Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38382e302f3234203d3e20313331313131.roa
File: 3130332e3135342e38382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: rKbIEO5ifyP8RESUNCkIsYuh22sq1TIDL6i4xpO7J4s=
Subject key identifier: 12:C5:55:04:C9:B5:42:53:B2:64:B8:E7:A4:74:0E:86:82:08:82:5E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5BAE3675BE33C7E30EF3194E3CEC37B2710DC070
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38382e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:04 +0000
ROA not before: Thu 01 Jul 2021 07:55:04 +0000
ROA not after: Fri 01 Jul 2022 08:00:04 +0000
asID: 131111
IP address blocks: 103.154.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ae:36:75:be:33:c7:e3:0e:f3:19:4e:3c:ec:37:b2:71:0d:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:04 2021 GMT
Not After : Jul 1 08:00:04 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:a2:f2:da:c8:21:43:f1:21:6b:98:8b:d3:
45:10:d6:54:3e:20:7d:db:74:5b:8b:53:78:71:e2:
a4:ad:9b:ac:48:e5:50:5f:7c:c8:38:ac:9e:82:66:
eb:84:13:65:20:a3:2e:ea:e2:0e:d7:8d:7e:ac:0b:
7a:b5:3e:c5:d5:40:5d:77:67:f4:21:8f:d2:74:b4:
a8:bd:0b:7f:c4:46:10:88:fc:1c:b6:7f:29:17:34:
3e:26:ef:8d:09:e4:33:61:8c:72:50:9b:bc:bb:41:
c4:c7:46:89:79:91:80:db:cb:38:11:9a:70:e1:a5:
e6:89:b8:83:0e:4e:c9:0d:2b:c2:7c:84:eb:38:90:
fa:90:b3:0c:16:04:37:1b:99:97:2a:70:63:a1:86:
13:0d:1c:1c:bc:dd:8c:e7:1b:f5:fd:48:1c:34:68:
7c:74:d6:13:6e:ac:ae:ba:f9:e5:38:2e:f9:e1:bc:
8a:08:bc:56:b9:58:d8:84:95:0f:09:91:1d:16:f4:
25:96:96:61:a7:28:2d:a5:1a:4d:97:46:01:7e:29:
a1:48:4d:3f:95:95:3e:27:19:a4:77:ee:8a:b0:58:
29:1f:1d:43:fb:b6:a1:1b:c2:4b:05:3e:c7:d2:19:
52:57:ba:d3:5a:ae:c9:32:c8:97:d9:76:2d:97:f2:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:55:04:C9:B5:42:53:B2:64:B8:E7:A4:74:0E:86:82:08:82:5E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38382e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.88.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b7:20:b1:db:a1:fa:eb:ee:b1:35:a2:f9:77:71:c4:f9:43:
4a:e6:1d:b3:83:70:10:d2:b9:58:01:ec:3b:76:90:78:d5:cb:
79:13:68:5c:ca:cd:33:ee:e7:9a:e8:b1:69:6c:3a:04:30:98:
18:92:ab:46:ae:c6:8e:b0:b9:ad:1a:b8:a9:5a:1b:7b:aa:2e:
6b:2f:4d:cc:c3:bd:d1:27:6f:47:71:20:ee:5d:54:19:d6:1a:
21:16:72:00:38:4d:21:cd:45:18:bf:de:11:e6:0d:26:8f:5a:
40:6e:76:aa:c5:65:b5:24:dd:6b:97:67:a5:e8:d4:23:b8:12:
77:fb:17:ef:85:9d:8b:c1:ae:cc:6d:b1:ef:6e:96:78:01:54:
be:c8:a0:36:d4:35:d4:bb:53:74:c7:17:ef:be:c1:30:20:4b:
f4:5e:79:5e:8a:cd:0c:d7:a1:eb:44:8e:27:06:7d:9b:ac:bb:
af:54:bb:c6:fb:98:cf:0f:12:dd:25:82:5e:00:6a:97:d8:fa:
90:a9:00:b9:6c:8f:05:29:17:1e:90:5f:61:23:48:cd:ea:ee:
7f:a4:39:d7:aa:a0:f8:70:96:03:04:32:47:bd:5e:ad:b1:c7:
58:3c:04:03:a6:f1:58:bd:72:91:07:59:f8:7d:39:9c:70:b4:
ff:af:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org