Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139302e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e3139302e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: vzLzlK65pAYQ9geJmCk0XdxEyhkAQGoSXTftrMrRyi0=
Subject key identifier: 1F:83:60:2E:FF:D8:51:72:40:E3:25:CB:02:AD:68:B2:0D:6D:AC:59
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6D7F03828CED44A413043802B174962846E1F2CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139302e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:00 +0000
ROA not before: Sat 05 Mar 2022 20:55:00 +0000
ROA not after: Sat 04 Mar 2023 21:00:00 +0000
asID: 133800
IP address blocks: 103.150.190.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7f:03:82:8c:ed:44:a4:13:04:38:02:b1:74:96:28:46:e1:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:00 2022 GMT
Not After : Mar 4 21:00:00 2023 GMT
Subject: CN=1F83602EFFD8517240E325CB02AD68B20D6DAC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:32:23:b2:3f:90:39:cd:06:47:3b:45:a5:
c3:63:61:83:bd:4d:f0:fb:3f:12:1e:11:5a:34:3e:
cd:63:fb:9c:78:05:36:47:d9:0a:f5:8c:f2:a7:6c:
4d:c7:a7:71:86:1b:e0:63:2f:b7:d9:b3:4f:a3:82:
3a:03:ef:70:b5:34:f2:8b:f5:a3:48:6d:7f:a1:7a:
c3:f5:a1:e3:5e:78:c1:22:5d:eb:e6:d7:56:10:e1:
6a:6a:43:34:73:f7:ce:94:f4:13:c6:db:94:c4:5c:
64:88:0e:d4:18:cc:79:2a:8f:0d:14:6b:20:0c:ad:
5f:94:35:1e:f8:10:94:b1:1c:42:0c:79:58:12:ab:
b2:5e:08:e6:00:91:7f:8d:d0:96:3a:c5:ed:45:e7:
8e:9f:d7:a6:7d:99:a5:85:dc:32:a5:2b:77:9a:f7:
66:8a:44:24:ec:af:a5:8f:12:f7:c4:36:6f:5f:5f:
3c:aa:6f:f5:6c:aa:01:b5:b2:c6:1c:22:f1:36:9e:
48:d5:7e:9e:da:34:d8:1f:ff:1a:c7:76:dd:57:db:
29:64:25:c9:61:db:cc:cf:61:25:b0:59:df:ab:d3:
ee:1c:e7:66:88:78:ca:f2:59:9f:92:9d:d7:48:1e:
1e:b4:b5:e1:47:5a:38:85:2b:74:d7:42:b3:fa:93:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:60:2E:FF:D8:51:72:40:E3:25:CB:02:AD:68:B2:0D:6D:AC:59
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139302e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.190.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:dd:ae:38:4d:58:dc:0c:5d:8b:5e:f3:b9:b0:da:e9:17:17:
9d:6d:36:94:9d:4d:9c:c1:90:8c:9b:7f:a9:42:c1:e2:54:1a:
f9:e6:9e:88:99:33:c2:5f:7b:d8:92:39:06:a7:ad:90:de:31:
d7:db:1e:65:44:32:b3:c3:9b:5a:94:61:58:8e:70:f7:0f:ba:
3a:95:d8:05:c9:f0:5f:a7:e8:52:3b:a8:68:de:b3:ff:d9:8c:
c9:0f:6e:77:a7:7f:2d:01:2d:5a:5c:9d:d3:a8:24:12:b5:84:
a0:ef:c9:67:77:7a:1e:1b:b0:ec:24:e9:23:60:2f:c9:9f:63:
c4:6c:24:a7:d6:e7:46:58:a8:a1:59:2a:1e:a4:6b:2b:71:ec:
ee:70:14:b1:30:05:1d:d7:a7:5c:29:bf:92:c6:e5:65:c6:77:
98:c8:6f:e5:1b:96:da:db:5a:33:53:1b:4a:36:f6:58:9d:58:
40:6f:85:2b:21:2f:94:ec:c6:8f:f6:12:06:46:1b:5b:83:18:
db:f6:cb:b9:19:97:0c:4e:64:77:df:e0:a3:75:d1:14:5a:e2:
74:c6:fd:36:a0:39:70:83:93:27:3d:f1:de:9c:f0:50:60:38:
6e:c8:a0:37:88:cc:6c:ba:b7:6e:85:07:93:d2:b6:99:b1:82:
1a:33:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org