Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133382e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3133382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: 37TJ8jL8R7IyiIxWps1OQdLYEP2gBvsqHK7BiAxdp/E=
Subject key identifier: 9E:39:4A:48:9B:57:53:3D:4E:86:78:29:08:3C:A4:1F:78:92:C5:F8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3A169A1F467EAFBACDAE1DE608FE9CC8D1FE6A68
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133382e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:08 +0000
ROA not before: Thu 01 Jul 2021 07:55:08 +0000
ROA not after: Fri 01 Jul 2022 08:00:08 +0000
asID: 131111
IP address blocks: 103.154.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:16:9a:1f:46:7e:af:ba:cd:ae:1d:e6:08:fe:9c:c8:d1:fe:6a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:08 2021 GMT
Not After : Jul 1 08:00:08 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:d2:06:35:ce:67:2b:64:ce:c1:03:a6:fa:
f4:9d:a3:60:7d:ae:49:af:94:46:5f:5d:50:0e:3e:
64:81:3a:d3:2b:26:e5:c9:b3:ce:a9:41:86:92:99:
71:93:56:b8:2a:30:f8:74:9e:9d:f1:37:d7:9b:ab:
33:7d:4c:c1:be:8c:c1:76:d5:57:79:78:d2:1f:7a:
13:b3:3d:79:2e:cb:40:3e:2e:17:b1:2e:47:e2:1a:
d9:63:9d:78:7a:3e:08:4b:a8:35:10:6f:f4:cb:fe:
26:43:ac:05:42:80:79:eb:43:d1:81:58:71:84:70:
1c:b8:d2:76:b4:ae:c4:b5:b8:a8:13:aa:34:10:fb:
9d:69:5e:bc:a3:42:95:df:0b:ee:14:bd:63:61:fa:
92:e4:95:5c:d3:12:52:09:cb:63:27:48:b2:87:08:
b1:16:e5:92:d6:99:ff:f6:a9:94:f3:a0:c2:d1:a8:
86:9d:6f:c0:69:da:fc:ff:bc:de:2a:6a:09:6f:ab:
06:46:1f:27:15:ce:06:8a:c9:22:ff:c8:25:84:69:
6e:55:f1:c7:02:02:9f:73:6c:af:e2:3d:3b:fa:00:
d4:ad:a7:a8:d9:bf:a3:d6:14:e8:af:b4:2e:4b:d7:
68:3e:4e:24:4b:cf:90:39:fe:8c:3c:21:80:60:0f:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:4A:48:9B:57:53:3D:4E:86:78:29:08:3C:A4:1F:78:92:C5:F8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133382e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.138.0/24
Signature Algorithm: sha256WithRSAEncryption
86:74:bb:6c:d7:3b:6e:6a:a9:ee:ca:b7:51:c6:99:15:ed:17:
74:50:64:d0:f0:08:cc:66:66:93:2c:05:fd:20:3e:58:e8:21:
11:ee:f0:86:fc:89:1e:10:d7:03:d2:91:e7:47:a5:f1:e3:e4:
ed:f2:7b:d5:dd:ca:67:c2:9d:89:cc:b3:e5:12:6f:c6:78:04:
27:e9:1d:81:4c:35:ee:3b:20:d2:c9:84:b1:6c:5e:65:cf:27:
1f:c3:d6:88:db:14:83:42:d2:4d:d7:74:b0:2d:fe:e3:d1:f8:
cd:34:8a:21:95:97:99:59:80:38:01:27:88:ad:47:f3:27:b3:
0e:86:15:7a:d8:91:dc:4c:6c:d7:29:51:e1:c2:99:c1:b1:14:
9d:41:22:3e:f8:72:1f:56:b6:10:df:ff:7a:47:ce:b9:84:fd:
29:14:21:51:db:91:49:1f:dd:dd:03:e6:b5:5a:83:6c:c2:20:
fb:72:79:9b:da:d2:3b:69:25:88:cf:00:3e:3d:01:77:72:b3:
37:32:77:24:f5:c5:b8:f9:30:0f:79:38:e8:d3:1a:5f:d2:be:
a1:d0:18:dc:f0:50:fb:dc:36:d9:3d:1e:8a:8f:11:64:0f:11:
58:d8:58:9d:a5:a8:41:cf:39:03:95:fe:de:33:79:00:92:7d:
0b:6d:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org