Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37392e302f3234203d3e20313331313131.roa
File: 3130332e3135342e37392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: hZ5tcix19PM26Z4+PEjhIPwAGWlH9liOYIrd5N7ABM8=
Subject key identifier: 20:C2:18:AC:B5:A5:BD:63:26:8D:4E:2E:F6:E5:21:B2:AD:9E:A6:48
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 14A56734790ED1AA70BD321A1A9934434D8592AC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37392e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:02 +0000
ROA not before: Thu 01 Jul 2021 07:55:02 +0000
ROA not after: Fri 01 Jul 2022 08:00:02 +0000
asID: 131111
IP address blocks: 103.154.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a5:67:34:79:0e:d1:aa:70:bd:32:1a:1a:99:34:43:4d:85:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:02 2021 GMT
Not After : Jul 1 08:00:02 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:f0:e5:97:2d:71:23:98:69:be:dd:a2:d2:
94:f8:be:98:90:d9:f3:13:ea:32:15:67:a3:06:f0:
e9:94:34:82:e3:c4:2e:76:34:85:dd:a8:0b:8c:42:
b3:ff:73:26:ac:31:d7:f7:a8:6e:e8:5f:d8:09:8b:
1a:c5:d2:06:99:56:73:c8:a2:b8:6d:4e:8d:58:07:
75:a6:70:bd:ac:e8:3f:ab:15:d1:62:c3:ec:65:3e:
03:6c:1e:7d:75:01:26:6d:d8:7a:9e:f3:d1:cb:18:
94:fc:cf:61:3a:ef:66:29:e3:90:86:59:83:b2:6c:
b1:07:39:99:a3:6d:cb:8a:92:24:a5:fa:97:05:e5:
86:a9:1f:6f:9e:90:8b:3c:f2:25:19:b4:d7:48:3e:
e0:2f:d2:dc:7f:58:d4:77:31:6f:47:06:a6:e3:bb:
00:e3:32:1a:46:1d:92:0e:75:66:40:41:b9:d2:b9:
99:90:06:cb:63:a2:d9:97:6b:2d:e1:43:6d:be:1d:
76:47:3e:35:60:c4:f1:54:b4:29:35:8e:e1:1c:8a:
04:d0:fc:7b:f1:0e:5f:e1:7c:d5:c3:e9:61:58:cb:
e0:4a:ba:a3:49:96:e3:e7:7e:48:72:7f:a6:22:8f:
51:37:ae:04:af:53:16:4f:d6:0f:21:5d:a2:bf:d0:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C2:18:AC:B5:A5:BD:63:26:8D:4E:2E:F6:E5:21:B2:AD:9E:A6:48
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37392e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.79.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:7c:41:a5:43:af:96:a7:ec:c3:c1:a0:bb:9b:c9:9d:d9:
dd:f7:0a:18:b6:14:0a:22:e8:11:e1:ad:96:9b:92:0f:47:5c:
16:c4:7d:8c:a3:77:3a:5c:de:9f:b4:e6:78:85:3b:7f:09:fc:
8c:73:20:18:66:8b:d8:7c:00:5c:ff:e6:7f:9d:b3:bf:6f:83:
ae:6a:99:b2:ac:18:61:09:5a:e5:62:97:9c:75:f1:e1:83:65:
b6:6d:73:a1:fb:d5:6a:45:35:aa:7c:ca:28:2a:e5:d6:e2:d6:
c5:83:d1:a2:ac:b3:1d:88:1b:c0:35:fe:6b:eb:85:97:6a:61:
06:24:67:7e:43:1e:66:cc:7d:ce:a3:b3:7a:b3:26:f7:93:e2:
08:d1:a0:48:da:be:2c:ef:b7:a2:ca:a7:e5:a6:ff:bf:de:cd:
57:93:2f:fb:df:50:7d:f8:a4:89:a0:6f:ed:ef:df:3a:a7:eb:
7f:4b:13:ce:70:fb:3f:f6:1a:1e:19:a2:66:b3:0b:1d:d3:23:
f6:66:45:08:9a:4e:da:31:cd:05:bf:d7:a1:96:62:4f:c7:81:
e6:18:b6:0b:2f:12:33:20:11:dc:34:bf:29:f3:f5:37:93:5e:
a2:ec:b2:ef:86:07:3a:70:23:77:95:8d:32:09:02:91:b1:b8:
7c:dd:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org