Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3235322e302f32322d3234203d3e2030.roa
File: 3130332e31312e3235322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: jXsi82ZnxXR7aTyAZAhqgOrEFD7hnaRNjmH6WaISdsA=
Subject key identifier: 7D:A1:C7:17:21:40:48:4B:75:94:95:8B:5A:59:CC:D1:3D:4A:02:D9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 72F2B6622E7DAC4D678380281AE6AEA0CED3010B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3235322e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:29:59 +0000
ROA not before: Wed 02 Feb 2022 06:24:59 +0000
ROA not after: Thu 02 Feb 2023 06:29:59 +0000
asID: 0
IP address blocks: 103.11.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f2:b6:62:2e:7d:ac:4d:67:83:80:28:1a:e6:ae:a0:ce:d3:01:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:24:59 2022 GMT
Not After : Feb 2 06:29:59 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:1b:45:60:a9:16:4c:fe:15:d9:3b:ed:c4:
89:86:82:16:99:a2:d4:ee:f1:13:80:35:cc:28:45:
07:7c:a3:a0:e9:9e:9f:8e:be:aa:5a:68:53:a0:f9:
26:b9:f6:7b:65:95:97:cc:d6:28:41:31:5d:d3:2f:
81:5c:e9:4d:2e:4a:78:fe:a4:98:87:c9:6c:d8:0c:
d2:b7:49:09:18:07:76:8a:64:38:3e:0a:0b:1a:63:
06:d1:cd:01:c9:4c:52:56:ca:bf:5a:d0:cb:05:7c:
f7:a0:50:84:0d:76:27:a7:45:fd:66:fb:7a:6a:d6:
98:55:3b:0e:62:f6:2e:03:cf:93:9e:77:ba:29:12:
ad:45:87:dc:20:66:47:f4:12:f4:0e:d7:35:fc:1d:
2a:f3:c5:7a:20:5b:1c:c0:66:2b:5d:20:92:47:cb:
57:66:e2:1f:9b:b9:b6:f3:8f:4a:95:2e:10:02:41:
ee:0d:d0:ca:a4:25:3c:fb:42:84:63:f5:b8:f6:0b:
e1:66:cf:b2:10:90:b8:99:61:68:73:91:dd:18:39:
ae:bc:1a:d7:f7:43:2d:16:5b:37:d0:7e:25:15:98:
77:8a:d9:d2:11:8f:cb:22:0e:bc:c3:98:30:3b:80:
fa:78:38:86:54:57:58:2f:1d:10:a7:d6:71:c9:e0:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:C7:17:21:40:48:4B:75:94:95:8B:5A:59:CC:D1:3D:4A:02:D9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3235322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:dd:b1:39:87:f9:d2:10:b7:47:30:2d:47:04:04:e5:61:7e:
13:2a:4a:bc:86:54:20:3d:68:4b:9c:ab:4e:b8:2e:ce:dc:0f:
b1:f5:cc:8d:c8:8a:00:ce:61:4b:54:a2:f5:89:fc:ae:ef:a0:
c9:4f:66:86:4d:12:17:1c:22:77:41:3f:b7:e8:02:8f:ec:53:
eb:af:33:1e:2a:58:17:43:80:c2:51:bc:a3:47:31:4e:49:76:
cf:4b:7c:10:4e:d5:20:62:10:9f:76:de:17:62:08:11:ff:1b:
04:d0:6b:64:79:a5:6b:57:3d:52:f6:0d:f5:5a:3d:46:ac:ed:
40:1c:82:64:fa:a8:27:e6:4f:63:a9:a1:a4:41:c6:22:c6:88:
79:47:57:d5:27:aa:85:e8:d4:a4:0f:5c:a3:e3:ec:47:91:d9:
9c:19:58:1c:2e:58:03:73:0c:4c:df:eb:f0:4b:04:86:91:f5:
08:a3:c7:4c:a8:3d:ff:c4:ec:16:02:32:6b:61:9b:b7:c7:ec:
5e:ae:2f:aa:d9:e7:9a:a8:b4:d1:c1:60:2a:36:71:62:0a:e8:
4d:46:6a:67:e9:9a:c5:4d:53:7b:c7:32:70:69:65:a5:a0:40:
22:f8:7c:df:75:ee:e6:28:93:8a:47:ea:ab:c0:f8:47:fb:f7:
f6:3a:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org