Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39302e302f3234203d3e20313331313131.roa
File: 3130332e3135342e39302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier: QLIPmKArSpDtNNE+PE23Lt09b1XMozg3gwS6e5gIwY4=
Subject key identifier: 7D:CE:28:34:00:D3:3B:62:C7:3E:92:1E:6D:98:76:95:16:A1:CA:1C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 668145F53A47B4C0F6098055C3C3299D6F9AC4F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39302e302f3234203d3e20313331313131.roa
Signing time: Thu 01 Jul 2021 08:00:03 +0000
ROA not before: Thu 01 Jul 2021 07:55:03 +0000
ROA not after: Fri 01 Jul 2022 08:00:03 +0000
asID: 131111
IP address blocks: 103.154.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:81:45:f5:3a:47:b4:c0:f6:09:80:55:c3:c3:29:9d:6f:9a:c4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 07:55:03 2021 GMT
Not After : Jul 1 08:00:03 2022 GMT
Subject: CN=3082010A0282010100C3CAFCC155C51212A34B3EA6EF9EC52C174EEAFD9E0C0BDB76E521DC77739F5D41FA8F8ACB081FC454106680CBF17B4FDC11E1765BDB70609ABEEF3862CE77897F18B4E7BD74BB041D4AB2B71A0CF6908079C63286D6C5E57BE765270E6E7F09C5D4A1EF08AF733322E480132B32C132BA5479FF0FA03AE73EBF12E08EC6A047374623CFBF1341045AE5AB2A077DC28259EC7E1091A7DC10D9111AB029046FD970C0E4B629A2EFC3B89DF7C10257670933E6A0E28C2F2FB04965872F8C658AAE917DD3D4A84E5BF081EB0F06DA78EA5D204C18BE3714BEA2B3E032A0B52E5C9FF45B195431C2D2CD888A85A4C3D79A75FB49D968A0397A5DB00439E6372C49F10203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:fc:c1:55:c5:12:12:a3:4b:3e:a6:ef:9e:
c5:2c:17:4e:ea:fd:9e:0c:0b:db:76:e5:21:dc:77:
73:9f:5d:41:fa:8f:8a:cb:08:1f:c4:54:10:66:80:
cb:f1:7b:4f:dc:11:e1:76:5b:db:70:60:9a:be:ef:
38:62:ce:77:89:7f:18:b4:e7:bd:74:bb:04:1d:4a:
b2:b7:1a:0c:f6:90:80:79:c6:32:86:d6:c5:e5:7b:
e7:65:27:0e:6e:7f:09:c5:d4:a1:ef:08:af:73:33:
22:e4:80:13:2b:32:c1:32:ba:54:79:ff:0f:a0:3a:
e7:3e:bf:12:e0:8e:c6:a0:47:37:46:23:cf:bf:13:
41:04:5a:e5:ab:2a:07:7d:c2:82:59:ec:7e:10:91:
a7:dc:10:d9:11:1a:b0:29:04:6f:d9:70:c0:e4:b6:
29:a2:ef:c3:b8:9d:f7:c1:02:57:67:09:33:e6:a0:
e2:8c:2f:2f:b0:49:65:87:2f:8c:65:8a:ae:91:7d:
d3:d4:a8:4e:5b:f0:81:eb:0f:06:da:78:ea:5d:20:
4c:18:be:37:14:be:a2:b3:e0:32:a0:b5:2e:5c:9f:
f4:5b:19:54:31:c2:d2:cd:88:8a:85:a4:c3:d7:9a:
75:fb:49:d9:68:a0:39:7a:5d:b0:04:39:e6:37:2c:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:28:34:00:D3:3B:62:C7:3E:92:1E:6D:98:76:95:16:A1:CA:1C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e39302e302f3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:52:bf:aa:6e:09:39:e3:1b:71:50:1e:b0:60:38:65:5c:ac:
b7:5e:05:a8:d1:5b:74:19:be:bf:67:40:d7:db:24:b5:0a:d3:
