Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139362e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e3139362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: MunDA/gbjl65FhPG7tfZQYuXBIU4ORvxP/wKRDCKXXI=
Subject key identifier: 49:94:E4:01:6F:05:EF:5F:CD:7B:11:E6:D1:FA:55:C6:F6:1A:3E:A6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 34AB8CADF85F42EACB20259AD82D0AA7A9B4BAE6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139362e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:00 +0000
ROA not before: Sat 05 Mar 2022 20:55:00 +0000
ROA not after: Sat 04 Mar 2023 21:00:00 +0000
asID: 133800
IP address blocks: 103.150.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ab:8c:ad:f8:5f:42:ea:cb:20:25:9a:d8:2d:0a:a7:a9:b4:ba:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:00 2022 GMT
Not After : Mar 4 21:00:00 2023 GMT
Subject: CN=4994E4016F05EF5FCD7B11E6D1FA55C6F61A3EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:e3:41:90:a9:76:74:ee:01:4d:d8:33:91:
fa:8e:b2:61:35:50:d5:e0:89:e8:a8:0c:14:83:1a:
cd:b4:2b:8f:db:f2:1e:e1:49:30:69:dc:10:9d:65:
fe:08:74:65:d6:5b:34:22:05:6f:3f:0c:49:c4:1e:
35:43:6d:ee:cd:88:b5:d7:6a:29:d7:92:33:c1:cf:
5f:47:c2:48:54:99:c0:2b:85:21:77:55:82:29:e8:
43:c5:a5:80:3c:a2:8f:c0:16:3b:ea:ec:44:70:79:
07:9b:1e:fa:42:76:b5:08:f1:d6:a3:14:f3:c8:19:
2f:1a:31:a0:cc:ce:ea:5b:87:47:cb:54:7f:f2:c6:
92:58:75:5d:82:fc:e8:e5:53:c5:2b:8d:33:66:7a:
dd:ae:b9:99:ec:4d:9b:93:4f:28:bd:98:b1:d5:58:
98:67:5f:c5:09:32:39:8c:e2:b8:8e:1d:62:ec:ff:
b3:21:05:2a:3e:94:e1:73:eb:a2:70:4a:99:ca:27:
4f:fc:4b:66:dc:87:be:8e:22:f5:06:3f:0a:d7:3d:
df:bc:b4:a4:49:44:62:aa:da:cc:5e:f3:58:05:24:
d6:c0:9d:83:14:53:fb:ed:5d:66:31:5c:16:c6:56:
16:51:ea:cc:01:a9:58:e8:8b:10:2e:c1:a8:f4:f2:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:E4:01:6F:05:EF:5F:CD:7B:11:E6:D1:FA:55:C6:F6:1A:3E:A6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3139362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.196.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:da:fa:6a:70:86:50:3b:c6:c3:d4:78:60:4e:c2:d1:c2:c5:
67:5c:19:97:b6:79:56:05:0e:1f:79:b9:1a:b2:cd:0e:c6:a8:
33:a5:94:56:8b:50:cb:c9:7b:b9:e3:91:1d:35:44:97:1f:08:
e4:ae:1c:28:87:4c:7d:16:9e:a2:b8:15:56:43:18:92:bd:d9:
7a:89:6f:b5:5f:63:f0:c2:e1:a7:54:d3:65:5b:c4:f2:5c:4b:
c3:b2:32:23:ee:8f:71:e3:35:a1:ba:29:a1:8e:56:3b:7b:7d:
9e:ad:1e:11:de:26:de:7a:20:2e:6d:60:f5:7a:35:31:6c:04:
42:1f:4a:f5:6a:93:e6:1a:69:31:5f:3c:ee:d6:e2:10:73:9d:
66:a9:fb:ec:6d:62:c4:71:28:ac:10:50:9d:f7:8d:56:e8:20:
75:a1:4c:f5:f8:12:52:95:7d:cd:95:50:92:4c:01:81:ab:e0:
95:15:a9:c5:af:72:4d:1f:72:18:16:9d:58:db:51:f0:c9:3b:
e2:75:c1:37:e1:f7:d5:2b:d2:83:c1:13:99:c0:fe:84:a4:35:
43:b3:9f:31:f3:53:51:e4:96:ac:50:bf:c4:16:05:4c:ff:76:
05:3a:a2:ec:1f:9a:0d:8e:20:cd:93:50:19:13:7a:ed:94:3f:
1c:b2:d5:2e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUNKuMrfhfQurLICWa2C0Kp6m0uuYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwNTIwNTUwMFoX
DTIzMDMwNDIxMDAwMFowMzExMC8GA1UEAxMoNDk5NEU0MDE2RjA1RUY1RkNEN0Ix
MUU2RDFGQTU1QzZGNjFBM0VBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXR40GQqXZ07gFN2DOR+o6yYTVQ1eCJ6KgMFIMazbQrj9vyHuFJMGncEJ1l
/gh0ZdZbNCIFbz8MScQeNUNt7s2ItddqKdeSM8HPX0fCSFSZwCuFIXdVginoQ8Wl
gDyij8AWO+rsRHB5B5se+kJ2tQjx1qMU88gZLxoxoMzO6luHR8tUf/LGklh1XYL8
6OVTxSuNM2Z63a65mexNm5NPKL2YsdVYmGdfxQkyOYziuI4dYuz/syEFKj6U4XPr
onBKmconT/xLZtyHvo4i9QY/Ctc937y0pElEYqrazF7zWAUk1sCdgxRT++1dZjFc
FsZWFlHqzAGpWOiLEC7BqPTy3nkCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBRJlOQB
bwXvX817EebR+lXG9ho+pjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUz
MTM1MzAyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzAz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeWxDANBgkqhkiG9w0BAQsFAAOCAQEAftr6anCGUDvGw9R4
YE7C0cLFZ1wZl7Z5VgUOH3m5GrLNDsaoM6WUVotQy8l7ueORHTVElx8I5K4cKIdM
fRaeorgVVkMYkr3ZeolvtV9j8MLhp1TTZVvE8lxLw7IyI+6PceM1obopoY5WO3t9
nq0eEd4m3nogLm1g9Xo1MWwEQh9K9WqT5hppMV887tbiEHOdZqn77G1ixHEorBBQ
nfeNVuggdaFM9fgSUpV9zZVQkkwBgavglRWpxa9yTR9yGBadWNtR8Mk74nXBN+H3
1SvSg8ETmcD+hKQ1Q7OfMfNTUeSWrFC/xBYFTP92BTqi7B+aDY4gzZNQGRN67ZQ/
HLLVLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org