Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131362e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e3131362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 8wgULFY/qXI5DFEu9MB8D9i/rrl59m+pFZXurxLOJ/M=
Subject key identifier: CA:A9:1C:C5:5D:B6:8C:76:25:1D:F4:7E:EA:6C:27:96:1D:C6:95:AB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4CEA27ED8FCF9216089AA65825DBE9B45160B985
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131362e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:01 +0000
ROA not before: Sat 05 Mar 2022 20:55:01 +0000
ROA not after: Sat 04 Mar 2023 21:00:01 +0000
asID: 133800
IP address blocks: 103.150.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ea:27:ed:8f:cf:92:16:08:9a:a6:58:25:db:e9:b4:51:60:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:01 2022 GMT
Not After : Mar 4 21:00:01 2023 GMT
Subject: CN=CAA91CC55DB68C76251DF47EEA6C27961DC695AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:ae:d6:14:0f:1f:65:a8:e7:ee:57:8c:77:
7f:91:06:cf:e2:be:a9:6f:fe:5f:95:4f:3d:8b:2f:
d3:33:fa:3f:6f:12:c4:6e:d2:da:bf:04:b0:90:b7:
ea:3d:19:50:e4:44:e0:bb:11:b3:78:1a:3d:fa:b7:
85:9b:46:99:f7:48:75:6d:5d:7f:4c:5d:a8:11:f6:
ee:f5:0c:8d:1f:57:e5:90:ce:f7:1d:64:d8:6e:4b:
4d:ce:1d:6b:ba:a3:47:42:f8:e4:1f:9d:1c:fc:38:
e3:38:34:a8:d5:b2:e8:a6:6d:c8:9a:49:aa:83:ea:
98:2a:1a:b2:40:39:ae:3b:5e:a3:21:ad:ea:e6:6d:
8c:88:b9:af:58:38:c9:9f:19:6d:e7:95:16:fe:5a:
a6:04:2a:38:93:d0:17:89:f0:fd:af:94:69:94:7e:
85:e4:7d:dd:99:68:03:27:21:bd:88:ef:c7:ff:d6:
f7:4a:31:99:0b:80:c4:49:69:5d:a3:74:90:e2:ad:
af:42:7b:16:5e:d6:4a:6e:f1:da:f2:e4:88:c9:db:
dd:f9:7a:2c:be:b4:ab:50:a8:d7:83:42:31:0e:b9:
79:20:6f:12:46:3f:ad:e4:a3:14:22:e7:1d:b0:ec:
bc:b6:8a:51:9d:dc:e2:1c:c6:f1:fb:0d:5c:7b:fa:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:1C:C5:5D:B6:8C:76:25:1D:F4:7E:EA:6C:27:96:1D:C6:95:AB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.116.0/23
Signature Algorithm: sha256WithRSAEncryption
09:a8:c6:a5:20:f5:05:f0:d2:c3:2b:e0:f9:61:40:53:56:59:
0e:05:27:a5:c9:ea:67:da:63:79:ca:12:90:47:44:73:32:d6:
0d:8f:1b:18:67:03:66:ed:09:a7:91:32:f8:c9:65:10:92:97:
fa:0c:91:1b:ed:31:54:49:e4:b6:b8:9b:9d:6d:0f:3b:00:0f:
e4:6a:65:0e:fc:4a:a1:9f:19:ec:27:d0:d6:34:08:a4:41:b2:
56:2e:cb:20:7a:63:23:8e:29:08:37:a2:20:65:d7:90:3b:9c:
06:01:86:43:3e:b3:55:2c:5d:ac:20:18:d4:5e:aa:56:86:ee:
a3:96:37:60:bd:4f:bd:a9:61:2c:5f:55:4e:2e:06:78:29:7d:
88:ab:95:84:5f:e0:23:0f:e5:a9:93:7d:dc:3e:68:32:69:cd:
0a:ca:00:e2:4d:7d:80:0a:e7:9b:d8:cd:be:23:ee:9a:97:47:
5a:fc:86:f5:1a:37:4a:d2:28:29:8c:3b:52:00:96:d9:b6:bb:
04:3d:4c:02:a4:21:03:f7:b5:ef:04:f5:12:d1:77:0d:13:1a:
24:1e:93:f7:13:36:b1:b8:f1:c4:0b:49:57:8b:54:4a:4a:23:
9e:ef:4e:e4:9b:a5:43:72:00:0f:76:e9:95:47:9f:31:4f:aa:
79:09:39:07
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTOon7Y/PkhYImqZYJdvptFFguYUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwNTIwNTUwMVoX
DTIzMDMwNDIxMDAwMVowMzExMC8GA1UEAxMoQ0FBOTFDQzU1REI2OEM3NjI1MURG
NDdFRUE2QzI3OTYxREM2OTVBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJVFrtYUDx9lqOfuV4x3f5EGz+K+qW/+X5VPPYsv0zP6P28SxG7S2r8EsJC3
6j0ZUORE4LsRs3gaPfq3hZtGmfdIdW1df0xdqBH27vUMjR9X5ZDO9x1k2G5LTc4d
a7qjR0L45B+dHPw44zg0qNWy6KZtyJpJqoPqmCoaskA5rjteoyGt6uZtjIi5r1g4
yZ8ZbeeVFv5apgQqOJPQF4nw/a+UaZR+heR93ZloAychvYjvx//W90oxmQuAxElp
XaN0kOKtr0J7Fl7WSm7x2vLkiMnb3fl6LL60q1Co14NCMQ65eSBvEkY/reSjFCLn
HbDsvLaKUZ3c4hzG8fsNXHv6iukCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTKqRzF
XbaMdiUd9H7qbCeWHcaVqzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUz
MTM1MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzAz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeWdDANBgkqhkiG9w0BAQsFAAOCAQEACajGpSD1BfDSwyvg
+WFAU1ZZDgUnpcnqZ9pjecoSkEdEczLWDY8bGGcDZu0Jp5Ey+MllEJKX+gyRG+0x
VEnktribnW0POwAP5GplDvxKoZ8Z7CfQ1jQIpEGyVi7LIHpjI44pCDeiIGXXkDuc
BgGGQz6zVSxdrCAY1F6qVobuo5Y3YL1PvalhLF9VTi4GeCl9iKuVhF/gIw/lqZN9
3D5oMmnNCsoA4k19gArnm9jNviPumpdHWvyG9Ro3StIoKYw7UgCW2ba7BD1MAqQh
A/e17wT1EtF3DRMaJB6T9xM2sbjxxAtJV4tUSkojnu9O5JulQ3IAD3bplUefMU+q
eQk5Bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org