6c:e4:fb:13:83:9f:e4:9e:11:09:b8:ad:fc:78:c1:cd:5c:37:
1f:de:dd:fa:2e:2b:a9:05:76:00:00:37:c6:75:82:74:60:29:
f0:be:3c:cd:a8:9d:78:ce:25:b9:43:83:94:7d:39:1f:10:36:
f3:fc:8d:b1:23:87:53:a0:35:57:eb:08:55:cd:93:31:1a:75:
3f:76:92:93:2e:d9:46:0a:86:1a:e7:e8:e6:58:65:f9:da:be:
df:a5:a5:09:2e:90:d1:4c:56:a7:a4:a0:17:c6:0f:e1:0b:17:
b6:b5:e6:4a:36:d6:f7:50:92:59:42:78:fb:13:23:59:15:07:
b0:c7:d0:d7:fb:35:f1:77:eb:71:01:e2:a0:66:dd:58:50:28:
f2:05:40:af:0e:4a:72:a2:81:17:42:5e:83:df:30:7d:73:d2:
e0:5c:d0:f7:51:8a:04:7d:de:55:14:24:9a:c5:d5:01:a8:9b:
2a:95:b5:57:f8:ef:ac:c4:fc:fd:56:bd:ae:13:11:2c:be:c0:
42:1e:ba:f1:e5:0f:1d:56:2e:e6:b7:44:b0:85:96:e4:ad:8a:
9b:68:6e:50
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUZoFF9TpHtMD2CYBVw8MpnW+axPEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUwM1oX
DTIyMDcwMTA4MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDM0NBRkNDMTU1QzUxMjEyQTM0QjNFQTZFRjlFQzUyQzE3NEVFQUZEOUUw
QzBCREI3NkU1MjFEQzc3NzM5RjVENDFGQThGOEFDQjA4MUZDNDU0MTA2NjgwQ0JG
MTdCNEZEQzExRTE3NjVCREI3MDYwOUFCRUVGMzg2MkNFNzc4OTdGMThCNEU3QkQ3
NEJCMDQxRDRBQjJCNzFBMENGNjkwODA3OUM2MzI4NkQ2QzVFNTdCRTc2NTI3MEU2
RTdGMDlDNUQ0QTFFRjA4QUY3MzMzMjJFNDgwMTMyQjMyQzEzMkJBNTQ3OUZGMEZB
MDNBRTczRUJGMTJFMDhFQzZBMDQ3Mzc0NjIzQ0ZCRjEzNDEwNDVBRTVBQjJBMDc3
REMyODI1OUVDN0UxMDkxQTdEQzEwRDkxMTFBQjAyOTA0NkZEOTcwQzBFNEI2MjlB
MkVGQzNCODlERjdDMTAyNTc2NzA5MzNFNkEwRTI4QzJGMkZCMDQ5NjU4NzJGOEM2
NThBQUU5MTdERDNENEE4NEU1QkYwODFFQjBGMDZEQTc4RUE1RDIwNEMxOEJFMzcx
NEJFQTJCM0UwMzJBMEI1MkU1QzlGRjQ1QjE5NTQzMUMyRDJDRDg4OEE4NUE0QzNE
NzlBNzVGQjQ5RDk2OEEwMzk3QTVEQjAwNDM5RTYzNzJDNDlGMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyvzBVcUSEqNLPqbvnsUs
F07q/Z4MC9t25SHcd3OfXUH6j4rLCB/EVBBmgMvxe0/cEeF2W9twYJq+7zhizneJ
fxi05710uwQdSrK3Ggz2kIB5xjKG1sXle+dlJw5ufwnF1KHvCK9zMyLkgBMrMsEy
ulR5/w+gOuc+vxLgjsagRzdGI8+/E0EEWuWrKgd9woJZ7H4QkafcENkRGrApBG/Z
cMDktimi78O4nffBAldnCTPmoOKMLy+wSWWHL4xliq6RfdPUqE5b8IHrDwbaeOpd
IEwYvjcUvqKz4DKgtS5cn/RbGVQxwtLNiIqFpMPXmnX7SdlooDl6XbAEOeY3LEnx
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUfc4oNADTO2LHPpIebZh2lRahyhwwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTM1MzQyZTM5MzAyZTMwMmYzMjM0
MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmlowDQYJKoZIhvcNAQEL
BQADggEBAB9Sv6puCTnjG3FQHrBgOGVcrLdeBajRW3QZvr9nQNfbJLUK02zk+xOD
n+SeEQm4rfx4wc1cNx/e3fouK6kFdgAAN8Z1gnRgKfC+PM2onXjOJblDg5R9OR8Q
NvP8jbEjh1OgNVfrCFXNkzEadT92kpMu2UYKhhrn6OZYZfnavt+lpQkukNFMVqek
oBfGD+ELF7a15ko21vdQkllCePsTI1kVB7DH0Nf7NfF363EB4qBm3VhQKPIFQK8O
SnKigRdCXoPfMH1z0uBc0PdRigR93lUUJJrF1QGomyqVtVf476zE/P1Wva4TESy+
wEIeuvHlDx1WLua3RLCFluStiptoblA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org