Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232382e302f3234203d3e20313331313131.roa
File: 3130332e3135342e3232382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: TMjqj4J7jb5jgzhOGS2VKxHkFNCKSZxXy4HcgE8Wn9E=
Subject key identifier: 25:23:0C:17:27:56:71:80:50:5C:33:DF:5B:5E:40:B4:9D:56:C2:3D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0D60B26CBDB42CB710863F3BCEDC02815292E88E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232382e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:08 +0000
ROA not before: Thu 01 Jul 2021 07:55:08 +0000
ROA not after: Fri 01 Jul 2022 08:00:08 +0000
asID: 131111
IP address blocks: 103.154.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:60:b2:6c:bd:b4:2c:b7:10:86:3f:3b:ce:dc:02:81:52:92:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:08 2021 GMT
Not After : Jul 1 08:00:08 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:79:45:42:11:67:97:6b:1c:33:fb:0c:f3:
19:8b:62:52:6a:e3:8d:d5:eb:7c:7c:11:0f:d7:0e:
f6:d3:8a:52:5c:d9:42:40:a6:7f:bf:17:a6:b7:9d:
7e:f0:f2:99:e6:57:94:8c:da:1f:80:65:7e:70:a6:
73:53:58:ff:ba:90:7b:ad:98:3c:8d:da:09:61:f5:
33:6c:fd:25:d4:58:6a:65:48:fe:fe:13:ff:d4:9a:
c8:c1:3f:72:00:20:36:d0:df:93:ad:56:da:0f:18:
24:07:60:58:d3:41:cd:e0:c5:24:cf:81:50:ce:bd:
bb:57:f4:81:cb:f3:c0:9d:11:72:ae:4a:6b:c5:06:
99:3a:32:ad:df:8e:b5:7c:ad:d8:8a:8a:1a:55:80:
68:02:26:89:c2:06:bd:05:8a:03:06:2f:dd:81:84:
39:32:51:78:3a:5c:db:2e:0f:12:12:47:d8:02:1d:
82:89:e5:f1:da:39:83:8c:cd:f0:67:34:9a:23:de:
65:3d:62:2f:7c:31:95:4d:f1:1e:76:ab:8c:7d:af:
56:11:1f:d0:d4:70:33:2d:ac:e2:96:f6:d2:e0:5a:
1f:ab:9e:d8:c0:da:22:ff:61:d2:1d:9a:5a:ff:91:
11:08:7a:f6:be:5f:98:c4:1c:03:74:e0:1b:22:ef:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:0C:17:27:56:71:80:50:5C:33:DF:5B:5E:40:B4:9D:56:C2:3D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232382e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.228.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5d:20:03:82:4f:d6:1b:91:1f:53:cb:6c:b5:12:7e:d6:6f:
fe:44:c6:2f:b4:d4:ac:87:a4:4e:78:45:27:7d:85:90:25:07:
b5:05:22:9a:8a:ed:28:96:aa:f9:a7:e9:db:a1:8c:95:3a:3f:
04:be:ea:69:5c:a5:2c:56:6b:0e:2e:f0:73:f9:b4:c7:8d:72:
24:7e:c7:32:ab:9d:a1:6a:e6:88:83:0e:65:72:14:94:b6:7a:
68:20:e2:82:47:d9:2e:11:bc:31:a6:97:fb:0e:cc:2b:f7:1f:
d3:34:2a:f4:c9:5f:06:b2:cc:78:dd:22:02:b4:6d:71:8c:88:
