Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e203338373532.roa
File: 3130332e3136322e3135322e302f32342d3234203d3e203338373532.roa (raw, json)
Hash identifier: OIQXtELgUpXObIwxIbTefRds20d8HVkDJ7DFZkTPZqk=
Subject key identifier: F8:A1:EB:53:77:2C:AD:53:DA:F6:19:44:93:4A:04:30:89:DE:19:FA
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 6B35F218B42B91BFC7C30887606219887976E6C9
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e203338373532.roa
Signing time: Mon 25 Jul 2022 15:04:11 +0000
ROA not before: Mon 25 Jul 2022 14:59:11 +0000
ROA not after: Mon 24 Jul 2023 15:04:11 +0000
asID: 38752
IP address blocks: 103.162.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:35:f2:18:b4:2b:91:bf:c7:c3:08:87:60:62:19:88:79:76:e6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Jul 25 14:59:11 2022 GMT
Not After : Jul 24 15:04:11 2023 GMT
Subject: CN=F8A1EB53772CAD53DAF61944934A043089DE19FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:a1:47:03:60:30:26:34:1a:ca:82:ad:7a:
5d:22:1a:ac:d8:d4:c2:bb:05:c9:13:4e:fb:5b:a3:
99:5c:03:cb:21:1f:5c:9d:26:19:8a:82:9a:5c:06:
2b:26:56:d0:5c:17:fd:0b:49:4f:87:8a:2c:b8:68:
09:18:4c:e2:db:a2:86:15:49:af:e0:80:46:60:cd:
1a:0c:04:e6:8e:95:84:74:2a:c7:fa:29:b9:ce:f1:
43:ee:31:62:58:a0:bf:84:e9:82:f9:73:b0:4f:67:
79:11:16:c3:90:fb:24:36:ec:4a:55:8a:c7:34:c6:
32:30:07:ad:8a:ce:37:2b:b3:68:f0:4c:8d:bf:c0:
e3:ef:4f:72:24:e5:0a:ff:77:3c:3f:82:04:0a:db:
73:72:07:5e:e1:a1:37:c0:4b:e9:7d:9f:2a:6d:ef:
b6:3e:19:e3:dd:2d:df:05:8e:bb:9d:b1:91:86:2b:
7d:f3:ac:1e:fa:d5:d9:1d:8a:c9:da:89:51:02:b5:
8a:f5:ff:0b:7a:cf:97:86:14:00:d8:e7:86:be:95:
10:86:7b:ab:ff:08:43:17:fc:b6:98:fb:72:8a:57:
de:87:63:97:fe:de:13:bd:4a:25:62:b5:4c:92:44:
07:97:98:49:be:68:36:11:cc:ab:1c:0a:b2:c4:94:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:EB:53:77:2C:AD:53:DA:F6:19:44:93:4A:04:30:89:DE:19:FA
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e203338373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.152.0/24
Signature Algorithm: sha256WithRSAEncryption
74:dd:18:a7:9b:ba:24:69:3a:e2:53:9f:06:f4:41:4e:56:37:
c0:a5:40:51:35:e0:06:22:7c:8b:69:44:b4:81:d6:52:d8:8f:
10:a0:57:4b:44:82:62:bd:49:99:0c:7f:34:5b:32:8c:b6:9d:
89:88:47:e7:2e:76:2a:91:6d:c9:85:e4:66:38:34:56:0e:60:
51:30:29:5c:04:30:84:df:78:96:fe:66:a7:08:a8:20:a2:e4:
58:0d:c0:09:b9:60:5c:2c:5a:b6:63:74:21:b0:6a:d4:29:1f:
d8:23:b1:b6:4e:22:9f:11:c5:c0:44:86:e0:b2:58:4e:fd:f4:
aa:1f:4e:41:58:c5:03:9f:17:5b:0b:a6:58:b3:8c:d8:4b:1b:
55:e1:ca:98:c6:b3:7f:2b:47:ca:c4:62:42:cd:ae:e8:ef:c0:
f9:05:c3:3a:ba:b4:27:00:d5:fa:6a:c8:2b:b8:7f:c9:f9:5b:
8e:07:91:55:52:70:6e:50:a8:26:56:76:9a:12:c4:5a:5c:7e:
ea:72:b0:7a:46:09:91:c3:e8:50:d6:9a:dd:c9:c3:2c:56:1f:
60:a5:1e:1b:47:e7:7b:91:a6:11:2b:4f:6f:16:8e:ff:4c:aa:
37:00:c0:c2:57:f6:bd:e9:ed:d1:ce:72:7b:a8:6e:30:db:32:
cf:6a:0a:78
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUazXyGLQrkb/HwwiHYGIZiHl25skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF
MEVDMjJGNjAeFw0yMjA3MjUxNDU5MTFaFw0yMzA3MjQxNTA0MTFaMDMxMTAvBgNV
BAMTKEY4QTFFQjUzNzcyQ0FENTNEQUY2MTk0NDkzNEEwNDMwODlERTE5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKqFHA2AwJjQayoKtel0iGqzY
1MK7BckTTvtbo5lcA8shH1ydJhmKgppcBismVtBcF/0LSU+Hiiy4aAkYTOLbooYV
Sa/ggEZgzRoMBOaOlYR0Ksf6KbnO8UPuMWJYoL+E6YL5c7BPZ3kRFsOQ+yQ27EpV
isc0xjIwB62Kzjcrs2jwTI2/wOPvT3Ik5Qr/dzw/ggQK23NyB17hoTfAS+l9nypt
77Y+GePdLd8FjrudsZGGK33zrB761dkdisnaiVECtYr1/wt6z5eGFADY54a+lRCG
e6v/CEMX/LaY+3KKV96HY5f+3hO9SiVitUySRAeXmEm+aDYRzKscCrLElBWZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+KHrU3csrVPa9hlEk0oEMIneGfowHwYDVR0j
BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB
NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD
MjJGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhYjNjMDNkLTJlMmUtNDg5Ny04
NjliLTIxY2U0ODYwMTYxOS8wLzMxMzAzMzJlMzEzNjMyMmUzMTM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6KYMA0GCSqG
SIb3DQEBCwUAA4IBAQB03Rinm7okaTriU58G9EFOVjfApUBRNeAGInyLaUS0gdZS
2I8QoFdLRIJivUmZDH80WzKMtp2JiEfnLnYqkW3JheRmODRWDmBRMClcBDCE33iW
/manCKggouRYDcAJuWBcLFq2Y3QhsGrUKR/YI7G2TiKfEcXARIbgslhO/fSqH05B
WMUDnxdbC6ZYs4zYSxtV4cqYxrN/K0fKxGJCza7o78D5BcM6urQnANX6asgruH/J
+VuOB5FVUnBuUKgmVnaaEsRaXH7qcrB6RgmRw+hQ1prdycMsVh9gpR4bR+d7kaYR
K09vFo7/TKo3AMDCV/a96e3RznJ7qG4w2zLPagp4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org