Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3233203d3e20313338383734.roa
File: 3130332e3134302e37362e302f32332d3233203d3e20313338383734.roa (raw, json)
Hash identifier: OZH4HdHIEqwW0dFNLzG1I25tAPDJSyABcjpl8pBAXcI=
Subject key identifier: 96:43:61:B0:74:39:3B:A6:4E:61:BB:20:DB:AA:D6:58:B9:20:7C:04
Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial: 22BBCD14B8C2B4EF5643E64AA4FADF5BC81603D8
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3233203d3e20313338383734.roa
Signing time: Wed 07 Dec 2022 09:11:59 +0000
ROA not before: Wed 07 Dec 2022 09:06:59 +0000
ROA not after: Wed 06 Dec 2023 09:11:59 +0000
asID: 138874
IP address blocks: 103.140.76.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bb:cd:14:b8:c2:b4:ef:56:43:e6:4a:a4:fa:df:5b:c8:16:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Validity
Not Before: Dec 7 09:06:59 2022 GMT
Not After : Dec 6 09:11:59 2023 GMT
Subject: CN=964361B074393BA64E61BB20DBAAD658B9207C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:fa:27:5f:55:47:b5:88:f4:5e:8f:21:e0:
1d:a7:ae:a6:d1:14:28:a5:7f:64:4a:81:87:de:54:
96:f1:1f:18:85:6a:72:b3:0a:78:5d:5b:24:fc:49:
2d:eb:8a:bb:5b:1c:9e:76:ef:8c:21:37:0b:c4:8d:
59:04:40:d6:ba:41:14:2e:43:33:90:5c:59:44:33:
b5:4d:48:10:cc:38:df:93:f7:1b:2c:73:a5:68:4b:
54:95:3b:89:2b:77:eb:78:bd:2d:45:10:78:57:2b:
db:79:eb:df:ff:27:8e:ab:35:31:b2:6a:dc:6d:09:
ba:45:37:5f:1a:a1:e8:fe:ee:10:80:11:dc:95:d8:
3f:2a:3c:0e:56:1e:92:c7:d0:1b:b1:f7:0f:f2:fb:
bc:45:a9:05:64:3f:c7:59:2a:35:fe:24:b0:86:b3:
cf:0e:27:d8:59:e6:65:c0:7c:76:5c:54:31:ea:88:
9e:bc:b4:17:84:a1:3b:bc:b6:03:b6:cc:cc:ce:e0:
d4:90:ea:10:07:26:da:15:0d:9c:f7:40:c5:03:29:
48:de:95:19:af:da:52:a2:8c:0e:a4:05:d5:5f:7f:
81:0f:43:9e:31:f7:17:fc:fe:d5:8b:fe:1d:55:ea:
26:bc:2c:02:27:d8:d9:a5:94:e0:3e:ec:fb:05:2b:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:61:B0:74:39:3B:A6:4E:61:BB:20:DB:AA:D6:58:B9:20:7C:04
X509v3 Authority Key Identifier:
keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3233203d3e20313338383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
e6:22:13:03:78:bf:5d:26:72:5c:75:a2:06:e9:df:a9:55:5e:
ce:a2:99:e3:b8:ce:58:58:08:c5:7a:09:43:09:0c:1e:5d:ce:
e3:c9:d0:65:69:63:77:0c:30:4a:80:81:0f:8b:95:74:27:7b:
bb:a4:20:0b:e4:e3:63:f4:e1:7d:3f:04:8d:5a:ec:bd:33:2a:
e4:bb:7d:64:e2:43:28:42:08:22:97:22:b4:d5:bf:47:6a:28:
6e:dc:e8:f1:82:f2:bc:68:30:8c:c6:3c:95:42:5e:eb:50:6a:
b8:56:14:e2:3c:ec:9b:61:f6:90:e9:7f:e5:57:4a:d4:62:6e:
74:6b:91:fd:20:79:bc:cc:f8:49:7a:1e:08:37:c5:ce:fe:f3:
b0:4b:07:9c:47:5a:91:77:49:4a:97:21:00:87:e5:e4:9e:5a:
5f:0e:0f:e9:87:cc:a1:9d:29:8d:34:54:77:9c:f4:e0:9a:ae:
79:d2:c8:e8:bf:36:04:43:50:50:b6:f4:1c:f6:7f:fb:df:75:
59:60:50:49:74:fd:8c:ae:5e:b5:2e:48:79:79:36:11:38:5c:
c1:fa:ac:cd:44:5e:34:6e:61:43:45:dc:a5:a9:c5:f3:1a:dd:
ef:22:ed:48:48:ec:9a:c6:aa:0e:fa:ad:ef:59:c0:e5:20:d7:
d6:42:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org