Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e38342e302f32322d3234203d3e2030.roa
File: 3130332e3132312e38342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: edeItkDnO9VFlHnIFeeXHMTeJ/2WkxF2O4PF7mSg6ns=
Subject key identifier: C4:13:2A:C9:67:F9:B4:89:3B:B6:8C:E0:91:30:F0:0A:4E:DF:56:B2
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3EEE97E8E4DD38199F5CBE3A054D623EACE3EE42
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e38342e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:34:56 +0000
ROA not before: Wed 02 Feb 2022 06:29:56 +0000
ROA not after: Thu 02 Feb 2023 06:34:56 +0000
asID: 0
IP address blocks: 103.121.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ee:97:e8:e4:dd:38:19:9f:5c:be:3a:05:4d:62:3e:ac:e3:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:29:56 2022 GMT
Not After : Feb 2 06:34:56 2023 GMT
Subject: CN=3082010A0282010100C609FF68FED73B83352DCA47159FBBC5F3833E1263C0F4632B0B4008FDAAAFC133D4FD453E1AE4B0EA01B3207646EFFFB0A64EDA9B121771C6A03C49423CC8BD6A43AB1D5EDD6FA9EC9359FD90771AA691145F7D61DF0B72D547AB8545BFD16C89889F3B51A6762186B3E8E8B8A1EAF8CC8978911ADA8C61011804743F57345B5C1978B372DBFC8900899F16E39F260B4BB392CAE4341EB247A31699569028D69E7F2FBC56BDDE010D84EE86B2ED5166C5559324BE78434FC9F6909DFFE83A942E2085F258E300267C9DCFCD3B6FB5090C1634A2C8824E1C4EFB7F9315988EA21DAB26BBA46E57A0A91E3979A37ECD27DA365A127D85AB03FD835DF6C60769470203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:ff:68:fe:d7:3b:83:35:2d:ca:47:15:9f:
bb:c5:f3:83:3e:12:63:c0:f4:63:2b:0b:40:08:fd:
aa:af:c1:33:d4:fd:45:3e:1a:e4:b0:ea:01:b3:20:
76:46:ef:ff:b0:a6:4e:da:9b:12:17:71:c6:a0:3c:
49:42:3c:c8:bd:6a:43:ab:1d:5e:dd:6f:a9:ec:93:
59:fd:90:77:1a:a6:91:14:5f:7d:61:df:0b:72:d5:
47:ab:85:45:bf:d1:6c:89:88:9f:3b:51:a6:76:21:
86:b3:e8:e8:b8:a1:ea:f8:cc:89:78:91:1a:da:8c:
61:01:18:04:74:3f:57:34:5b:5c:19:78:b3:72:db:
fc:89:00:89:9f:16:e3:9f:26:0b:4b:b3:92:ca:e4:
34:1e:b2:47:a3:16:99:56:90:28:d6:9e:7f:2f:bc:
56:bd:de:01:0d:84:ee:86:b2:ed:51:66:c5:55:93:
24:be:78:43:4f:c9:f6:90:9d:ff:e8:3a:94:2e:20:
85:f2:58:e3:00:26:7c:9d:cf:cd:3b:6f:b5:09:0c:
16:34:a2:c8:82:4e:1c:4e:fb:7f:93:15:98:8e:a2:
1d:ab:26:bb:a4:6e:57:a0:a9:1e:39:79:a3:7e:cd:
27:da:36:5a:12:7d:85:ab:03:fd:83:5d:f6:c6:07:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:2A:C9:67:F9:B4:89:3B:B6:8C:E0:91:30:F0:0A:4E:DF:56:B2
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e38342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.84.0/22
Signature Algorithm: sha256WithRSAEncryption
78:90:d1:60:b4:b8:c9:2c:d0:79:c0:f8:96:2b:c2:ea:ff:e9:
e9:52:53:7c:70:73:ee:1c:bb:96:b1:06:64:3e:88:29:ac:df:
22:cd:d6:07:a2:b5:8f:ae:0e:38:a2:76:d4:3e:95:ce:a2:96:
76:79:bb:4f:92:bd:ea:9a:a5:fa:10:5e:5b:86:ab:73:55:13:
1e:61:fc:49:76:77:af:60:b8:dc:b8:0a:dc:39:50:b8:05:25:
27:e6:65:d9:4a:fc:e5:08:b9:e5:14:89:12:0e:26:92:4a:a1:
94:d9:dd:3d:9f:db:e8:57:28:93:ae:d0:d9:14:e3:25:60:15:
dd:d4:fc:71:3a:95:65:e6:54:8c:35:5d:c2:68:59:82:b0:54:
62:1b:aa:64:60:c4:e8:d4:a0:32:9c:d8:ce:fe:49:eb:57:51:
62:65:9f:8c:da:a9:0e:ff:d9:4a:7a:15:57:92:77:e8:20:8d:
95:f7:76:06:71:f2:f4:b8:53:3c:d1:95:83:dd:01:b1:cd:3e:
7b:08:ba:75:54:51:3e:dc:9b:e4:75:68:38:87:09:ed:39:8e:
ae:0c:3b:67:74:75:57:78:e1:a8:dd:6d:82:90:2b:cd:9a:ee:
bf:9d:79:37:77:1f:1b:16:83:ca:3e:87:a5:65:57:2b:5b:a2:
1b:3d:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org