Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134392e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3134392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: WHWEg4em0lyhcPhX6R7PCwhO8fGl4BShbvKgXyYYhmc=
Subject key identifier: 33:49:24:23:A7:8B:F2:61:48:0F:FF:69:26:BA:72:BD:37:B9:9E:58
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 591D6AC719C6B7E44AA57FDAD96E6F20DE99857B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134392e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:05 +0000
ROA not before: Thu 01 Jul 2021 07:55:05 +0000
ROA not after: Fri 01 Jul 2022 08:00:05 +0000
asID: 131111
IP address blocks: 103.154.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1d:6a:c7:19:c6:b7:e4:4a:a5:7f:da:d9:6e:6f:20:de:99:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:05 2021 GMT
Not After : Jul 1 08:00:05 2022 GMT
Subject: CN=3082010A0282010100D2CD5284C220E6FBA2313859E5299EA6765D3A93A14E1F7BB7D671DE992996FD677A81E4297767FC634368B65A05CA5E27C0F79C6DAC1127A54D1ED216F189B707D2FA71B1653144B87352E3E47C9E3B2910BD0B536D27A85DF55429F54DD8500BF44B78C5B35D2DA91B28537FED11AC1116FDDC7A401148D1D11A68D75CCE4898128C59663364F3AB3AA4A3AF20AEED1B9A3D27A0F36D10807919931E8F8C67BB1590914FECB330CA0D22E5F26CDE61D500505661E8857ED550DECC7FF0F64AD5F6170C15D69EFF3DA2C32527DC516AE2E887C387E8B2D05D01E2A7847F4D049335292FE19E9060347B3ACFE868C0167BFDD311AC0F490E856D18E1687CC1910203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:52:84:c2:20:e6:fb:a2:31:38:59:e5:29:
9e:a6:76:5d:3a:93:a1:4e:1f:7b:b7:d6:71:de:99:
29:96:fd:67:7a:81:e4:29:77:67:fc:63:43:68:b6:
5a:05:ca:5e:27:c0:f7:9c:6d:ac:11:27:a5:4d:1e:
d2:16:f1:89:b7:07:d2:fa:71:b1:65:31:44:b8:73:
52:e3:e4:7c:9e:3b:29:10:bd:0b:53:6d:27:a8:5d:
f5:54:29:f5:4d:d8:50:0b:f4:4b:78:c5:b3:5d:2d:
a9:1b:28:53:7f:ed:11:ac:11:16:fd:dc:7a:40:11:
48:d1:d1:1a:68:d7:5c:ce:48:98:12:8c:59:66:33:
64:f3:ab:3a:a4:a3:af:20:ae:ed:1b:9a:3d:27:a0:
f3:6d:10:80:79:19:93:1e:8f:8c:67:bb:15:90:91:
4f:ec:b3:30:ca:0d:22:e5:f2:6c:de:61:d5:00:50:
56:61:e8:85:7e:d5:50:de:cc:7f:f0:f6:4a:d5:f6:
17:0c:15:d6:9e:ff:3d:a2:c3:25:27:dc:51:6a:e2:
e8:87:c3:87:e8:b2:d0:5d:01:e2:a7:84:7f:4d:04:
93:35:29:2f:e1:9e:90:60:34:7b:3a:cf:e8:68:c0:
16:7b:fd:d3:11:ac:0f:49:0e:85:6d:18:e1:68:7c:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:24:23:A7:8B:F2:61:48:0F:FF:69:26:BA:72:BD:37:B9:9E:58
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134392e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.149.0/24
Signature Algorithm: sha256WithRSAEncryption
92:87:a3:46:c4:c1:b5:91:d6:4e:01:62:be:a6:ba:f3:6c:a4:
63:68:a6:4a:f1:ee:61:45:49:81:d8:1a:2e:98:89:4b:68:8d:
10:27:ed:6a:20:91:4d:ea:d1:d0:81:8e:79:70:2b:13:ed:2c:
80:72:25:46:75:03:02:09:8d:2f:73:ef:a8:d9:a0:11:32:f2:
64:fb:7d:27:6a:70:37:ef:2a:d8:ee:a8:8f:c4:b2:d3:63:fb:
0c:41:00:62:55:06:a1:13:6f:bd:b2:5c:46:06:33:e1:23:45:
90:c6:4a:a3:2b:b5:95:c7:b7:49:be:76:48:26:2a:b3:c6:2a:
e4:2f:c2:ad:ad:aa:65:53:50:2a:d6:93:02:db:a7:37:55:59:
a6:09:e8:5f:fe:8c:25:52:af:63:54:52:ac:97:49:2c:8a:a7:
0b:52:40:45:41:7d:64:cd:59:ea:10:1a:c9:b4:7f:a0:da:ce:
0d:47:df:16:21:10:40:d3:ec:5a:18:96:1b:d4:70:3e:8e:97:
fd:32:c9:5d:88:c6:9f:e6:ce:aa:48:34:6d:02:4b:c9:fc:62:
54:72:4d:47:0b:38:8f:e1:b5:1b:3f:37:61:72:c1:59:be:2a:
9f:d2:7f:f1:be:64:34:01:ed:d1:0b:7e:07:a8:55:ae:e3:30:
8e:21:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org