Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e2030.roa
File: 3130332e3132342e3232302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: 1RsXCWD/5gTglVSr55iLbgdu7mLihKWFf9vgxMQbSwo=
Subject key identifier: 7D:62:2A:45:6F:D3:98:14:ED:20:F8:D8:8C:7A:F5:ED:CF:2A:E3:E7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 37A4CD34873E1DB2441BEC74C228B069A3F0B73B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:24:04 +0000
ROA not before: Wed 02 Feb 2022 06:19:04 +0000
ROA not after: Thu 02 Feb 2023 06:24:04 +0000
asID: 0
IP address blocks: 103.124.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a4:cd:34:87:3e:1d:b2:44:1b:ec:74:c2:28:b0:69:a3:f0:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:19:04 2022 GMT
Not After : Feb 2 06:24:04 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:a1:14:54:55:af:be:07:82:cb:76:ea:db:
0d:25:09:42:27:bd:ac:9c:ef:db:b7:ce:1d:8a:f9:
10:b5:9a:25:22:08:48:65:f7:8b:19:39:94:a2:ae:
5e:5a:5b:df:52:66:ce:d0:83:e7:3e:14:de:13:a1:
f8:c7:ab:db:37:39:1b:f1:4d:17:7f:11:18:aa:54:
df:1e:e2:ce:ee:53:da:d6:e3:eb:dc:11:60:84:27:
73:68:e5:f9:a3:29:a8:b9:ec:a4:84:d3:6c:7b:65:
8a:f5:4c:80:cd:6a:88:95:de:27:5f:9b:9e:e7:3f:
c6:89:46:8e:9b:da:80:bc:69:5b:0c:27:67:c4:50:
42:fe:9b:30:71:b1:90:70:80:87:b8:d3:c8:5d:06:
31:43:dd:bb:83:3e:74:e8:00:8e:c2:e7:ce:e1:a9:
33:c9:be:cc:8d:80:0b:cb:d2:a5:57:95:28:3f:00:
e1:87:35:02:f7:4b:af:c8:14:e5:3a:ba:cc:9f:e2:
41:1d:91:4f:ed:47:d8:18:eb:43:8e:2b:0e:cd:f1:
41:7b:64:0b:40:94:6e:69:98:06:b3:48:a4:e1:25:
c4:61:81:de:3b:8b:25:6e:21:a6:c6:4c:d6:cc:87:
38:1a:62:ba:38:03:c9:53:df:aa:87:00:3e:c3:25:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:2A:45:6F:D3:98:14:ED:20:F8:D8:8C:7A:F5:ED:CF:2A:E3:E7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c9:3e:b1:1b:3f:27:83:4b:60:60:10:64:8a:ec:b1:eb:85:
fb:a2:8f:4d:6a:91:a5:4e:04:28:ee:4f:1e:e4:40:bd:5c:72:
1f:59:a4:4a:cb:9a:f9:f9:4e:53:7c:26:4c:03:64:ed:05:8c:
73:73:33:75:14:25:51:cf:af:0e:59:85:ee:9c:9d:fe:6c:36:
d3:bb:e8:ee:8c:9a:e3:25:d8:9b:bc:21:6c:6e:33:a3:ec:62:
a3:25:76:db:56:b8:ac:71:eb:d0:dd:a1:22:b3:66:5f:9d:25:
25:20:3a:6d:8e:b3:d4:bd:e0:1e:dc:8e:0b:d9:d6:eb:29:c3:
3f:16:83:cd:c2:b6:55:4c:94:a3:aa:af:f9:1d:d7:38:97:c5:
e2:41:bf:0a:9f:22:ff:cd:4c:48:9e:95:aa:eb:48:7e:0c:cf:
cc:f6:6f:78:8c:6a:1d:ce:c8:c4:00:e0:2c:24:93:b4:db:39:
d4:5a:24:de:6e:b3:2f:29:4a:32:80:12:c5:52:81:d9:6e:16:
6e:38:f9:0a:74:78:95:6a:b1:88:b8:5f:29:96:f4:75:57:bd:
52:ec:5a:5d:7e:11:56:ab:29:a5:06:fe:10:0d:0e:19:2f:80:
3a:57:90:46:fa:3c:0d:e5:1f:3f:35:75:11:9e:7c:37:07:a3:
fa:2b:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org