Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32332d3234203d3e20313336303532.roa
File: 3130332e3137312e31382e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier: J9LvND1qzjUwPuBLm0kraLBf99wYYEBOC5d4ngOIk0c=
Subject key identifier: B8:28:0E:DF:69:C1:BB:B3:CE:76:EA:86:F1:26:09:C7:EF:97:54:8A
Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B
Certificate serial: 1BA4990D29E51A7DEF7AD3950BCE8DD35FC27D6E
Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32332d3234203d3e20313336303532.roa
Signing time: Tue 19 Jul 2022 12:00:00 +0000
ROA not before: Tue 19 Jul 2022 11:55:00 +0000
ROA not after: Tue 18 Jul 2023 12:00:00 +0000
asID: 136052
IP address blocks: 103.171.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a4:99:0d:29:e5:1a:7d:ef:7a:d3:95:0b:ce:8d:d3:5f:c2:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B
Validity
Not Before: Jul 19 11:55:00 2022 GMT
Not After : Jul 18 12:00:00 2023 GMT
Subject: CN=B8280EDF69C1BBB3CE76EA86F12609C7EF97548A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:29:9c:00:76:e3:13:b9:84:94:18:ff:8a:
22:31:07:4a:9e:57:18:a5:e5:86:6b:91:b7:d1:ee:
2e:2f:4c:8a:1c:9b:b0:11:92:6c:e4:6c:63:42:f7:
c6:9d:fe:63:a3:ca:df:a0:8e:d5:8c:33:89:f5:3d:
5c:a4:ba:2e:58:f4:d8:f2:34:ad:f6:fa:85:b7:4f:
a5:4f:d0:2f:96:ef:6b:70:20:73:43:95:c6:27:66:
88:c0:cb:f3:c0:a3:fb:a0:c7:1a:47:1b:8c:16:b5:
d8:1d:1b:f8:f1:8a:ac:f1:06:b9:89:ce:2a:dc:1e:
d9:8a:a6:38:55:10:fa:89:b5:fd:04:26:6c:b1:ec:
bb:07:a5:01:98:bd:36:b0:c8:a3:c8:d5:72:ea:c5:
3a:6b:b6:47:c7:b7:d3:95:13:c0:8a:c8:8f:e1:cc:
82:fd:3e:81:1e:46:7e:62:f1:6c:57:a5:f7:7b:3d:
22:c4:8e:15:8f:67:d6:c3:14:2f:83:e9:ef:c7:fd:
cf:ae:31:ee:c2:2d:0f:36:cd:f2:7b:bb:4a:e0:1d:
2e:af:01:9f:54:7b:6a:4a:8e:f1:f8:42:53:48:63:
9c:e1:95:21:24:42:38:7c:fa:13:cc:e6:68:3d:5d:
ce:60:36:8c:a0:de:91:07:3e:71:53:f9:49:f1:93:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:0E:DF:69:C1:BB:B3:CE:76:EA:86:F1:26:09:C7:EF:97:54:8A
X509v3 Authority Key Identifier:
keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32332d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:4e:04:13:7b:b4:17:2b:28:02:61:0f:89:be:9b:2c:c7:80:
ba:b3:a8:64:e8:53:1c:b5:60:c5:6d:97:51:92:8d:f9:39:01:
73:e3:15:e4:62:74:71:b3:b9:30:7d:d8:7b:a9:93:ea:46:1e:
ea:3d:ff:37:2e:c6:82:91:0b:06:80:8a:4c:d5:1e:14:c8:57:
8e:bb:76:53:d3:7e:9d:81:f2:f6:21:87:da:4e:03:ec:a1:e9:
85:86:2c:a1:15:c9:c5:2b:ba:26:ff:ad:3b:c9:51:19:41:7a:
f8:7a:05:43:2c:69:b3:48:e9:1f:1c:61:b3:35:96:2b:68:26:
f1:56:bd:79:2e:f5:58:45:14:ec:a6:01:90:47:d0:50:ce:1b:
8d:64:22:02:4f:2a:66:b0:13:d0:87:ce:2d:2b:4f:a7:94:7a:
cf:3b:5f:96:89:f3:6a:23:54:24:22:2d:ba:5c:2d:f9:fc:92:
dc:3e:33:cb:9a:8e:33:23:a0:22:59:e4:c6:53:cd:e1:fb:88:
c1:2c:c2:be:af:63:6e:7c:92:19:fd:fb:29:13:3c:e3:b7:d0:
b0:f5:9e:20:c6:d0:87:34:26:f2:30:d7:be:f3:9d:58:4b:61:
cb:9e:95:62:94:f9:75:1f:21:42:c2:3c:83:38:c0:c7:29:a3:
ba:76:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org