:ac:77:24:72:88:d6:7a:e9:7a:
ee:b1:ab:c6:54:6a:27:2c:28:ab:ef:2a:ff:c5:b9:eb:36:21:
08:4f:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org