Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39362e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e39362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 6Mc0yCTNTQonp3PWPPsGs1GvKLaaFRAg2xsxE4ym72I=
Subject key identifier: 97:DE:C3:AF:0C:80:BF:04:DE:8D:ED:AD:7B:C1:B5:43:5C:32:E4:51
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 23105FDDA168A40B8270990982633DD15C865ACA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39362e302f32332d3234203d3e20313333383030.roa
Signing time: Sat 05 Mar 2022 21:00:00 +0000
ROA not before: Sat 05 Mar 2022 20:55:00 +0000
ROA not after: Sat 04 Mar 2023 21:00:00 +0000
asID: 133800
IP address blocks: 103.150.96.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:10:5f:dd:a1:68:a4:0b:82:70:99:09:82:63:3d:d1:5c:86:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 20:55:00 2022 GMT
Not After : Mar 4 21:00:00 2023 GMT
Subject: CN=97DEC3AF0C80BF04DE8DEDAD7BC1B5435C32E451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:17:6a:5b:1c:33:0a:ca:2f:61:2d:b2:c7:
40:2a:13:33:a4:e2:64:42:54:94:aa:7b:e6:92:dc:
9b:38:e2:f3:1b:e1:86:c2:80:13:46:bb:e4:f2:ce:
66:2a:2e:e3:d1:f0:98:ab:26:96:68:cd:b1:08:39:
ae:bc:83:d2:3d:ab:07:cb:a7:54:47:a4:d3:32:ce:
76:29:9b:f1:77:22:9d:51:21:f5:36:92:b8:a4:78:
27:4f:d3:67:59:cc:48:61:32:c0:0a:ee:38:bf:63:
8c:ee:69:a5:02:d4:c7:3a:2d:f1:c6:7b:c4:78:4e:
4b:a7:e6:0b:d5:84:82:3e:68:ab:a9:02:70:52:43:
17:63:09:e4:8b:9e:3d:c4:1e:d1:44:8f:54:fa:7a:
0d:08:e3:d0:a2:aa:1d:15:13:99:01:89:99:c3:d2:
f0:ca:41:8f:5d:b5:31:c7:9b:c6:9a:b8:92:13:a1:
5f:94:2a:46:39:a0:36:ce:8d:cc:2d:cd:28:00:e8:
81:70:50:7a:56:be:7c:c6:f7:8b:27:68:5c:ae:59:
e6:3e:b8:13:3e:d2:73:bd:1e:a0:8c:ba:df:74:f3:
0a:44:0e:24:bd:30:02:fb:4c:21:9c:57:06:47:cf:
ba:ae:42:5d:11:bc:cf:5a:a8:c2:3d:55:f5:42:e6:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:C3:AF:0C:80:BF:04:DE:8D:ED:AD:7B:C1:B5:43:5C:32:E4:51
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:ba:89:0f:68:9b:db:14:19:6b:42:cd:bf:a4:36:7d:98:1f:
36:c6:37:57:80:90:c4:95:67:79:0e:15:88:15:8a:20:52:1a:
0e:78:36:cc:af:64:81:e0:4c:21:7e:58:38:18:df:e2:d6:59:
e6:21:48:bc:32:a3:de:83:ef:47:7d:b0:ae:0d:6a:14:87:f5:
59:7c:ae:ac:45:30:20:f9:04:20:d4:3c:03:38:d0:38:b7:e3:
a9:1f:03:2a:91:07:6e:0e:2a:1e:20:02:93:35:bb:6a:e9:18:
78:d2:1d:7c:74:15:09:33:71:5d:5e:d1:96:3a:3c:88:9b:af:
4f:6e:18:bc:7f:8c:f2:96:40:aa:45:9e:9e:ea:84:71:cf:2e:
6a:c1:b8:d8:c1:a7:a4:17:b5:5f:36:c8:61:ec:89:d3:33:6c:
ee:74:20:b6:27:53:8f:7f:bb:45:d6:e5:09:18:0f:b7:18:0d:
85:92:8f:b6:d5:10:27:ab:ac:95:df:49:d2:9a:5d:87:62:e2:
79:24:99:cc:18:79:da:a1:8c:a5:d5:93:8e:42:66:02:e7:d1:
c3:61:55:87:0d:39:0a:fb:a5:ae:63:2a:b1:ff:bb:56:2a:aa:
54:a6:d7:ef:f7:82:23:1d:ed:31:96:43:2c:7a:43:dc:0f:69:
1a:c4:8f:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUIxBf3aFopAuCcJkJgmM90VyGWsowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDMwNTIwNTUwMFoX
DTIzMDMwNDIxMDAwMFowMzExMC8GA1UEAxMoOTdERUMzQUYwQzgwQkYwNERFOERF
REFEN0JDMUI1NDM1QzMyRTQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALlDF2pbHDMKyi9hLbLHQCoTM6TiZEJUlKp75pLcmzji8xvhhsKAE0a75PLO
Ziou49HwmKsmlmjNsQg5rryD0j2rB8unVEek0zLOdimb8XcinVEh9TaSuKR4J0/T
Z1nMSGEywAruOL9jjO5ppQLUxzot8cZ7xHhOS6fmC9WEgj5oq6kCcFJDF2MJ5Iue
PcQe0USPVPp6DQjj0KKqHRUTmQGJmcPS8MpBj121Mcebxpq4khOhX5QqRjmgNs6N
zC3NKADogXBQela+fMb3iydoXK5Z5j64Ez7Sc70eoIy633TzCkQOJL0wAvtMIZxX
BkfPuq5CXRG8z1qowj1V9ULmlfsCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBSX3sOv
DIC/BN6N7a17wbVDXDLkUTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUz
MTM1MzAyZTM5MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMwMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAFnlmAwDQYJKoZIhvcNAQELBQADggEBADu6iQ9om9sUGWtCzb+k
Nn2YHzbGN1eAkMSVZ3kOFYgViiBSGg54NsyvZIHgTCF+WDgY3+LWWeYhSLwyo96D
70d9sK4NahSH9Vl8rqxFMCD5BCDUPAM40Di346kfAyqRB24OKh4gApM1u2rpGHjS
HXx0FQkzcV1e0ZY6PIibr09uGLx/jPKWQKpFnp7qhHHPLmrBuNjBp6QXtV82yGHs
idMzbO50ILYnU49/u0XW5QkYD7cYDYWSj7bVECerrJXfSdKaXYdi4nkkmcwYedqh
jKXVk45CZgLn0cNhVYcNOQr7pa5jKrH/u1YqqlSm1+/3giMd7TGWQyx6Q9wPaRrE
j70=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org