Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e31362e302f32322d3234203d3e2030.roa
File: 3130332e3133332e31362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: sY5mJoXegT3wTK1Tm9jr9BDQ8uWbNrHeAYHrlFmi6GE=
Subject key identifier: 76:B3:1E:4A:93:AF:71:BA:9D:3C:1B:E3:53:88:C5:AA:A7:98:9A:F4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21573DA165C5408C3C709769F633AE2440067DB0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e31362e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:28:31 +0000
ROA not before: Wed 02 Feb 2022 06:23:31 +0000
ROA not after: Thu 02 Feb 2023 06:28:31 +0000
asID: 0
IP address blocks: 103.133.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:57:3d:a1:65:c5:40:8c:3c:70:97:69:f6:33:ae:24:40:06:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:23:31 2022 GMT
Not After : Feb 2 06:28:31 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:ba:0f:ed:51:2e:af:e9:84:d3:2e:2c:e7:
d0:18:7f:5f:e6:f8:3b:8d:32:42:72:36:35:20:62:
ca:a3:06:f1:a0:58:22:31:12:a6:6f:7d:8d:13:60:
70:be:df:d6:60:c7:f6:ae:46:de:6c:be:d0:60:b1:
4a:fe:69:01:63:4f:14:a1:f3:4e:4a:ba:66:3b:d6:
4c:fa:e1:b0:61:a0:de:1b:a8:0d:7b:47:e8:5a:21:
9e:fa:08:b5:da:6a:9a:2e:2c:94:ba:c2:e3:47:ab:
76:82:49:31:22:62:cf:7d:2c:36:33:49:05:d9:3d:
7b:aa:79:f3:8f:6b:01:02:fd:78:d7:75:4a:d3:66:
38:df:e8:ca:f3:40:ea:5e:92:33:e2:7b:4e:06:d3:
0b:5d:31:7a:21:56:76:15:f5:50:b0:32:f0:99:7c:
f8:04:78:96:ee:42:89:d4:6e:9d:09:aa:a0:98:ec:
80:d6:09:2f:d8:64:c3:29:0e:b6:7e:73:97:a2:76:
cd:cd:19:f5:52:33:0b:bd:a4:67:d8:31:89:29:b4:
d5:bd:61:f4:f4:25:85:cc:1a:6b:dc:09:fa:7b:eb:
cd:e4:91:d8:9b:10:8d:90:24:fa:dd:88:e7:af:8a:
99:d4:28:5d:eb:09:a0:9c:10:c6:5a:52:e2:27:90:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:1E:4A:93:AF:71:BA:9D:3C:1B:E3:53:88:C5:AA:A7:98:9A:F4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e31362e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.16.0/22
Signature Algorithm: sha256WithRSAEncryption
25:cf:19:f2:5a:08:27:d6:a7:db:af:c3:9e:1e:ec:12:ef:b7:
05:56:2c:ca:17:fa:55:9d:ff:dd:68:6f:19:c2:d6:fa:ef:b1:
cb:8a:2d:46:ff:7c:50:c5:ce:7a:a0:04:2f:ae:db:d8:f1:c5:
a3:ab:c4:62:b5:5b:a2:a6:5f:5d:f0:79:e4:b4:3c:57:73:7d:
32:fd:4b:2c:39:f1:a9:e5:7e:a4:f3:72:29:ac:3f:8d:80:20:
e9:64:66:51:4a:21:7b:0b:14:32:70:d4:aa:54:a9:14:5d:96:
7b:f9:65:f3:3e:57:53:fb:8b:f2:ed:92:6c:d3:ca:af:c8:bd:
e1:ae:d6:67:c6:57:89:96:9e:7d:23:3d:12:34:a7:f7:c0:45:
a8:0a:ec:58:70:05:e7:69:0c:5f:6d:39:82:f6:6a:51:52:60:
ee:f7:0f:82:2a:70:2e:56:e4:0f:90:89:19:fe:02:47:f1:94:
43:80:01:af:d7:83:e0:21:a3:c6:0f:35:32:77:45:fa:0a:35:
48:05:04:5e:ff:44:7c:e5:38:90:28:c1:00:4a:03:d1:ba:ce:
ee:b7:7a:ef:29:ac:90:2a:c1:e4:69:f6:85:a4:06:01:2c:7b:
12:1e:58:f2:5c:e6:69:78:95:05:b4:f9:ba:2a:5f:b3:d7:9a:
05:57:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org