Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32332d3234203d3e20313331373336.roa
File: 3130332e3136312e37322e302f32332d3234203d3e20313331373336.roa (raw, json)
Hash identifier: ha7VB36/m8+d7IC8G+cIDiiZH+/Rq+qagsQ73QzW8L0=
Subject key identifier: FA:AD:98:08:41:E4:48:27:01:63:D2:CD:30:28:2B:50:EA:4D:FD:AD
Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4
Certificate serial: 31B74B986890A85BAF231DFCB36193520752C20F
Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32332d3234203d3e20313331373336.roa
Signing time: Thu 28 Jul 2022 10:01:36 +0000
ROA not before: Thu 28 Jul 2022 09:56:36 +0000
ROA not after: Thu 27 Jul 2023 10:01:36 +0000
asID: 131736
IP address blocks: 103.161.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b7:4b:98:68:90:a8:5b:af:23:1d:fc:b3:61:93:52:07:52:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4
Validity
Not Before: Jul 28 09:56:36 2022 GMT
Not After : Jul 27 10:01:36 2023 GMT
Subject: CN=FAAD980841E448270163D2CD30282B50EA4DFDAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:d0:03:d7:4b:b0:40:52:6e:c5:76:7e:fd:
b9:5a:a2:b7:fc:93:47:af:52:1f:02:5f:3e:2a:6c:
cb:35:50:37:1e:8c:99:9c:2c:18:70:e6:8d:29:5d:
c8:cc:43:75:bf:ad:c6:71:ca:60:23:cc:98:ab:71:
75:c5:2e:09:60:22:6f:fb:b4:cc:85:2f:42:a1:64:
8e:30:f2:51:69:3c:ec:97:f8:37:10:3e:d9:24:47:
4b:5c:84:8f:38:7f:0f:7b:b1:6c:b0:90:1e:24:97:
fb:63:c0:e2:c5:fe:de:16:09:67:27:f3:bb:73:59:
bd:56:ea:4f:e5:9e:f0:37:72:36:f9:44:a8:30:54:
ed:56:76:17:2d:f5:2e:bf:01:b7:84:3b:7d:1b:a0:
10:c5:f9:25:52:ce:87:16:de:a0:0d:5c:59:13:03:
6f:01:03:90:df:a3:cd:99:6e:c4:f8:1a:77:bb:44:
6d:8e:0d:fe:f8:a2:fa:64:4d:78:eb:41:5c:84:2e:
0c:02:0d:03:40:db:8a:c8:7c:b1:41:35:ed:c0:4b:
38:28:99:d0:76:53:3c:bb:7b:9c:7e:b5:a0:75:a8:
4a:f1:c4:8a:6a:5b:6c:86:cc:2d:6c:84:2c:d2:c0:
39:2a:89:7a:a5:e0:b1:e0:26:c7:f4:f9:31:f6:db:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:98:08:41:E4:48:27:01:63:D2:CD:30:28:2B:50:EA:4D:FD:AD
X509v3 Authority Key Identifier:
keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37322e302f32332d3234203d3e20313331373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:e6:69:3f:73:c0:54:cc:45:2b:84:a4:88:96:92:26:6c:1b:
c8:d8:35:51:31:bc:5b:22:16:b3:2a:b1:9b:87:74:43:c1:1e:
c5:06:cd:b5:f6:5f:aa:51:ac:9d:23:83:c1:b2:8d:f9:7b:86:
c9:45:36:55:0e:19:2e:f6:6b:f2:af:14:c1:e7:08:50:6c:04:
f8:30:e0:c6:3e:08:91:4b:65:0c:5f:2f:d6:4e:de:5b:0d:a0:
5c:58:39:7f:55:f6:a7:84:be:cd:e3:d2:12:2d:1f:16:cd:36:
6f:3e:68:66:2e:0c:7b:23:b1:51:4e:51:a3:5f:10:98:67:df:
27:09:56:af:70:4b:d2:19:af:cc:cc:21:46:f3:d1:d5:b0:57:
57:7a:8b:ca:22:ba:d3:5a:41:ae:cd:fb:f9:5f:f6:dc:1a:7c:
25:11:a4:96:b5:a8:4b:9e:ba:06:35:ea:c0:e0:67:1d:1c:da:
5f:ac:cd:25:df:d4:68:7f:a3:ec:a6:5c:54:e8:4d:91:66:e1:
d7:cf:77:1e:8a:bd:cc:20:ee:ea:52:30:b4:bb:72:44:72:90:
c4:c9:f7:17:9b:76:47:d1:08:1d:32:6c:b7:5c:11:a0:36:52:
b1:61:fc:2c:de:ed:e3:7f:7f:ca:a1:6e:d3:b0:a0:13:4c:ae:
85:d5:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org