Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e31362e302f32332d3234203d3e2030.roa
File: 3130332e3134342e31362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: CjTFzHHORsw89BneUWgGSBv4VAbDf7PiaSr/aqFkhbU=
Subject key identifier: 16:AE:C5:21:6E:3D:DE:A2:2B:4A:8F:EC:C1:01:93:7D:4B:67:57:EA
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 65484FF7AD915C66BAB61F571A3D525B0185FB73
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e31362e302f32332d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:22:17 +0000
ROA not before: Wed 02 Feb 2022 06:17:17 +0000
ROA not after: Thu 02 Feb 2023 06:22:17 +0000
asID: 0
IP address blocks: 103.144.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:48:4f:f7:ad:91:5c:66:ba:b6:1f:57:1a:3d:52:5b:01:85:fb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:17:17 2022 GMT
Not After : Feb 2 06:22:17 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:37:b3:10:75:e1:3f:09:12:bd:6c:4b:38:
c9:09:33:d6:bb:42:bc:d8:23:5f:1b:67:af:42:88:
da:a5:af:7c:38:91:e7:f5:07:a2:39:7d:3c:82:ec:
b7:8b:40:a5:0d:70:a9:84:ed:87:a8:0b:6e:5d:87:
31:fb:b9:2b:e4:4d:84:68:f4:dc:ca:b4:e6:66:2e:
5a:d8:8f:3e:e9:52:1c:b8:b6:1e:b1:51:8e:a4:ce:
2a:ca:98:b4:49:a4:b3:8b:cb:48:a8:e7:7a:d8:b9:
87:6f:3d:80:3a:a0:62:06:36:66:6b:95:42:38:4d:
8c:fc:b3:71:3f:36:31:02:91:73:50:da:06:cd:e9:
e8:9f:75:3d:ff:95:7d:8d:82:3a:3a:a8:49:f6:f8:
b0:c2:d3:4f:0c:9a:64:12:81:9f:b7:42:16:98:c8:
a7:d3:49:f1:07:13:0a:80:bb:83:d1:e0:68:32:64:
00:d4:85:f5:4f:22:7c:00:27:04:a9:68:de:2a:a1:
e9:76:6c:53:80:75:34:76:16:66:59:69:f8:93:bb:
fa:6b:3e:be:70:90:6b:e8:ea:d8:46:b9:50:b6:6e:
5e:fc:b8:ce:01:7d:9e:a6:f7:cb:de:1b:af:3f:db:
48:32:ae:dd:12:3a:93:a2:85:c5:0e:ee:84:03:46:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:C5:21:6E:3D:DE:A2:2B:4A:8F:EC:C1:01:93:7D:4B:67:57:EA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e31362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.16.0/23
Signature Algorithm: sha256WithRSAEncryption
86:b2:c4:0a:24:8b:11:3a:89:b5:70:ba:fe:e5:62:55:14:1b:
93:57:e9:99:fd:74:cd:48:b3:3b:77:0d:02:5b:56:3e:13:f9:
7e:a1:0a:b0:3b:19:2b:64:7e:1a:4c:cf:15:7b:ec:23:1a:25:
c9:ff:96:56:02:8a:18:98:8f:f0:cd:e3:df:06:fd:2e:db:56:
39:50:ee:5e:79:42:a0:bc:dc:ed:f9:61:84:c9:88:3e:88:37:
8d:25:1f:d1:76:82:60:69:3d:27:99:ba:b8:0e:21:71:ad:40:
e6:b0:db:cb:3e:e4:b1:29:90:02:a9:84:2c:3b:e1:47:56:f8:
3c:89:e5:6c:50:a6:b4:d2:e7:87:c3:7e:c8:84:d8:d0:0e:eb:
a2:62:16:3b:13:0d:21:34:62:ac:3a:f1:21:6c:d8:1e:50:17:
bb:18:05:6b:48:e2:90:c5:9a:65:36:bd:cc:e8:84:bd:0c:d0:
79:77:a5:2c:dd:f2:14:d9:cf:88:0f:c0:6f:2b:45:21:55:18:
90:57:af:54:36:ca:4d:c2:6e:c4:d8:11:dc:4c:98:c1:29:8c:
7c:bc:f6:04:e8:61:d7:db:55:fc:59:b4:77:42:1c:d3:d4:87:
f7:4b:7c:71:b4:3d:96:d6:1e:35:b4:46:03:9b:0e:c4:20:40:
8b:29:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org