Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139322e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e3139322e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: eR3p4cNleqA9qyBwQSGD839oE4266uJOLMQjBvOUPFk=
Subject key identifier: 05:55:9C:91:54:69:41:F8:32:D1:0F:79:F1:B6:7D:0A:C0:5E:22:F4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6A022552B902FACB0E0B15BFDAF25F42250DA1F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139322e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:01 +0000
ROA not before: Sat 05 Mar 2022 20:55:01 +0000
ROA not after: Sat 04 Mar 2023 21:00:01 +0000
asID: 133800
IP address blocks: 103.150.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:02:25:52:b9:02:fa:cb:0e:0b:15:bf:da:f2:5f:42:25:0d:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:01 2022 GMT
Not After : Mar 4 21:00:01 2023 GMT
Subject: CN=05559C91546941F832D10F79F1B67D0AC05E22F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:4f:5c:39:5f:39:f3:16:b3:df:38:3c:ce:
4e:13:42:d9:2e:1b:02:48:f8:d7:00:bd:3e:87:a1:
ab:c2:0b:49:9a:66:23:7a:c5:d8:cd:4e:bc:f7:35:
17:da:bb:25:4d:93:5f:33:7b:ae:1a:9a:91:df:7c:
7e:f2:5b:53:91:13:c0:7d:c2:d5:67:c7:cb:41:d8:
99:77:2b:a8:c6:ec:04:4c:98:19:6e:01:35:6d:51:
f0:95:83:7e:1d:2f:74:0c:26:9f:5b:79:6d:f0:a1:
04:c2:c4:86:f7:8c:a8:26:9c:f5:c9:b0:e2:43:6b:
fc:57:22:40:b3:20:29:df:a1:4d:fc:48:89:04:df:
3a:2e:8e:f9:b9:bc:f8:ed:dd:c8:7d:1b:32:30:e7:
22:7e:86:26:ee:ed:01:2d:7a:b2:3c:c2:b8:c3:f4:
9d:ca:5a:b9:da:0a:20:0a:7e:84:ef:21:7a:58:8b:
10:3b:8b:18:68:d4:51:de:a6:5a:eb:d2:65:fc:25:
db:cf:38:a3:69:2c:03:49:85:b2:53:9d:80:18:f7:
58:d0:fd:24:66:f2:54:d8:96:c6:93:2f:bb:18:72:
d5:62:25:88:ff:c5:a6:c0:3f:77:ca:ee:d6:47:a1:
af:a9:85:67:e9:72:14:42:eb:af:65:70:e9:1d:32:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:55:9C:91:54:69:41:F8:32:D1:0F:79:F1:B6:7D:0A:C0:5E:22:F4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139322e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.192.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:3f:67:3b:5f:ed:5a:a1:6d:cd:62:d5:0a:27:4b:0c:ac:9c:
9b:f6:48:fb:59:77:ad:11:fd:aa:a5:74:7e:b5:29:86:e9:c3:
80:c3:e3:b2:aa:8b:c1:6f:e5:7c:7f:5c:0c:b3:a2:7a:aa:cb:
bf:5a:f8:8c:16:04:50:70:fe:6c:b2:b9:5d:cd:6b:f5:0a:91:
80:78:0e:9d:0b:dd:cf:74:92:06:14:d0:60:8f:75:b1:bd:b7:
4e:35:36:7a:9f:e4:30:e9:31:05:65:dc:7a:2d:2a:7e:0c:46:
bd:ea:b6:69:86:bf:11:0b:ad:02:1c:96:c1:77:9a:2b:01:79:
44:d5:35:e4:3d:87:d4:c0:90:11:3c:07:c6:0d:64:ef:fe:62:
83:ac:5e:92:d2:04:19:1b:a1:8e:a9:70:5a:a1:f7:fb:4c:d9:
66:a9:79:9c:25:b1:b7:f6:97:e4:84:80:c5:62:53:ab:da:fc:
23:d9:75:95:03:b2:40:f3:f9:a2:59:bc:44:97:0d:0e:f7:fa:
31:5f:b9:19:a0:d8:dc:bb:b3:6e:60:ce:68:5b:d8:45:c2:fe:
2e:e7:99:ae:56:12:95:fb:6b:d0:ad:cb:fe:46:c4:3a:06:e7:
59:5f:68:38:8f:03:4e:9c:85:e3:6b:bd:49:aa:29:bb:7e:3d:
d3:94:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org