Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134372e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3134372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: isbsi6ChYe5zvOmPoLEdxx6QUBQVgfUpre/EWUMDV/s=
Subject key identifier: 17:9F:33:02:EC:44:80:52:81:82:15:D7:D0:4D:8B:3A:82:C4:2D:EB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 63CC97D5AAD501E09984F60069A1873879CB6532
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134372e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:10 +0000
ROA not before: Thu 01 Jul 2021 07:55:10 +0000
ROA not after: Fri 01 Jul 2022 08:00:10 +0000
asID: 131111
IP address blocks: 103.154.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cc:97:d5:aa:d5:01:e0:99:84:f6:00:69:a1:87:38:79:cb:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:10 2021 GMT
Not After : Jul 1 08:00:10 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:89:e6:9d:7a:9f:b3:05:4b:52:f8:75:9d:
c9:6b:0c:9b:b5:d4:1e:58:88:47:5f:b0:65:c4:91:
de:74:9e:d9:8c:80:7d:73:85:c7:fc:95:ad:9a:15:
e4:dc:32:4b:50:0f:69:d5:86:d7:0a:af:fc:14:0c:
02:97:2f:f4:0e:f8:3a:01:a4:64:0d:15:c4:11:ec:
3a:25:81:79:cc:b8:f3:5f:ab:6b:66:2f:90:cf:1c:
02:2b:00:31:66:fa:29:e2:f8:79:36:d6:d0:ca:60:
4b:10:05:e9:bc:a3:7c:2a:81:8a:f1:04:08:0e:f4:
9f:18:ed:fd:8d:ef:4f:70:0c:00:3a:23:a6:97:8f:
f5:0c:21:88:52:04:11:d8:22:a4:62:e2:41:8e:d4:
55:ef:dd:67:81:ed:f2:65:17:5c:aa:1c:a9:54:e7:
40:7a:f0:44:d7:4a:5e:72:f0:3f:0e:fd:ad:8a:af:
76:4f:5a:63:53:b2:c7:9b:f6:3d:ea:51:f8:27:ae:
be:7e:38:b4:02:cf:a4:aa:4f:c0:ec:cb:29:14:6b:
fe:df:5b:a7:c1:c5:b0:ba:3f:8d:05:73:b7:d7:fa:
d4:81:b1:4f:ac:a8:12:21:b8:fb:af:7c:ca:5b:c7:
10:38:29:25:c8:19:b9:9d:b9:bc:c2:e4:3f:d5:b0:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:33:02:EC:44:80:52:81:82:15:D7:D0:4D:8B:3A:82:C4:2D:EB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134372e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2c:44:f4:0b:40:ae:00:bf:79:73:81:94:f3:db:a9:d1:08:
d0:53:47:94:60:d0:65:4c:50:db:f1:a1:68:67:93:1e:c0:8c:
b3:82:bc:0c:4e:7e:46:6f:c2:84:01:fd:f5:02:28:78:e7:f7:
e2:7c:1c:15:55:3a:a2:fd:b3:1a:12:6f:64:16:b9:26:4b:0a:
24:7b:bf:c8:3c:23:3f:ed:4b:a7:94:e4:da:94:4a:0f:9e:ff:
0f:f1:5e:4a:5a:fa:11:bd:bd:be:1c:25:bd:df:9e:81:b8:b3:
5d:04:01:11:99:19:48:ab:e2:37:63:31:71:f4:60:67:b6:1e:
6c:c2:38:61:bb:cc:3f:95:b5:8c:d3:85:1a:80:dc:91:43:c7:
af:b8:32:05:96:06:e1:ab:f1:52:d9:39:0a:b1:6a:b9:e1:36:
52:cb:0b:f4:79:e1:28:47:d8:80:a8:c6:cc:2b:02:43:b3:2d:
25:4a:a1:d9:78:9d:53:72:a3:7a:cb:d8:56:38:5c:38:37:87:
33:c1:3f:f7:b0:2f:33:24:94:f6:4d:fe:e2:02:3d:64:3a:bd:
bd:1d:3b:4d:29:2d:6b:e1:b9:67:c5:94:01:90:21:d7:de:81:
4a:8d:9a:7e:4a:a2:e1:b5:8b:93:ef:86:ea:a0:87:36:66:a8:
4d:02:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org