Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133392e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3133392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: hsximTIc1np+uqZwoxqnru2b/JMEVHr86wgGUoa1ovs=
Subject key identifier: 21:52:7F:D8:35:F6:89:DD:A2:01:91:4E:E5:7D:73:0B:11:EC:CF:D4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 643D5ED4AA0DC7F4F8D893855B431BAACD8AB7BA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133392e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:07 +0000
ROA not before: Thu 01 Jul 2021 07:55:07 +0000
ROA not after: Fri 01 Jul 2022 08:00:07 +0000
asID: 131111
IP address blocks: 103.154.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:5e:d4:aa:0d:c7:f4:f8:d8:93:85:5b:43:1b:aa:cd:8a:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:07 2021 GMT
Not After : Jul 1 08:00:07 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:33:34:e1:2d:8a:7d:b1:99:74:1f:b1:28:
bf:fd:06:e5:b3:c6:3e:82:e6:9c:3d:25:b5:f2:04:
4b:ca:85:10:75:4f:47:e2:b6:e5:bf:af:c2:9a:d3:
79:d3:5f:37:cd:c0:09:6d:93:84:14:87:a5:f9:33:
ca:25:69:11:84:0c:28:c9:61:3c:6a:b4:ac:0d:b6:
ed:2a:a6:be:3f:7b:84:d1:26:83:41:88:66:4b:72:
94:76:eb:e6:52:de:9c:5a:92:53:da:7a:4c:99:b5:
97:9b:a5:6b:d6:c1:d4:c8:ca:d0:e1:ff:3c:b8:47:
31:dd:bf:07:bf:35:05:53:a1:c4:91:9e:16:39:7a:
fa:18:03:12:61:d4:62:7d:4c:17:9a:0a:87:fd:55:
36:19:1c:6c:66:3b:c5:b2:e7:c6:70:be:76:4d:e0:
89:13:c6:3f:a7:54:9d:12:5f:17:e8:8d:2d:02:13:
be:51:45:09:a9:90:8c:02:ee:d5:04:2d:63:8a:fc:
68:58:54:17:73:4e:d4:41:be:5c:a2:de:18:3a:7a:
f4:48:bd:df:1b:05:62:1d:f6:4b:68:d8:b2:65:e3:
e4:64:b4:f0:88:bc:38:96:e7:53:94:2e:c0:be:d9:
83:90:ba:05:54:d5:51:26:66:91:3b:2a:ec:75:80:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:7F:D8:35:F6:89:DD:A2:01:91:4E:E5:7D:73:0B:11:EC:CF:D4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133392e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.139.0/24
Signature Algorithm: sha256WithRSAEncryption
72:08:05:8e:fe:dc:ae:22:66:d1:dc:cb:91:96:0a:41:65:9f:
41:1d:e8:1f:72:ab:da:f6:76:ec:fd:d0:4a:e4:28:7c:ac:70:
e7:38:f1:19:a2:ef:f7:49:72:7a:20:32:6a:c7:02:b8:c0:6f:
59:c6:54:71:15:b4:a6:99:e2:d9:97:11:3e:c3:3e:39:ca:d5:
a1:4c:b4:64:60:f3:4e:30:9d:c9:bd:56:cc:97:ad:1f:6c:a3:
9c:bf:d9:18:ee:ce:96:f1:9a:63:3a:05:5c:70:f3:af:a3:10:
c9:c4:a5:b1:af:21:2d:c9:c4:06:e7:80:65:3f:66:17:df:2e:
3a:41:54:5d:4e:6f:cd:53:7d:e6:6e:b9:a7:8b:97:b5:80:7c:
e9:ed:4a:9c:fd:9d:5c:79:74:ca:16:e4:ee:48:0e:32:97:39:
41:f9:02:e6:8d:56:81:00:82:86:d5:c1:6f:f8:bc:c6:fd:6a:
80:6b:b4:bf:5c:19:70:37:f0:57:0b:ee:0f:68:3e:9d:75:e9:
be:97:47:34:4e:b1:2b:b8:0e:27:f8:4f:71:f9:70:fc:43:be:
cc:66:ed:b7:0a:11:46:1d:ee:18:e6:3c:56:14:a7:e6:ee:09:
63:2a:6e:00:03:06:1e:49:4a:01:c8:8b:42:f6:12:3b:65:37:
09:b3:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org