Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232332e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3232332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: FJWui+sfPUmXpP73LvwDeWRUn3/iyrOCUHL3hzdhGXU=
Subject key identifier: 07:D8:35:5B:0B:14:E4:71:65:51:63:23:AB:7C:FA:A9:1A:FA:B7:D4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4A46217C934ADA4B328AAEF61AA70B9D6311A89F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232332e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:13 +0000
ROA not before: Thu 01 Jul 2021 07:55:13 +0000
ROA not after: Fri 01 Jul 2022 08:00:13 +0000
asID: 131111
IP address blocks: 103.154.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:46:21:7c:93:4a:da:4b:32:8a:ae:f6:1a:a7:0b:9d:63:11:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:13 2021 GMT
Not After : Jul 1 08:00:13 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:b6:68:c7:96:44:37:7b:7a:19:70:1a:f4:
0c:ae:7a:6c:41:55:bf:3f:42:03:6a:b1:33:f9:99:
1a:44:ca:ea:50:d0:f6:6f:69:55:b8:23:fe:81:bf:
37:4a:5f:ae:fb:13:62:dc:db:a5:73:13:83:c1:a7:
d4:50:9e:63:38:33:cc:3c:0a:2d:95:4e:28:07:bd:
23:73:18:b6:6f:4a:f4:16:8f:48:84:52:48:ff:9b:
56:4c:96:60:6d:f5:fb:df:72:f5:b3:bc:ac:21:6b:
51:7a:81:b3:45:65:c5:ab:84:6f:f6:f8:cc:d8:58:
61:73:78:75:49:d7:77:38:38:65:02:29:43:e7:3b:
de:cb:67:c9:99:3e:1a:a8:c3:01:e6:12:b5:4f:1b:
62:c3:c6:38:bb:29:4e:54:8b:ab:a8:d1:f0:3d:3f:
03:f0:2a:4a:26:70:b4:98:21:c1:47:5b:fb:4c:2e:
2e:5f:53:ba:41:92:0a:70:c9:18:aa:f4:9c:6e:19:
af:c8:75:79:67:d4:3d:9d:8e:3f:ba:47:bb:bb:fb:
14:c7:4b:1b:d0:00:ba:13:d1:29:5e:5a:c9:92:60:
89:f9:9d:77:d0:32:f1:f7:79:fa:6c:76:e3:09:de:
b3:7e:d0:a3:b1:ed:63:c4:b6:3b:fa:e8:fe:aa:48:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:35:5B:0B:14:E4:71:65:51:63:23:AB:7C:FA:A9:1A:FA:B7:D4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232332e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.223.0/24
Signature Algorithm: sha256WithRSAEncryption
23:71:b5:8b:88:2a:77:00:42:45:15:3d:25:f0:ee:3f:e6:4e:
12:08:e2:6f:15:10:2b:16:cd:4d:56:f5:4b:54:1f:42:e6:cc:
62:fe:e3:fd:70:3b:33:76:9e:f6:80:f9:b1:56:7f:73:87:fd:
d1:f1:8c:40:a1:39:44:e5:f2:b1:4f:00:9f:d6:00:8b:e8:ff:
a4:8d:5b:b5:00:c1:61:49:98:4e:e9:ca:10:c0:9d:0c:95:0c:
41:e1:b2:f7:17:bd:40:5b:48:6f:d7:d6:f0:e8:b5:64:21:f9:
99:27:ae:d4:5c:8f:c2:23:6b:aa:10:a2:f1:e2:4d:37:0c:62:
7a:7f:86:74:7a:b5:8b:3d:b5:a3:07:d1:64:7e:de:38:cb:2d:
c8:8f:a8:bd:e9:2f:b4:1f:1a:be:9f:bd:1b:a2:f4:05:d4:9f:
97:d7:96:5c:aa:ac:93:ac:ee:37:0c:71:f2:e9:e2:e3:73:4b:
c6:4e:c6:05:b8:d1:52:a6:c9:2b:cb:11:e9:6b:b4:cc:8a:c4:
f6:65:dc:16:e2:e6:72:58:42:4b:71:c0:bc:d0:14:af:f3:57:
81:f7:0c:4f:5b:83:e0:e8:14:72:d5:4d:b2:34:9b:61:ee:d3:
23:c7:ec:f4:47:83:a7:5d:b3:bc:05:2c:04:2f:fc:7e:1c:aa:
86:91:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org