Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230382e302f32322d3234203d3e2030.roa
File: 3130332e3132352e3230382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: Q6nv4jTzFMTHN73bYZMeGqDpCFa1B6eV0L3Rdk20O6k=
Subject key identifier: 20:82:E1:9D:E3:08:82:5F:54:35:C6:DF:FF:3F:FB:A0:39:E0:1A:71
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5239C633BA3B804250D9D3A0034DA39460768A3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230382e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:24:29 +0000
ROA not before: Wed 02 Feb 2022 06:19:29 +0000
ROA not after: Thu 02 Feb 2023 06:24:29 +0000
asID: 0
IP address blocks: 103.125.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:39:c6:33:ba:3b:80:42:50:d9:d3:a0:03:4d:a3:94:60:76:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:19:29 2022 GMT
Not After : Feb 2 06:24:29 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:ea:ad:61:61:49:45:f3:c3:f1:b0:51:24:
c1:2b:51:4e:c2:93:3d:62:16:6e:de:e2:4f:0f:9d:
52:18:f6:07:24:1d:c4:c4:16:99:bd:a9:9e:17:22:
0b:cd:7a:89:0b:ff:76:c4:44:1f:c6:3d:ce:b4:be:
3f:70:f1:ad:27:07:c6:42:5c:ad:93:70:04:5d:5b:
34:60:01:6f:51:80:98:61:80:02:b7:d3:08:35:41:
dd:52:5a:27:42:7a:79:00:99:34:24:c1:55:6a:82:
24:b6:07:db:78:c1:a9:72:0e:ce:2f:b2:a9:a7:3a:
b7:fa:06:d7:8e:b4:1a:e0:b2:02:e2:15:24:d7:29:
55:3d:9a:a7:14:fd:e7:85:03:30:25:a4:f2:1a:a2:
8d:e0:bd:8b:0b:23:fa:bc:8a:27:0d:24:70:d0:ea:
8c:ab:95:fd:32:84:07:7f:42:13:f2:9c:80:4d:aa:
10:61:b7:6b:e4:28:92:c9:67:15:1b:7d:f7:50:16:
94:88:e6:5a:77:58:ae:50:7a:be:41:5b:38:2c:88:
23:62:6b:c9:a2:02:02:8f:37:30:3b:36:ee:b6:94:
a8:64:81:ca:a8:b1:99:d6:48:38:47:c0:4f:0c:15:
55:a6:d0:38:98:04:1c:e7:e5:1a:74:7a:a2:a3:e7:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:E1:9D:E3:08:82:5F:54:35:C6:DF:FF:3F:FB:A0:39:E0:1A:71
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.208.0/22
Signature Algorithm: sha256WithRSAEncryption
95:be:a0:6c:24:a5:89:22:1c:72:fa:8b:08:48:82:02:c3:7d:
52:dc:1a:5d:01:e4:ab:e6:c0:fe:2f:8a:6c:d1:97:a4:4d:ff:
37:05:22:16:1d:6a:a6:d1:72:19:6a:20:be:be:d7:d9:31:97:
6d:c4:db:0d:60:ba:63:70:16:02:73:53:f1:c1:aa:63:a3:70:
e5:70:45:a3:f4:ca:d0:09:36:c1:23:03:46:88:fb:a1:fe:26:
79:b6:c0:07:68:f3:eb:38:f7:dc:14:58:72:54:d0:ee:cf:6a:
ba:ed:a2:1d:46:24:32:b4:da:16:c3:3e:35:77:83:8e:04:96:
57:18:46:06:12:13:4f:78:bd:04:5a:42:b4:f8:69:a0:f4:5d:
ed:a2:42:8f:2f:1a:fb:39:5d:e7:c2:d8:50:60:83:e7:8f:37:
29:30:4d:98:64:14:0d:94:0c:e5:6c:fa:5b:34:37:a2:6a:fc:
e8:80:a1:c6:2c:bf:8d:e9:3d:68:2b:0f:89:25:66:ca:8b:fb:
84:00:4f:b0:21:9a:22:5f:62:3f:8d:38:ac:38:fc:e8:89:4c:
b2:c9:96:e9:04:2e:bd:2b:37:08:e1:c3:82:40:ba:b4:de:a9:
da:55:a0:60:8a:dd:67:cb:60:ec:f5:12:35:14:1f:38:38:7a:
a5:22:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org