Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e38382e302f32322d3234203d3e2030.roa
File: 3130332e3132342e38382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: a8kklEE2Sd5EOJHgR6ApkSXfep3D4Wj1q9CVuaICf/0=
Subject key identifier: ED:DF:7F:F3:7E:DF:26:A7:47:44:67:48:D3:7B:FF:EC:95:23:31:DE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3DC3A11D25C7E3F05D6415AAA1046DB702F2E885
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e38382e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:28:11 +0000
ROA not before: Wed 02 Feb 2022 06:23:11 +0000
ROA not after: Thu 02 Feb 2023 06:28:11 +0000
asID: 0
IP address blocks: 103.124.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c3:a1:1d:25:c7:e3:f0:5d:64:15:aa:a1:04:6d:b7:02:f2:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:23:11 2022 GMT
Not After : Feb 2 06:28:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:6d:7f:3d:2f:7c:56:dd:b7:18:00:4f:8e:
6e:71:8c:f7:3a:94:2e:67:1b:23:1c:7d:95:4a:f5:
19:91:db:69:3e:14:ff:b8:0a:56:df:73:77:2b:b3:
2f:39:73:cc:14:de:3e:96:ec:a1:1c:48:b9:7d:a9:
8c:45:09:c2:ea:8d:a6:8a:a2:92:b0:d9:f5:7b:5d:
17:08:b9:dd:8c:01:8b:85:31:a9:4b:f8:03:40:50:
36:cd:f6:c2:85:7b:b8:1a:87:b9:60:ba:06:b0:49:
7d:39:fb:83:19:e8:f1:be:2f:e2:cc:9d:3a:fd:2f:
90:9f:05:25:97:71:d1:9a:09:6f:7c:54:73:e6:97:
2f:b1:d7:3e:a6:99:07:2a:3e:89:a1:2c:fd:74:f4:
74:7c:00:ef:ef:94:78:95:f4:4a:81:77:9d:16:01:
78:2d:bc:3f:a6:d4:8f:71:08:a2:01:31:7e:a6:9f:
f2:2c:c0:72:40:34:72:27:e8:8d:fc:b2:e3:ba:69:
8a:e2:d0:ba:d4:b6:b1:61:f0:a4:b9:9d:9f:2f:77:
e8:04:48:16:6d:35:fe:08:2f:2f:47:25:e7:6f:29:
aa:0b:4a:85:02:36:57:df:ab:0a:ea:76:8f:f6:78:
79:0d:17:f2:3c:73:15:db:75:22:d3:fa:89:ac:1f:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:7F:F3:7E:DF:26:A7:47:44:67:48:D3:7B:FF:EC:95:23:31:DE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e38382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:5d:57:48:d1:3a:94:0f:5e:c1:69:38:88:33:f3:5b:93:77:
a9:ea:41:96:9f:91:ac:b0:07:15:3e:e0:36:c5:53:53:22:66:
4d:63:b2:93:de:0a:1b:2b:81:93:ac:59:92:31:91:b5:f8:92:
b1:06:39:a8:2a:db:d4:b0:23:e2:ea:3d:db:c0:70:98:b6:ce:
44:fe:b9:bd:20:b9:47:78:9d:e8:0d:94:41:6e:4b:b4:38:bc:
50:bb:67:12:53:ba:98:9e:a1:29:9d:18:e5:4a:3d:1a:bd:5d:
53:eb:73:c3:a1:ad:2d:9a:22:e4:86:69:22:9f:6b:5f:7e:9f:
10:53:72:25:b4:72:49:64:a0:21:62:91:9a:37:ec:11:cb:bc:
27:38:fe:f3:37:ee:0e:1f:62:83:9f:a4:8d:56:bc:90:45:46:
a1:b3:10:5e:a0:d2:48:58:e9:77:61:c7:67:d8:2c:9d:a3:d8:
f5:55:07:eb:74:d3:c5:35:bb:f9:0d:b7:c5:3a:37:7a:aa:fe:
86:b4:ef:28:59:e9:c3:dc:97:4a:81:48:00:fb:63:f8:a6:71:
d5:0c:75:e5:34:53:ab:1e:1a:70:fb:9f:1a:2a:fe:38:59:c5:
9f:a2:9b:f0:aa:6b:b1:9a:00:ae:04:24:79:26:c0:4c:67:e7:
e4:2e:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org