Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131342e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3131342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: 7WGlB121ye8rNht5DSKE1u+1vivdncZKKKK214ZutXk=
Subject key identifier: 8E:44:AB:C1:BA:0E:50:8B:4E:94:29:EA:46:E7:45:F9:38:EA:4F:D6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 66AC2503A40B79FE41566D4108D60A1675782D37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131342e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:12 +0000
ROA not before: Thu 01 Jul 2021 07:55:12 +0000
ROA not after: Fri 01 Jul 2022 08:00:12 +0000
asID: 131111
IP address blocks: 103.154.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:25:03:a4:0b:79:fe:41:56:6d:41:08:d6:0a:16:75:78:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:12 2021 GMT
Not After : Jul 1 08:00:12 2022 GMT
Subject: CN=3082010A0282010100C24C357CFDB9561E1EBC61990D4CE4A38CB32BA8E5F9533732D9A3C34AE2023893AA9249DCFDF7C94DA20B210ABEE600AE89395587D27FABB83F87D04CB148D831D9DAFBE9B0FF35955924696E6AD4B907375C899E98D93AD13E11D13C2ECC9D61FC965E926E0B6F187E7BF67AC2F9FFE8B5535CB2D2381B8CEB32FA1B115988F2A20475BB3510311846CB61911EBA9349D926F0976F0B5E616FBF39B580BEC102E2801E56B056D51D2FCADA30FCA11D2D877827A2A4CC72CFC1694CE1596E0E78C2D7B721CF468CF6855D74572BF8B3965AE0F3AAB0F541A3B078110E5ED4278399DF2A9774778C84649142913A2A9E2484615790CEFFDC16D00DB446AC8E9F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:35:7c:fd:b9:56:1e:1e:bc:61:99:0d:4c:
e4:a3:8c:b3:2b:a8:e5:f9:53:37:32:d9:a3:c3:4a:
e2:02:38:93:aa:92:49:dc:fd:f7:c9:4d:a2:0b:21:
0a:be:e6:00:ae:89:39:55:87:d2:7f:ab:b8:3f:87:
d0:4c:b1:48:d8:31:d9:da:fb:e9:b0:ff:35:95:59:
24:69:6e:6a:d4:b9:07:37:5c:89:9e:98:d9:3a:d1:
3e:11:d1:3c:2e:cc:9d:61:fc:96:5e:92:6e:0b:6f:
18:7e:7b:f6:7a:c2:f9:ff:e8:b5:53:5c:b2:d2:38:
1b:8c:eb:32:fa:1b:11:59:88:f2:a2:04:75:bb:35:
10:31:18:46:cb:61:91:1e:ba:93:49:d9:26:f0:97:
6f:0b:5e:61:6f:bf:39:b5:80:be:c1:02:e2:80:1e:
56:b0:56:d5:1d:2f:ca:da:30:fc:a1:1d:2d:87:78:
27:a2:a4:cc:72:cf:c1:69:4c:e1:59:6e:0e:78:c2:
d7:b7:21:cf:46:8c:f6:85:5d:74:57:2b:f8:b3:96:
5a:e0:f3:aa:b0:f5:41:a3:b0:78:11:0e:5e:d4:27:
83:99:df:2a:97:74:77:8c:84:64:91:42:91:3a:2a:
9e:24:84:61:57:90:ce:ff:dc:16:d0:0d:b4:46:ac:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:AB:C1:BA:0E:50:8B:4E:94:29:EA:46:E7:45:F9:38:EA:4F:D6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131342e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:87:ec:31:27:0a:a7:ce:00:17:92:b5:ff:27:30:24:0c:16:
59:6a:9e:36:f2:d7:0d:6a:94:85:23:13:28:67:a9:7d:d2:35:
b3:96:82:2a:b8:73:dc:f3:12:c4:6a:e5:a9:3f:7b:d5:35:ca:
db:aa:05:95:8f:96:91:9a:9a:72:57:d1:90:1f:5f:21:dc:74:
e5:59:05:d6:f9:85:83:a9:44:46:74:7c:9e:8a:c6:c1:94:61:
f0:3d:92:ed:46:6c:a6:01:2f:ae:b4:c1:de:4c:77:71:bb:36:
a8:7c:96:7b:0a:d8:dd:78:8e:78:1f:39:71:54:09:30:81:8e:
0c:c2:89:95:35:da:cc:e5:c4:8f:8c:7c:f2:01:5a:ec:e6:62:
6c:b8:a9:63:e1:7a:3b:a9:01:5d:56:9a:0c:df:cc:cb:73:e6:
26:a8:48:f9:df:c8:41:de:b6:9c:43:b9:7e:62:3d:67:71:54:
9a:9f:ca:b4:5c:e9:d4:0c:30:c7:d9:12:a5:df:6e:7c:f0:e9:
68:7b:6e:63:71:b0:a3:74:ba:f5:31:02:0c:e7:2b:77:82:22:
37:59:fd:ba:82:5c:aa:45:83:4b:87:62:5c:3d:58:4e:94:ce:
42:20:87:86:38:99:4b:67:a6:e0:9d:00:cd:95:cf:a0:5c:39:
ba:00:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org