Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131362e302f32322d3234203d3e2030.roa
File: 3130332e3132342e3131362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: vzSsT/WN7Gf2ptEkcPcp5HkXdlC5nDeLABZTn6V5ODw=
Subject key identifier: E8:66:D0:6A:7F:E6:9D:FB:84:E3:13:3E:79:FE:9F:CE:84:C5:33:36
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 46C711F6B6C0429507AEA59AD52126009D4B9805
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131362e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:25:14 +0000
ROA not before: Wed 02 Feb 2022 06:20:14 +0000
ROA not after: Thu 02 Feb 2023 06:25:14 +0000
asID: 0
IP address blocks: 103.124.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c7:11:f6:b6:c0:42:95:07:ae:a5:9a:d5:21:26:00:9d:4b:98:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:20:14 2022 GMT
Not After : Feb 2 06:25:14 2023 GMT
Subject: CN=3082010A0282010100A112C055BD56E937CAF80988288A9879A85B8770EAF0824A6560E1163065D34BFE4D5C29D70ABA8BCACEE0CB2D6038C9796DA2224499AADBB324D0A9C3FA631F87DDD1A3FD5E631D18FDDA228B39497A4F721FCB762476E6684BB8E151D36C6317D5A2FD75B5EB4B276F18097DCB535BB1FC593CC24BF4BE11196923C864326B859E1219274C3BD8C7B99CD5503BCB88F3B59DAC7A5D6431A143AA8AA973AC66A9912AFFDBA91885EDA94CCB5E53C55DC9BE365B3735F16CE87EE8DD452940ECD0AB20CFF26E118992965C5471082F67EAA2D4AC25A89A4F99BF68F16B2FB7556282274E92B1ACE9F47DA78BCBDC2FF19065CEEDD603D53DA02F4E25CDC2BD1D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:c0:55:bd:56:e9:37:ca:f8:09:88:28:8a:
98:79:a8:5b:87:70:ea:f0:82:4a:65:60:e1:16:30:
65:d3:4b:fe:4d:5c:29:d7:0a:ba:8b:ca:ce:e0:cb:
2d:60:38:c9:79:6d:a2:22:44:99:aa:db:b3:24:d0:
a9:c3:fa:63:1f:87:dd:d1:a3:fd:5e:63:1d:18:fd:
da:22:8b:39:49:7a:4f:72:1f:cb:76:24:76:e6:68:
4b:b8:e1:51:d3:6c:63:17:d5:a2:fd:75:b5:eb:4b:
27:6f:18:09:7d:cb:53:5b:b1:fc:59:3c:c2:4b:f4:
be:11:19:69:23:c8:64:32:6b:85:9e:12:19:27:4c:
3b:d8:c7:b9:9c:d5:50:3b:cb:88:f3:b5:9d:ac:7a:
5d:64:31:a1:43:aa:8a:a9:73:ac:66:a9:91:2a:ff:
db:a9:18:85:ed:a9:4c:cb:5e:53:c5:5d:c9:be:36:
5b:37:35:f1:6c:e8:7e:e8:dd:45:29:40:ec:d0:ab:
20:cf:f2:6e:11:89:92:96:5c:54:71:08:2f:67:ea:
a2:d4:ac:25:a8:9a:4f:99:bf:68:f1:6b:2f:b7:55:
62:82:27:4e:92:b1:ac:e9:f4:7d:a7:8b:cb:dc:2f:
f1:90:65:ce:ed:d6:03:d5:3d:a0:2f:4e:25:cd:c2:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:D0:6A:7F:E6:9D:FB:84:E3:13:3E:79:FE:9F:CE:84:C5:33:36
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131362e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.116.0/22
Signature Algorithm: sha256WithRSAEncryption
85:25:00:6c:d2:2f:1e:ad:4b:a0:70:94:22:45:01:3c:79:32:
18:c3:f1:a2:c6:7a:75:58:9b:4f:23:d5:f1:25:71:96:9e:1f:
36:9c:9e:bc:16:9b:24:30:0d:ca:88:e0:43:9c:04:be:74:1a:
1a:e1:a1:53:6f:3a:9a:d7:12:7b:c4:38:62:5a:d7:34:7e:32:
40:aa:f0:aa:63:50:2e:77:fe:ef:5f:14:c5:ad:12:0e:49:79:
0a:e1:c7:e8:86:bc:33:3c:90:ad:26:70:40:51:1e:f5:8f:e4:
a6:e8:0f:e4:58:32:90:b8:ec:c4:c8:6a:05:3d:ea:6b:f2:42:
19:c6:50:fe:a7:63:fd:eb:48:e1:b6:1c:c2:be:70:88:7f:fb:
89:8a:a5:d5:09:08:b0:46:2c:72:34:b2:76:3e:bd:c0:46:e9:
50:3b:1c:08:39:bd:41:7c:06:3f:70:f0:17:dd:c2:13:6a:72:
f8:b1:95:55:98:89:02:3b:cb:77:b7:5f:3c:13:2d:9a:1a:e9:
bc:93:60:58:1b:c7:7d:8a:38:d9:b7:ff:3e:b2:ca:9a:03:e4:
a5:04:f6:23:33:42:a1:1b:c0:18:d4:73:fb:82:46:05:ee:ff:
bb:05:c9:ae:52:ec:9d:92:89:4c:a8:a8:50:88:af:fd:c5:ed:
ac:e0:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org