Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e203338373532.roa
File: 3130332e3136322e3135332e302f32342d3234203d3e203338373532.roa (raw, json)
Hash identifier: 3Qw2ATONS4VmYl9gDMc/jop0vo8j9YyZjFiyzOu1/LM=
Subject key identifier: D3:5E:39:53:6E:68:D8:90:11:20:B5:1A:FF:D9:66:A6:EF:30:78:BA
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 1A6487C8AA15E03390151ED5C1E1048D173B7664
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e203338373532.roa
Signing time: Mon 25 Jul 2022 15:04:25 +0000
ROA not before: Mon 25 Jul 2022 14:59:25 +0000
ROA not after: Mon 24 Jul 2023 15:04:25 +0000
asID: 38752
IP address blocks: 103.162.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:64:87:c8:aa:15:e0:33:90:15:1e:d5:c1:e1:04:8d:17:3b:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Jul 25 14:59:25 2022 GMT
Not After : Jul 24 15:04:25 2023 GMT
Subject: CN=D35E39536E68D8901120B51AFFD966A6EF3078BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:9c:13:7b:f7:bc:87:15:f2:b7:f5:12:44:
73:1e:48:d5:38:87:7a:0e:e8:4c:80:32:24:7b:34:
2b:a0:b1:a6:cb:c2:8e:b2:2c:24:84:2a:f3:ca:14:
b5:09:f4:ab:3a:d5:41:95:16:1c:33:92:8b:20:d7:
f7:af:53:88:14:b5:68:2f:3d:0d:99:04:3b:ea:c6:
10:39:ec:c1:6a:b4:be:4a:56:0b:a1:6b:e8:55:43:
8b:32:6f:03:33:38:46:0a:84:af:b2:68:4d:4c:a3:
54:63:2b:7f:8c:c3:3f:9c:54:b8:04:ba:0d:f4:ae:
a6:e3:be:e4:0b:a6:81:c4:6e:4a:1b:e5:e0:9b:0c:
05:2a:71:5c:b7:50:a9:4d:3a:40:4b:58:cf:b4:4d:
ca:e0:e3:c2:85:7f:f1:bd:0b:ca:aa:57:c6:11:36:
ba:18:0f:d5:a4:3a:9f:6d:f2:a8:2c:40:00:72:f1:
5b:b7:2f:22:0e:9b:cc:7a:1f:5b:15:6e:a5:4d:60:
c2:29:2f:0e:73:9a:91:ff:3c:16:a0:c4:cd:36:73:
00:10:44:4b:f7:7b:c5:c8:b6:ef:e0:2e:a5:a9:5f:
ec:3b:41:8e:63:ed:e4:4e:cd:aa:91:5f:b0:76:f7:
75:22:7e:77:c7:84:1b:f0:c0:04:97:5a:6e:be:ac:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:39:53:6E:68:D8:90:11:20:B5:1A:FF:D9:66:A6:EF:30:78:BA
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e203338373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.153.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c2:79:41:4d:aa:16:2c:66:b9:ab:59:98:10:c9:13:25:5b:
b3:84:08:b4:8e:ea:14:a8:02:de:4d:29:99:34:09:0c:12:b9:
82:4a:a8:07:df:6b:58:1e:39:95:89:ce:e1:96:3c:6f:6d:8d:
13:7b:79:19:80:eb:3b:80:1d:71:e4:a6:40:5c:ca:a8:bc:80:
66:02:80:7b:8a:eb:37:be:3a:d6:67:d5:79:ff:1b:4b:5a:ac:
f8:a2:67:f5:b3:3d:13:f3:fe:d8:e6:0a:f7:55:e4:c2:80:77:
27:ea:3f:85:c6:95:f8:63:e8:94:4e:ce:2c:e3:96:95:a3:77:
83:08:ed:23:e7:e2:6a:18:80:f0:81:5b:8a:8d:1c:48:38:9d:
04:e6:82:7f:24:22:f8:fd:8f:bd:b5:15:a5:38:2a:05:41:60:
67:a8:3c:6d:6e:89:c8:64:d7:dd:21:ff:16:19:ba:d7:71:ec:
27:dd:c0:ee:0e:36:5f:f8:85:09:78:aa:76:37:73:90:ac:17:
38:19:cc:b4:46:31:e7:56:62:c6:12:42:c6:33:24:5d:70:82:
63:2e:a8:cf:d8:4b:a0:0a:2f:9a:14:e3:7d:6f:98:3c:95:62:
d7:1f:08:06:4b:37:16:1c:f6:14:9c:c4:dd:e8:c3:10:00:67:
29:3e:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org