Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39322e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e39322e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 46okV/PdKDj82aDqWvlOkhNsEMTEKnz2HRszTlnIcPI=
Subject key identifier: 79:DB:CA:AA:D9:17:19:35:6D:58:F6:43:A1:27:1B:0E:F2:69:2C:1C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2B04A47F02931CE091EE9694B70E0554E469A0D1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39322e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:00 +0000
ROA not before: Sat 05 Mar 2022 20:55:00 +0000
ROA not after: Sat 04 Mar 2023 21:00:00 +0000
asID: 133800
IP address blocks: 103.150.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:04:a4:7f:02:93:1c:e0:91:ee:96:94:b7:0e:05:54:e4:69:a0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:00 2022 GMT
Not After : Mar 4 21:00:00 2023 GMT
Subject: CN=79DBCAAAD91719356D58F643A1271B0EF2692C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:62:97:0c:38:8e:b8:34:9e:86:fb:0d:02:
55:f6:5d:86:95:5b:19:64:f8:e8:6f:92:a9:2e:57:
5b:83:95:ad:63:35:07:63:6c:8b:c8:ac:1d:ee:96:
3f:77:94:4e:d7:c1:a0:9d:75:51:f0:50:b7:b6:41:
25:d5:b9:bd:d9:65:8d:fc:97:13:c8:d3:d1:2c:ef:
e2:5b:ee:e4:5f:83:5f:90:4d:c7:88:35:0b:ac:f8:
ec:47:70:74:be:53:66:03:54:f9:bf:2b:73:01:7a:
e8:a2:5a:62:10:e2:48:56:32:21:57:81:35:fb:b7:
47:bf:b5:f0:0f:fe:0f:cb:0a:15:60:63:e8:8e:9c:
7d:e0:56:d9:6b:1d:4f:6a:41:de:8e:0a:01:f3:f5:
af:55:f6:44:da:27:a9:70:0b:cf:30:64:e6:8c:49:
d5:2d:e2:b4:73:d0:8c:fb:d9:6b:81:3a:75:1a:42:
b1:87:10:58:42:9c:0a:af:31:c2:0b:11:a7:e8:14:
57:0f:40:e0:cb:94:52:9e:07:8c:68:7f:d7:ef:91:
95:cd:be:6b:94:43:cb:65:9d:d9:64:ce:6a:be:60:
ff:d2:4d:fe:2d:51:82:7a:98:85:16:91:c9:a1:92:
56:29:de:00:14:f7:ec:08:0b:bc:02:83:50:1b:2c:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:CA:AA:D9:17:19:35:6D:58:F6:43:A1:27:1B:0E:F2:69:2C:1C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39322e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.92.0/23
Signature Algorithm: sha256WithRSAEncryption
38:78:eb:f6:e5:aa:2e:4e:a9:6b:f6:5d:69:05:0d:6a:af:6f:
e4:28:79:e2:76:8e:a9:74:4b:71:4f:bb:72:09:82:dc:a3:7f:
66:cf:3f:29:25:e6:fe:b1:a3:05:d5:c6:76:4a:b4:af:4e:27:
11:dd:83:b2:09:31:b9:d9:00:6e:c0:a3:02:54:e1:5c:e1:ba:
a8:92:f5:34:65:5e:a9:a2:c9:d1:9c:c0:33:0e:86:63:b9:c6:
ae:a1:77:0c:82:2a:2b:05:53:a1:95:e8:35:3a:65:f5:47:6e:
15:1a:e6:94:28:67:16:47:65:6c:f0:b6:9c:19:b1:58:ab:81:
4b:33:73:a4:c6:66:da:d8:04:95:9f:42:d1:2f:58:5f:37:d0:
9d:1e:d9:7c:e2:04:ff:87:02:31:48:ba:19:37:ef:2f:55:16:
18:69:c1:6e:f7:1e:cb:80:0c:69:62:e8:85:b6:f6:2a:46:9a:
7a:94:70:59:15:90:2c:8f:55:24:90:02:79:7b:df:cf:ef:02:
32:93:3a:d0:c6:18:b2:2f:d5:4f:88:ff:74:da:19:9c:c8:a0:
7c:30:4d:0e:65:76:24:78:c7:38:2a:0b:7a:15:34:35:fa:db:
e5:b7:ce:cf:30:2f:e9:60:e0:32:38:3e:8b:b9:36:11:3a:0f:
fc:d2:60:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUKwSkfwKTHOCR7paUtw4FVORpoNEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwNTIwNTUwMFoX
DTIzMDMwNDIxMDAwMFowMzExMC8GA1UEAxMoNzlEQkNBQUFEOTE3MTkzNTZENThG
NjQzQTEyNzFCMEVGMjY5MkMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRRYpcMOI64NJ6G+w0CVfZdhpVbGWT46G+SqS5XW4OVrWM1B2Nsi8isHe6W
P3eUTtfBoJ11UfBQt7ZBJdW5vdlljfyXE8jT0Szv4lvu5F+DX5BNx4g1C6z47Edw
dL5TZgNU+b8rcwF66KJaYhDiSFYyIVeBNfu3R7+18A/+D8sKFWBj6I6cfeBW2Wsd
T2pB3o4KAfP1r1X2RNonqXALzzBk5oxJ1S3itHPQjPvZa4E6dRpCsYcQWEKcCq8x
wgsRp+gUVw9A4MuUUp4HjGh/1++Rlc2+a5RDy2Wd2WTOar5g/9JN/i1RgnqYhRaR
yaGSVineABT37AgLvAKDUBssuIkCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBR528qq
2RcZNW1Y9kOhJxsO8mksHDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUz
MTM1MzAyZTM5MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMwMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAFnllwwDQYJKoZIhvcNAQELBQADggEBADh46/blqi5OqWv2XWkF
DWqvb+QoeeJ2jql0S3FPu3IJgtyjf2bPPykl5v6xowXVxnZKtK9OJxHdg7IJMbnZ
AG7AowJU4VzhuqiS9TRlXqmiydGcwDMOhmO5xq6hdwyCKisFU6GV6DU6ZfVHbhUa
5pQoZxZHZWzwtpwZsVirgUszc6TGZtrYBJWfQtEvWF830J0e2XziBP+HAjFIuhk3
7y9VFhhpwW73HsuADGli6IW29ipGmnqUcFkVkCyPVSSQAnl738/vAjKTOtDGGLIv
1U+I/3TaGZzIoHwwTQ5ldiR4xzgqC3oVNDX62+W3zs8wL+lg4DI4Pou5NhE6D/zS
YIU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org