Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134332e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3134332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: eSwFT6U58zwGM0ulebx2ktSiA/bbNuLVQOQtWxjE7bU=
Subject key identifier: 41:D5:71:52:E4:7D:07:98:3A:70:1C:64:B2:2F:E3:B4:E5:66:12:B1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 126DA25DBE7A612350A5213A2AFFA5919226FF6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134332e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:05 +0000
ROA not before: Thu 01 Jul 2021 07:55:05 +0000
ROA not after: Fri 01 Jul 2022 08:00:05 +0000
asID: 131111
IP address blocks: 103.154.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6d:a2:5d:be:7a:61:23:50:a5:21:3a:2a:ff:a5:91:92:26:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:05 2021 GMT
Not After : Jul 1 08:00:05 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:26:1b:a1:0a:18:23:81:5d:71:ae:5a:97:
d9:96:4e:42:ef:db:7c:58:1b:41:19:a2:47:32:31:
3a:95:82:34:0c:a9:19:d6:b8:0f:9a:05:0e:9a:e6:
0c:47:b4:62:af:0d:da:1a:72:a0:18:a5:10:b5:84:
c4:5b:9d:45:38:e3:3b:61:e0:d5:b9:55:3e:84:66:
99:8f:bc:cf:fe:14:ef:06:ce:10:2d:cc:e7:45:96:
a9:77:a1:6d:18:df:0e:bb:c3:35:43:81:0e:18:7f:
45:76:7a:33:e5:5b:5b:58:a6:fe:7a:75:d9:25:d0:
7f:a1:5c:e6:65:25:4c:cf:9b:78:95:65:0b:74:af:
cf:6f:a2:bb:08:75:16:54:7d:6f:e9:6e:55:52:2f:
4c:e5:60:50:4b:f4:93:41:da:23:3a:d2:03:2d:80:
84:24:eb:45:fe:fe:a6:7f:d1:59:90:f8:b4:b6:cb:
b5:2d:49:aa:76:3f:6a:c4:aa:0d:d6:eb:58:a6:2f:
02:3b:3d:c3:5b:41:6d:06:22:4e:22:43:32:17:74:
e2:bc:4e:51:eb:34:ab:ac:67:b5:a5:64:b0:bb:8b:
8b:67:79:eb:8e:03:18:bf:69:6a:6e:42:91:5b:ea:
78:35:0b:dd:cf:c8:36:d3:66:e7:9f:d4:c6:47:71:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:71:52:E4:7D:07:98:3A:70:1C:64:B2:2F:E3:B4:E5:66:12:B1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134332e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.143.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8c:07:e3:9f:fb:77:e0:06:e9:0e:6f:46:71:a4:68:ab:01:
f5:42:0f:e0:68:f6:b5:94:4d:8d:f9:c0:12:71:56:9b:27:6d:
c0:aa:07:e7:bb:06:82:3e:e8:30:2e:18:41:a4:0a:19:98:89:
e3:cb:64:7c:9e:84:ff:a7:77:73:8e:2d:eb:26:11:21:cb:2a:
e7:5a:84:66:ed:c9:72:57:c3:27:3a:0a:7a:bd:44:33:20:e4:
33:eb:b7:4d:bd:c2:9a:6e:b3:88:b4:31:31:a9:14:8a:be:fa:
9a:70:07:15:39:df:82:42:44:42:52:f2:29:ea:e7:eb:63:5d:
58:78:db:2a:fc:0b:43:05:ce:c0:bd:b2:6f:06:b2:00:80:36:
c1:a2:43:cd:9f:ae:e6:d6:14:83:9f:a2:3e:c1:63:8e:e2:22:
49:26:ab:cc:9d:dc:d1:29:b6:f0:27:35:b3:7b:68:0c:64:a5:
1f:51:6d:8f:0e:04:bf:6a:dd:3f:6e:df:51:9b:a0:f0:84:bf:
61:ec:c3:d4:6c:83:39:60:78:f6:8d:44:e1:30:f5:b9:17:79:
6d:4d:07:01:20:a3:9a:69:33:be:49:6d:6d:b8:1c:a9:6e:f7:
2e:1c:58:60:15:f1:67:09:55:ab:e1:54:e8:3f:a1:ff:13:b4:
98:72:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org