Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa
File: 3130332e3132322e3130382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: GIVcCXEP41Qo06YzlscQjKdTZDluR6cYps3UqOfyH+A=
Subject key identifier: B1:11:EA:3A:AF:59:AF:32:92:30:C2:B3:5E:99:E6:CB:06:09:5B:D3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 385432DF02BB622943024E33E4E5A204C1A74A15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:25:21 +0000
ROA not before: Wed 02 Feb 2022 06:20:21 +0000
ROA not after: Thu 02 Feb 2023 06:25:21 +0000
asID: 0
IP address blocks: 103.122.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:54:32:df:02:bb:62:29:43:02:4e:33:e4:e5:a2:04:c1:a7:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:20:21 2022 GMT
Not After : Feb 2 06:25:21 2023 GMT
Subject: CN=3082010A0282010100C28664DAAE4F93B90AC4BDBE4CA362EFF2E5D5D9E107D5287EB192425F42BDB31A1E734B20B8A561F7280387BFFD588EB8EA57F0C7506F569666A60159603E40CF299F115CB91FB75083A1CDABAAF15EBAA38144BEF93C97BAAB1D8A7449D7E96D27A0B444821EDC925860A57A78FF76542F0FFD4C101FAE5AEEC7092692084E423B3131944C62F94FE3E5EF242E946972EF2C7572A5C7E50E8309210DC8F35D91E6C6FD1C9659E280BC59DFD33CF7FE3AD6847BC7A878051D8B8C7659AC996E4C83BF71B210EF083EC6167BE25E5100BE399D4AB2FC6545AE1E68F30FB7FB791489F2A55F5766AA0B244FB6A929623CCF8E5925532B4BDD8892FC7D74C8B5890203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:64:da:ae:4f:93:b9:0a:c4:bd:be:4c:a3:
62:ef:f2:e5:d5:d9:e1:07:d5:28:7e:b1:92:42:5f:
42:bd:b3:1a:1e:73:4b:20:b8:a5:61:f7:28:03:87:
bf:fd:58:8e:b8:ea:57:f0:c7:50:6f:56:96:66:a6:
01:59:60:3e:40:cf:29:9f:11:5c:b9:1f:b7:50:83:
a1:cd:ab:aa:f1:5e:ba:a3:81:44:be:f9:3c:97:ba:
ab:1d:8a:74:49:d7:e9:6d:27:a0:b4:44:82:1e:dc:
92:58:60:a5:7a:78:ff:76:54:2f:0f:fd:4c:10:1f:
ae:5a:ee:c7:09:26:92:08:4e:42:3b:31:31:94:4c:
62:f9:4f:e3:e5:ef:24:2e:94:69:72:ef:2c:75:72:
a5:c7:e5:0e:83:09:21:0d:c8:f3:5d:91:e6:c6:fd:
1c:96:59:e2:80:bc:59:df:d3:3c:f7:fe:3a:d6:84:
7b:c7:a8:78:05:1d:8b:8c:76:59:ac:99:6e:4c:83:
bf:71:b2:10:ef:08:3e:c6:16:7b:e2:5e:51:00:be:
39:9d:4a:b2:fc:65:45:ae:1e:68:f3:0f:b7:fb:79:
14:89:f2:a5:5f:57:66:aa:0b:24:4f:b6:a9:29:62:
3c:cf:8e:59:25:53:2b:4b:dd:88:92:fc:7d:74:c8:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:EA:3A:AF:59:AF:32:92:30:C2:B3:5E:99:E6:CB:06:09:5B:D3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d5:9e:ed:0c:06:61:6c:6c:7b:17:24:f5:7d:ca:cd:24:77:
80:b6:8b:85:1b:00:7a:fe:c9:e7:51:5c:b9:3f:cf:07:74:06:
09:a7:83:9c:be:dc:b4:9e:3d:a5:ce:88:cc:fb:9b:a4:4b:49:
a0:ae:4d:46:dc:75:c1:55:51:4f:0e:4d:aa:91:cc:54:be:7d:
fc:af:a9:5a:5d:f2:89:ee:3d:8a:72:22:00:e6:dd:9e:7c:e6:
21:6b:aa:a7:e3:65:c4:2c:0d:d5:d8:84:3b:d6:e9:85:84:44:
2c:0c:02:68:03:f6:2e:de:f7:72:4b:03:4e:6d:47:04:91:e6:
55:fa:99:b6:8f:46:5f:10:2b:af:14:d8:74:e3:af:6d:1b:55:
82:02:8d:ae:2f:a6:d2:d8:01:54:6c:e0:60:90:d9:d3:6f:99:
2a:c8:b9:d4:b7:17:64:c7:43:5f:34:07:45:b7:22:32:d6:62:
85:9f:6b:42:09:43:29:76:77:25:da:dd:bd:a2:6c:c1:6b:1a:
23:d8:8c:05:c8:07:18:7c:d0:4a:04:8a:73:81:b5:86:a2:87:
d0:a7:e7:df:41:78:b7:50:dc:2b:a1:ee:68:ef:72:20:19:1c:
0f:e9:58:62:cc:3c:4a:33:de:97:97:2a:5b:38:e6:b9:ba:c0:
f1:c7:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org