Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e203338353036.roa
File: 3131302e37362e3135302e302f32332d3234203d3e203338353036.roa (raw, json)
Hash identifier: tLvWVLFGhHkOW9hEN0ZbzXILBEwn32unplWwHAbGvVs=
Subject key identifier: 22:34:05:3C:C6:70:47:3C:08:84:3E:30:78:81:72:E9:C9:AF:4A:60
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 5718C1EFC09082A514F03B0B512876F692DF3469
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e203338353036.roa
Signing time: Tue 28 Jun 2022 02:12:01 +0000
ROA not before: Tue 28 Jun 2022 02:07:01 +0000
ROA not after: Tue 27 Jun 2023 02:12:01 +0000
asID: 38506
IP address blocks: 110.76.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:18:c1:ef:c0:90:82:a5:14:f0:3b:0b:51:28:76:f6:92:df:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Jun 28 02:07:01 2022 GMT
Not After : Jun 27 02:12:01 2023 GMT
Subject: CN=2234053CC670473C08843E30788172E9C9AF4A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:35:3b:11:32:9d:cf:4a:d3:ad:45:3d:93:
92:d6:1b:ca:8c:cf:63:9c:44:d0:ca:59:63:ed:db:
54:5c:0c:ec:90:5a:3c:c6:19:46:6e:ef:4c:71:1a:
85:30:fd:c2:b7:cf:da:8e:b3:b5:28:e6:a5:a2:ce:
86:8e:b2:c2:c5:17:14:4a:50:25:78:94:d7:fa:db:
13:3c:02:ac:41:4e:70:a6:c3:49:b3:dc:0e:a0:94:
dc:a3:64:21:e5:57:af:02:7e:52:42:4e:e5:c9:bb:
5e:8e:d0:65:d3:76:58:b6:45:61:77:99:56:e1:e6:
01:f9:1f:82:b3:3d:08:62:7d:da:ae:e6:bf:d7:cc:
e3:c2:71:de:2c:3a:f1:c0:dd:8f:75:01:04:2d:5b:
d3:5a:5c:1a:4f:09:28:fe:45:b4:dc:7b:6d:ac:03:
bb:f8:c2:dc:f6:15:47:c1:f4:d8:67:90:75:fe:e7:
81:08:fc:e1:9d:58:e8:b8:8f:47:dc:56:ed:18:95:
c7:dd:c2:ef:a3:d3:6f:1e:4e:e8:f1:f2:58:30:f7:
80:8a:41:13:c8:7a:93:c8:9f:c4:72:fb:f1:c6:ad:
21:e2:d2:82:07:80:97:25:1e:78:96:a4:4d:27:1e:
56:72:75:15:77:af:f1:af:a4:2a:b2:b6:d7:61:46:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:05:3C:C6:70:47:3C:08:84:3E:30:78:81:72:E9:C9:AF:4A:60
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e203338353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.150.0/23
Signature Algorithm: sha256WithRSAEncryption
12:38:1b:ad:56:80:f6:0e:65:df:9c:67:ed:e2:58:88:53:de:
c5:d9:84:8a:b7:0d:ca:4a:83:fe:df:a3:1b:6f:20:3b:bd:8b:
f6:35:10:33:ab:da:69:77:6d:e1:e6:20:41:e9:df:8b:fc:50:
b3:40:3e:4b:ab:cf:b2:cd:cf:dd:44:4b:42:4e:4e:3b:8d:24:
f7:97:7a:25:29:91:d5:a2:b3:7b:d0:ad:4c:e2:47:22:b4:b9:
88:0d:47:6e:64:e6:8c:d5:db:9b:3d:58:75:b0:4c:ba:30:62:
e8:37:4e:9e:82:63:95:9f:5c:6b:5d:48:6b:80:dd:8f:62:de:
d5:15:64:49:7e:3c:2d:e1:06:64:47:07:1c:f3:5f:4a:75:88:
52:45:17:70:90:75:04:53:e4:c0:53:04:cb:67:33:5c:e2:7a:
6b:cb:3f:01:4a:e2:98:d7:9c:7e:79:27:6c:2c:1a:79:e3:14:
97:6a:d7:4d:89:9f:d1:db:37:92:db:7f:fa:e6:31:cf:f2:35:
b4:92:1f:26:72:b8:6b:1d:75:7e:a9:52:74:ee:72:81:3b:41:
d1:98:96:68:47:27:ec:7b:b4:b5:d8:70:e9:c6:1f:ed:ee:fd:
4b:8b:f7:21:07:6a:13:1e:e2:bd:9c:39:5a:e1:1c:fe:f6:d3:
87:f7:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org