Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38392e302f3234203d3e20313331313131.roa
File: 3130332e3135342e38392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: g9Naj+Gu1p7bHBWnoRjsd4MzUbtdGRUUQ+DCoQSjM7c=
Subject key identifier: 4B:A0:92:C8:57:0A:08:DB:D8:97:36:74:C2:06:0F:B7:BE:14:82:BC
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 526DB60DC7FF21FC54AE002AE97D6649B7FA203D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38392e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:04 +0000
ROA not before: Thu 01 Jul 2021 07:55:04 +0000
ROA not after: Fri 01 Jul 2022 08:00:04 +0000
asID: 131111
IP address blocks: 103.154.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6d:b6:0d:c7:ff:21:fc:54:ae:00:2a:e9:7d:66:49:b7:fa:20:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:04 2021 GMT
Not After : Jul 1 08:00:04 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:b4:bb:56:6d:7f:16:3d:e8:a0:e5:fb:be:
ed:4d:ae:44:c2:27:0a:e7:51:8f:8f:ea:f9:05:60:
9f:02:ca:2e:84:f0:a3:09:dc:1c:8d:c1:66:ad:9f:
b8:8e:9f:a7:0c:a6:47:8d:3c:22:01:82:d7:f1:90:
6a:aa:ff:90:4b:98:1e:bb:42:b2:8f:a8:d4:6a:ec:
f0:3b:5c:f6:c7:65:83:fd:db:89:b8:ea:bc:77:93:
54:86:5a:f6:6e:6f:c6:9b:10:6a:8d:6e:87:0b:0d:
16:52:a7:44:8d:3c:25:48:d7:71:05:67:d5:05:7b:
cd:aa:31:dd:f5:ca:e0:23:4f:39:81:73:61:78:4f:
a3:94:4c:8b:83:bf:97:6d:f5:06:4b:b7:9d:b5:23:
45:fd:78:7c:f5:c2:31:6c:9b:95:c7:3a:97:42:10:
90:ba:9d:84:e9:17:b4:c3:f7:0e:ac:b6:42:09:d2:
08:16:86:25:9b:48:fa:d5:b9:1f:35:4f:cd:47:f5:
7e:43:a3:33:b4:dc:b2:88:23:f9:8f:02:34:80:d4:
84:fe:5b:9b:2f:66:e4:9a:dd:cb:2b:b8:02:63:62:
22:0c:6e:a7:e8:d4:9a:7b:98:cb:a4:26:25:5e:32:
dd:60:bc:e9:85:1a:22:4c:fd:67:6e:c7:92:18:ad:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:92:C8:57:0A:08:DB:D8:97:36:74:C2:06:0F:B7:BE:14:82:BC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38392e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.89.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b0:e1:ab:a1:b3:57:7b:62:ec:8a:96:74:96:14:91:79:46:
aa:7f:ea:71:64:2e:f0:57:98:45:08:43:10:82:ec:c0:b2:ac:
a5:d7:5a:d8:be:b4:3a:85:b6:f5:10:0b:f2:19:56:aa:62:e5:
ff:fb:dd:db:bd:f4:0b:57:e3:15:02:e0:5a:bf:05:d8:34:6a:
ff:d9:07:2a:00:04:3c:2b:38:db:e1:14:d2:d1:2d:15:2c:34:
ad:f7:a8:bf:a3:80:3d:8e:0a:3f:b4:19:2f:bc:26:6c:58:b9:
6c:fb:28:7a:9d:16:65:ea:4c:fa:5e:70:80:de:56:62:a4:c4:
d9:40:c1:25:c3:5a:36:5d:dc:51:2a:43:71:26:7e:c4:81:d8:
9e:b6:38:1f:33:ef:29:2a:7d:12:cc:b3:aa:19:f2:1f:ab:b5:
19:8d:8f:f6:00:b6:50:0b:fe:b7:9a:d4:f3:ae:ae:b1:f5:40:
6e:68:7e:ed:61:f6:e5:73:04:6b:88:a9:a7:e7:8c:b6:e6:b7:
e1:fe:43:e7:b7:e3:24:7b:55:57:09:aa:ba:42:14:89:a3:c7:
25:7b:b7:cf:eb:b8:c3:c7:e9:22:40:c2:a9:e3:11:30:fd:33:
ac:d0:ca:d4:81:73:d5:d1:4a:72:3b:54:36:5a:55:84:2b:1e:
e9:d4:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org