Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e39372e302f32342d3234203d3e2030.roa
File: 3130332e3133382e39372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: tdEdXpwpP3ixrp72fMDWGjdZvwqSEroXWeWqdOGR7FE=
Subject key identifier: C8:DB:73:B1:74:3C:F6:FD:F3:D6:2A:EA:AA:98:1E:56:FB:BF:A5:8B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2ED21326603755744987CB3A1C9F312D1BD2B9AF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e39372e302f32342d3234203d3e2030.roa
Signing time: Tue 09 Nov 2021 04:38:17 +0000
ROA not before: Tue 09 Nov 2021 04:33:17 +0000
ROA not after: Wed 09 Nov 2022 04:38:17 +0000
asID: 0
IP address blocks: 103.138.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d2:13:26:60:37:55:74:49:87:cb:3a:1c:9f:31:2d:1b:d2:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 9 04:33:17 2021 GMT
Not After : Nov 9 04:38:17 2022 GMT
Subject: CN=3082010A0282010100DB720F67F9A05FA3C9E3651CBA43AD400FCBA0D76007B3A78E706C75766E3FEF8CC64DDE74D1579393DC59D40BA4B806B83F719A4ECEE01BF59FABE60E974000AC5903F62305BEE261B702752116423600FDE3622FD7DD694C074DE87302AB590B85320FD5F40C35CA1121CD5F4F1051744BCADE9600ABA821E3346152C91957FCD1B131A47793A408AB286B870911DAC7E3A6E888864093D6CEECF82752437AE54E91877FEC0C6400969EDA3A86EAF2563362090AEBD4FF2904C5FBB85D185C43764399638567CE63A5A4E2490D426CFCB9DEDBA940535919436AD500FE572BEC7AB6CA202E95F74AC7D662E94931C54B3B06F4457EC087E4BD5024935AFAFD0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:0f:67:f9:a0:5f:a3:c9:e3:65:1c:ba:43:
ad:40:0f:cb:a0:d7:60:07:b3:a7:8e:70:6c:75:76:
6e:3f:ef:8c:c6:4d:de:74:d1:57:93:93:dc:59:d4:
0b:a4:b8:06:b8:3f:71:9a:4e:ce:e0:1b:f5:9f:ab:
e6:0e:97:40:00:ac:59:03:f6:23:05:be:e2:61:b7:
02:75:21:16:42:36:00:fd:e3:62:2f:d7:dd:69:4c:
07:4d:e8:73:02:ab:59:0b:85:32:0f:d5:f4:0c:35:
ca:11:21:cd:5f:4f:10:51:74:4b:ca:de:96:00:ab:
a8:21:e3:34:61:52:c9:19:57:fc:d1:b1:31:a4:77:
93:a4:08:ab:28:6b:87:09:11:da:c7:e3:a6:e8:88:
86:40:93:d6:ce:ec:f8:27:52:43:7a:e5:4e:91:87:
7f:ec:0c:64:00:96:9e:da:3a:86:ea:f2:56:33:62:
09:0a:eb:d4:ff:29:04:c5:fb:b8:5d:18:5c:43:76:
43:99:63:85:67:ce:63:a5:a4:e2:49:0d:42:6c:fc:
b9:de:db:a9:40:53:59:19:43:6a:d5:00:fe:57:2b:
ec:7a:b6:ca:20:2e:95:f7:4a:c7:d6:62:e9:49:31:
c5:4b:3b:06:f4:45:7e:c0:87:e4:bd:50:24:93:5a:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:73:B1:74:3C:F6:FD:F3:D6:2A:EA:AA:98:1E:56:FB:BF:A5:8B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e39372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:db:a4:e8:35:f3:ad:ae:e4:43:af:a1:39:47:c7:f2:60:44:
0e:ea:3a:00:f8:17:67:53:22:d0:b1:34:61:9e:20:bc:87:b5:
23:5d:d4:99:5e:18:73:c8:56:04:d6:05:e4:f2:e9:61:b0:03:
