Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38372e302f3234203d3e20313331313131.roa
File: 3130332e3135342e38372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: GO5JO09Ff89v2lk0v+31Px8gQU9Ek6hUNvN7uAsq7oE=
Subject key identifier: 95:7D:16:CD:C5:7A:54:F1:3C:06:9B:97:9B:F9:0E:67:F2:B4:E5:7C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 405B2C897971F7C2A28D9CD01E484EAC06F4FEB3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38372e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:04 +0000
ROA not before: Thu 01 Jul 2021 07:55:04 +0000
ROA not after: Fri 01 Jul 2022 08:00:04 +0000
asID: 131111
IP address blocks: 103.154.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5b:2c:89:79:71:f7:c2:a2:8d:9c:d0:1e:48:4e:ac:06:f4:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:04 2021 GMT
Not After : Jul 1 08:00:04 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:95:96:17:e1:68:b5:ee:56:76:2b:e0:d2:
59:11:05:2e:e6:2f:39:0a:75:94:60:02:85:11:c8:
d0:4f:f8:85:4e:88:8a:19:11:ca:c8:3a:4d:75:88:
7e:d8:50:1d:54:3e:d5:16:a3:30:9f:cb:ab:ec:ae:
9d:74:71:12:09:db:ca:f4:c1:90:2a:53:8d:9a:e3:
dc:06:e9:19:18:1f:a8:e4:37:fa:8e:86:d9:6a:24:
f2:2b:ea:e6:ba:b4:c3:f1:8b:ed:89:80:29:1e:67:
71:c6:d3:0c:4a:93:fa:74:39:9a:55:52:ed:7f:94:
52:e8:20:b9:33:d9:ac:9d:ce:dd:ba:17:b4:af:7f:
af:ba:19:cc:01:1a:38:93:c8:57:90:86:e6:46:5f:
42:5c:df:db:a8:28:d3:87:18:65:fe:c7:eb:ce:7d:
c9:09:59:43:c9:da:78:79:a1:4a:3a:ca:0e:ac:23:
3d:9b:80:cf:97:d7:04:0e:40:28:7e:d5:e0:de:29:
b9:f4:10:da:8b:57:d9:86:34:8a:16:0c:da:61:c7:
67:c1:5c:3d:0e:fa:23:2f:d0:79:c8:79:3f:be:5d:
74:9f:89:c3:f0:79:e6:4b:7a:e4:88:3e:f4:d2:2e:
bf:29:97:14:4c:7c:6a:07:69:b3:87:5b:71:08:3a:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:16:CD:C5:7A:54:F1:3C:06:9B:97:9B:F9:0E:67:F2:B4:E5:7C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38372e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.87.0/24
Signature Algorithm: sha256WithRSAEncryption
39:67:56:dc:5f:73:e8:95:71:51:5f:0c:09:0a:87:48:7c:c6:
cc:9c:b1:fe:06:ae:40:8c:14:92:42:da:98:bb:3b:b6:50:bc:
cc:e1:97:b0:44:19:06:a6:a1:21:1e:b2:e7:7c:70:cf:32:11:
77:50:d9:9c:d2:08:ff:f3:ba:ac:f4:39:5a:fc:92:a5:2d:96:
81:99:e1:e9:ce:84:9b:a1:02:40:5d:a8:14:91:bb:d2:b3:25:
1a:22:03:33:66:59:f5:ca:f9:27:23:40:70:7f:a4:bb:22:16:
87:2b:6a:c7:11:b8:c3:61:50:17:f7:43:ae:51:88:56:63:ec:
0c:02:90:73:10:0a:e3:0f:80:f8:13:6d:85:c5:f2:9b:2f:06:
d1:fb:d2:17:16:7b:2c:d9:f7:a4:97:db:79:48:02:e6:ca:d2:
26:c4:2d:f8:f2:e2:08:95:fd:ab:c2:1c:1d:6e:c3:cb:f5:e9:
62:fb:5f:9b:df:04:fc:bb:66:db:f7:13:d2:c0:27:b7:59:d9:
cb:1f:96:54:ce:1f:33:12:7b:03:d1:08:57:1a:bb:05:f6:31:
b0:23:f9:03:5c:be:ca:8a:5a:fb:2b:55:1a:c3:ff:79:a2:05:
56:66:8b:b7:c8:d0:b7:3e:d3:ef:1b:0f:0e:28:6b:2e:df:a2:
02:85:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org