Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31322e302f32322d3234203d3e2030.roa
File: 3130332e3132372e31322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: f8qNMn+pX02gWkmoMdtPtN6JiXe2tjQix/FCVyay9+g=
Subject key identifier: 8B:CC:80:B5:EE:DC:D5:F2:29:ED:D0:D0:B0:F1:5C:10:02:3E:C5:67
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5D6453B76833C3D29070169C8E3B596CC8B59C99
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31322e302f32322d3234203d3e2030.roa
Signing time: Thu 06 Jan 2022 05:40:07 +0000
ROA not before: Thu 06 Jan 2022 05:35:07 +0000
ROA not after: Fri 06 Jan 2023 05:40:07 +0000
asID: 0
IP address blocks: 103.127.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:64:53:b7:68:33:c3:d2:90:70:16:9c:8e:3b:59:6c:c8:b5:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 6 05:35:07 2022 GMT
Not After : Jan 6 05:40:07 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:36:e7:86:3b:81:5c:5a:cf:f0:b6:00:1c:
0f:72:6a:fb:d6:42:46:35:a4:4d:4d:e4:0a:f6:0c:
52:45:ea:dd:24:52:29:4c:4d:b2:66:0f:30:21:90:
2e:81:24:ab:d9:3a:9a:aa:0e:86:ed:74:10:aa:60:
02:2e:7e:17:83:e1:42:48:8e:6a:6e:76:dd:4a:57:
4f:44:52:7f:1f:28:b0:8b:92:84:c3:cd:58:59:d9:
9e:eb:dc:48:37:7a:66:c7:f0:29:f9:c2:9e:e4:21:
d9:bb:4e:9b:18:a0:fa:b2:cd:41:d6:c7:80:4d:73:
d1:1c:d4:b9:33:dd:e8:2b:83:62:da:23:40:2e:a0:
e4:6d:69:0f:d2:13:cc:8c:63:d5:3b:f2:4f:ba:ab:
2c:07:cf:22:cc:d2:25:69:88:09:de:98:17:8c:8c:
a2:a7:f7:95:55:bf:f6:e1:f3:89:93:6a:26:49:81:
9e:f7:08:9b:86:9a:bd:a4:ee:5a:83:8a:62:b4:ce:
15:9b:5c:76:5f:d0:ae:0a:18:0a:b2:a5:67:10:be:
a4:6d:fb:45:1b:02:5b:8f:b0:c0:99:ab:87:45:a8:
05:28:f5:a6:82:ec:31:5d:ee:fd:4b:04:f0:a6:be:
3b:17:47:35:c6:c0:6a:d6:81:48:d0:54:56:3e:7c:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:80:B5:EE:DC:D5:F2:29:ED:D0:D0:B0:F1:5C:10:02:3E:C5:67
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:1f:b8:0d:7c:34:ae:14:fc:8b:70:f9:de:f1:40:e7:01:fd:
b5:83:c7:44:8f:e4:1a:35:8c:e3:1c:a6:f7:22:20:27:51:20:
8d:5b:a2:b8:70:9d:30:15:8c:74:37:17:84:09:4a:79:4f:70:
b4:90:2f:0e:3b:97:1a:16:79:ae:ff:bf:57:1d:f2:d6:93:ef:
9d:62:7a:8c:76:dd:5d:10:34:d2:ef:03:e6:0e:ee:4b:f9:35:
4f:db:6d:ab:46:18:cd:79:83:c5:f7:63:b9:84:5d:c6:3c:72:
e4:0b:1b:5a:da:32:db:6e:98:13:13:90:1f:6f:b9:53:cb:4e:
ef:f2:0f:2f:89:3e:98:49:02:b4:c0:53:37:5b:c4:4d:f3:e7:
95:35:e9:b2:75:41:32:97:c9:65:d8:32:ad:4e:42:ff:86:00:
90:e6:81:34:34:ce:93:4b:39:47:c0:99:6a:13:b3:58:a4:2f:
c0:89:20:6b:2c:6d:d0:73:90:4c:d0:a6:ca:c2:06:f5:c5:88:
82:9a:6d:c6:92:91:13:42:b1:00:95:fc:df:d5:38:11:c5:89:
70:d2:cb:be:85:b2:ab:05:08:db:c5:a9:e7:5d:f6:de:17:16:
71:9d:74:0f:69:35:f9:fb:68:38:c6:cc:81:bd:5a:36:85:ef:
c8:0c:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org