Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313530353034.roa
File: 3130332e3132352e3131392e302f32342d3234203d3e20313530353034.roa (raw, json)
Hash identifier: Z4oJg6Ev0uumg48lh/gFxgEa0bR57RJP7PxYAlFAPrY=
Subject key identifier: 67:E2:13:72:40:4B:72:17:C8:16:A3:0D:E5:FE:D7:CF:7A:0F:34:4B
Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial: 6A3AF2A25FC67DAE4E0A119F3138369EB9290FEC
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313530353034.roa
Signing time: Thu 23 Feb 2023 03:02:45 +0000
ROA not before: Thu 23 Feb 2023 02:57:45 +0000
ROA not after: Thu 22 Feb 2024 03:02:45 +0000
asID: 150504
IP address blocks: 103.125.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3a:f2:a2:5f:c6:7d:ae:4e:0a:11:9f:31:38:36:9e:b9:29:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Validity
Not Before: Feb 23 02:57:45 2023 GMT
Not After : Feb 22 03:02:45 2024 GMT
Subject: CN=67E21372404B7217C816A30DE5FED7CF7A0F344B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:b0:b0:86:46:d9:2f:7e:27:1b:c6:1b:0a:
84:fe:2b:f4:79:3a:05:a6:ee:dc:7f:5b:e0:e8:d2:
74:0c:fd:28:2a:70:fe:33:2d:9a:5b:4e:4e:b9:67:
e5:af:bd:25:db:7c:28:f6:48:7c:f0:ce:74:b8:d5:
43:2c:f0:27:fc:3c:8b:0f:e5:27:ff:0d:a4:77:39:
a9:c1:de:35:2c:72:ff:35:05:58:a1:b5:45:a7:a0:
52:a1:ef:1c:8b:a5:57:d2:75:30:eb:8c:37:4c:86:
6a:40:67:0e:e9:4b:67:ff:60:8f:db:a2:46:d7:97:
57:91:f2:4d:71:bd:70:83:da:73:f9:53:94:1b:29:
dc:44:18:99:cc:a7:96:e9:43:91:f1:9b:f3:30:f8:
b1:f2:0e:3b:32:49:fa:f2:ac:50:21:7f:ee:d9:84:
ca:b0:83:bf:51:3c:a7:86:48:c8:5a:8c:69:d8:0a:
8a:fc:3c:39:db:d7:ae:e0:69:97:68:cd:cc:39:98:
59:dc:5c:7c:d6:41:15:d5:7a:b9:de:09:fc:bf:d5:
3c:be:42:9c:12:a0:10:ec:82:f6:27:d3:ef:ff:c8:
bd:1a:1e:35:57:0d:6b:34:bc:a9:c0:38:d6:1b:2f:
d0:78:e0:fd:df:a3:47:ac:b2:33:ba:4d:09:5b:f4:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E2:13:72:40:4B:72:17:C8:16:A3:0D:E5:FE:D7:CF:7A:0F:34:4B
X509v3 Authority Key Identifier:
keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131392e302f32342d3234203d3e20313530353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.119.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ee:17:35:14:c4:b6:6b:65:5f:1e:30:55:0f:d8:52:1e:8e:
fc:4e:c6:9f:f2:a1:2c:ff:27:d6:ce:07:d1:8c:34:20:34:a1:
f0:22:ec:5b:c5:77:54:60:a3:26:d1:b5:9d:5e:3d:40:c7:aa:
ca:24:ff:82:08:29:78:df:bf:1f:de:6f:41:86:1a:5f:af:d5:
68:28:c8:ff:73:ce:8e:36:2d:14:12:74:e5:ed:5a:20:f1:ef:
56:f1:73:ae:53:03:ec:8a:9a:d0:c2:27:d3:63:d6:8a:2f:98:
b7:53:3a:34:d3:3a:47:a5:48:09:e1:e2:cb:37:d0:aa:f9:32:
e8:60:ba:31:b7:12:55:aa:d0:6b:c5:0e:8c:46:8e:cb:12:08:
ff:f9:5d:54:a0:85:72:ef:0e:80:5d:54:ab:15:11:4a:45:14:
2c:45:4e:43:10:ae:b8:2c:f8:6b:27:f9:1d:2c:2e:c5:37:45:
e7:8b:6e:13:c1:21:71:49:b1:5a:e6:66:62:ef:6e:92:35:97:
4f:67:a9:a7:90:39:73:34:85:c9:e6:11:ea:af:5a:67:4f:8d:
5e:a4:b6:20:9d:ea:a7:b8:1f:b2:e7:8b:ef:79:f8:16:97:03:
31:f6:a8:ee:7c:57:55:31:37:f6:8f:7b:21:37:1e:d0:0d:1f:
6c:c7:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org