e0:b4:31:64:c0:ed:ec:b3:4b:c6:83:0d:1b:55:c8:21:a7:a4:
c2:56:b0:8e:19:b9:09:04:ba:f9:72:ab:7e:e1:4a:e6:ee:65:
84:47:b3:f4:f8:da:aa:78:f3:3b:ab:b3:9c:cc:47:a8:05:2e:
24:f2:a5:1f:fc:57:3b:af:d2:ff:36:b1:b9:43:98:a5:cf:34:
a4:af:ce:fa:f3:b1:00:14:7a:5a:8f:2c:bd:51:47:ba:6e:36:
a1:0c:3a:5e:8c:87:68:28:34:15:7c:7a:02:ec:4c:cf:fc:38:
6a:0d:b1:c4:30:34:49:0c:d5:0d:9f:83:64:01:0e:c4:7e:c6:
e8:84:cf:11
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUDWCybL20LLcQhj87ztwCgVKS6I4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwOFoX
DTIyMDcwMTA4MDAwOFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNkNENzk0NTQyMTE2Nzk3NkIxQzMzRkIwQ0YzMTk4QjYyNTI2QUUzOERE
NUVCN0M3QzExMEZENzBFRjZEMzhBNTI1Q0Q5NDI0MEE2N0ZCRjE3QTZCNzlEN0VG
MEYyOTlFNjU3OTQ4Q0RBMUY4MDY1N0U3MEE2NzM1MzU4RkZCQTkwN0JBRDk4M0M4
RERBMDk2MUY1MzM2Q0ZEMjVENDU4NkE2NTQ4RkVGRTEzRkZENDlBQzhDMTNGNzIw
MDIwMzZEMERGOTNBRDU2REEwRjE4MjQwNzYwNThEMzQxQ0RFMEM1MjRDRjgxNTBD
RUJEQkI1N0Y0ODFDQkYzQzA5RDExNzJBRTRBNkJDNTA2OTkzQTMyQURERjhFQjU3
Q0FERDg4QThBMUE1NTgwNjgwMjI2ODlDMjA2QkQwNThBMDMwNjJGREQ4MTg0Mzkz
MjUxNzgzQTVDREIyRTBGMTIxMjQ3RDgwMjFEODI4OUU1RjFEQTM5ODM4Q0NERjA2
NzM0OUEyM0RFNjUzRDYyMkY3QzMxOTU0REYxMUU3NkFCOEM3REFGNTYxMTFGRDBE
NDcwMzMyREFDRTI5NkY2RDJFMDVBMUZBQjlFRDhDMERBMjJGRjYxRDIxRDlBNUFG
RjkxMTEwODdBRjZCRTVGOThDNDFDMDM3NEUwMUIyMkVGREU4NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzXlFQhFnl2scM/sM8xmL
YlJq443V63x8EQ/XDvbTilJc2UJApn+/F6a3nX7w8pnmV5SM2h+AZX5wpnNTWP+6
kHutmDyN2glh9TNs/SXUWGplSP7+E//UmsjBP3IAIDbQ35OtVtoPGCQHYFjTQc3g
xSTPgVDOvbtX9IHL88CdEXKuSmvFBpk6Mq3fjrV8rdiKihpVgGgCJonCBr0FigMG
L92BhDkyUXg6XNsuDxISR9gCHYKJ5fHaOYOMzfBnNJoj3mU9Yi98MZVN8R52q4x9
r1YRH9DUcDMtrOKW9tLgWh+rntjA2iL/YdIdmlr/kREIeva+X5jEHAN04Bsi796F
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUJSMMFydWcYBQXDPfW15AtJ1Wwj0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMjMyMzgyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmuQwDQYJKoZIhvcN
AQELBQADggEBAJFdIAOCT9YbkR9Ty2y1En7Wb/5Exi+01KyHpE54RSd9hZAlB7UF
IpqK7SiWqvmn6duhjJU6PwS+6mlcpSxWaw4u8HP5tMeNciR+xzKrnaFq5oiDDmVy
FJS2emgg4oJH2S4RvDGml/sOzCv3H9M0KvTJXwayzHjdIgK0bXGMiOC0MWTA7eyz
S8aDDRtVyCGnpMJWsI4ZuQkEuvlyq37hSubuZYRHs/T42qp48zurs5zMR6gFLiTy
pR/8Vzuv0v82sblDmKXPNKSvzvrzsQAUelqPLL1RR7puNqEMOl6Mh2goNBV8egLs
TM/8OGoNscQwNEkM1Q2fg2QBDsR+xuiEzxE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org