97:68:bf:c2:93:06:9c:c9:fa:38:ff:21:29:49:0b:72:92:e3:
1a:ff:a5:f2:83:e8:6b:55:21:96:ef:23:f0:0d:3b:d5:50:a0:
93:af:be:7e:51:01:61:67:9f:0b:68:6a:25:7a:66:db:2a:32:
28:5c:ce:f1:4b:d8:e0:cc:d2:4c:00:0a:8c:da:f1:11:bc:3c:
42:25:0e:df:5c:d4:8e:2d:e5:b8:3e:2d:a9:05:bb:74:79:62:
4a:03:d1:ec:96:4a:61:87:b2:43:eb:ef:d5:d1:11:88:c5:d0:
2a:de:60:3f:31:3b:95:6a:04:eb:00:7f:9b:8d:36:3b:98:c7:
3f:62:f5:1c:5b:63:da:f4:97:96:27:ab:f0:06:be:cc:91:3d:
8c:01:57:25:37:aa:8b:6f:1c:c4:1b:08:1d:f2:11:19:55:d4:
b9:39:14:ec:2a:ad:cb:ca:6a:b4:03:b0:42:83:79:52:ce:1b:
da:67:aa:dc:58:da:6e:a0:56:cb:ce:7f:70:34:f7:b6:37:e0:
9c:86:70:40
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIULtITJmA3VXRJh8s6HJ8xLRvSua8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwOTA0MzMxN1oX
DTIyMTEwOTA0MzgxN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQjcyMEY2N0Y5QTA1RkEzQzlFMzY1MUNCQTQzQUQ0MDBGQ0JBMEQ3NjAw
N0IzQTc4RTcwNkM3NTc2NkUzRkVGOENDNjREREU3NEQxNTc5MzkzREM1OUQ0MEJB
NEI4MDZCODNGNzE5QTRFQ0VFMDFCRjU5RkFCRTYwRTk3NDAwMEFDNTkwM0Y2MjMw
NUJFRTI2MUI3MDI3NTIxMTY0MjM2MDBGREUzNjIyRkQ3REQ2OTRDMDc0REU4NzMw
MkFCNTkwQjg1MzIwRkQ1RjQwQzM1Q0ExMTIxQ0Q1RjRGMTA1MTc0NEJDQURFOTYw
MEFCQTgyMUUzMzQ2MTUyQzkxOTU3RkNEMUIxMzFBNDc3OTNBNDA4QUIyODZCODcw
OTExREFDN0UzQTZFODg4ODY0MDkzRDZDRUVDRjgyNzUyNDM3QUU1NEU5MTg3N0ZF
QzBDNjQwMDk2OUVEQTNBODZFQUYyNTYzMzYyMDkwQUVCRDRGRjI5MDRDNUZCQjg1
RDE4NUM0Mzc2NDM5OTYzODU2N0NFNjNBNUE0RTI0OTBENDI2Q0ZDQjlERURCQTk0
MDUzNTkxOTQzNkFENTAwRkU1NzJCRUM3QUI2Q0EyMDJFOTVGNzRBQzdENjYyRTk0
OTMxQzU0QjNCMDZGNDQ1N0VDMDg3RTRCRDUwMjQ5MzVBRkFGRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcg9n+aBfo8njZRy6Q61A
D8ug12AHs6eOcGx1dm4/74zGTd500VeTk9xZ1AukuAa4P3GaTs7gG/Wfq+YOl0AA
rFkD9iMFvuJhtwJ1IRZCNgD942Iv191pTAdN6HMCq1kLhTIP1fQMNcoRIc1fTxBR
dEvK3pYAq6gh4zRhUskZV/zRsTGkd5OkCKsoa4cJEdrH46boiIZAk9bO7PgnUkN6
5U6Rh3/sDGQAlp7aOobq8lYzYgkK69T/KQTF+7hdGFxDdkOZY4VnzmOlpOJJDUJs
/Lne26lAU1kZQ2rVAP5XK+x6tsogLpX3SsfWYulJMcVLOwb0RX7Ah+S9UCSTWvr9
AgMBAAGjggH2MIIB8jAdBgNVHQ4EFgQUyNtzsXQ89v3z1irqqpgeVvu/pYswHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB6BggrBgEF
BQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMzMzgyZTM5MzcyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeKYTANBgkqhkiG9w0BAQsFAAOC
AQEAPtuk6DXzra7kQ6+hOUfH8mBEDuo6APgXZ1Mi0LE0YZ4gvIe1I13UmV4Yc8hW
BNYF5PLpYbADl2i/wpMGnMn6OP8hKUkLcpLjGv+l8oPoa1Uhlu8j8A071VCgk6++
flEBYWefC2hqJXpm2yoyKFzO8UvY4MzSTAAKjNrxEbw8QiUO31zUji3luD4tqQW7
dHliSgPR7JZKYYeyQ+vv1dERiMXQKt5gPzE7lWoE6wB/m402O5jHP2L1HFtj2vSX
lier8Aa+zJE9jAFXJTeqi28cxBsIHfIRGVXUuTkU7Cqty8pqtAOwQoN5Us4b2meq
3FjabqBWy85/cDT3tjfgnIZwQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org