Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3133342e302f32342d3234203d3e20313431393434.roa
File: 3130332e3136362e3133342e302f32342d3234203d3e20313431393434.roa (raw, json)
Hash identifier: BXEpvplXBIk61bWVlZLD4lzb0mFWIOA7e1vWkfUyWOg=
Subject key identifier: C5:42:4F:DC:D8:AB:17:24:EA:A9:82:5F:2C:7D:7C:86:6E:F1:B6:78
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1AFF80B3D28BF3661DFCDA3D52E2BFBDD3BBA670
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3133342e302f32342d3234203d3e20313431393434.roa
Signing time: Wed 28 Apr 2021 01:59:11 +0000
ROA not before: Wed 28 Apr 2021 01:54:11 +0000
ROA not after: Thu 28 Apr 2022 01:59:11 +0000
asID: 141944
IP address blocks: 103.166.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:80:b3:d2:8b:f3:66:1d:fc:da:3d:52:e2:bf:bd:d3:bb:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 28 01:54:11 2021 GMT
Not After : Apr 28 01:59:11 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:58:be:42:74:7c:51:ab:88:78:47:6a:97:
30:fd:a6:8d:1f:3b:4e:4c:af:f3:94:3e:4e:f0:6f:
74:34:f6:59:74:d4:25:d3:f3:2e:28:41:4c:8e:42:
fc:1c:07:9a:2a:22:b3:45:21:99:19:39:27:ad:9b:
72:e3:a8:43:9c:45:b7:08:1e:ae:37:6c:9f:c8:b8:
43:aa:ac:3b:d6:4f:6f:8f:77:69:8d:2e:17:9b:0d:
be:00:d5:c2:5a:e6:8e:bb:59:bd:87:02:35:b0:07:
e6:c7:7a:35:63:f2:45:4c:12:f9:04:ab:29:e1:d9:
17:4f:89:2f:ca:d2:18:bb:95:f7:e0:68:82:53:0f:
16:d3:d3:83:02:ea:71:a1:34:01:6f:f1:68:16:79:
e9:b3:ad:7a:ef:df:28:7c:dd:ff:49:cc:c0:1f:8b:
94:85:c2:51:57:a9:51:e5:41:66:9b:98:d9:7a:f0:
ef:ce:41:db:ab:dd:cb:0c:60:ee:fc:7f:f4:de:cd:
6d:10:b3:88:c7:fc:05:79:70:79:90:71:87:f4:2a:
bc:52:cf:85:e8:ca:d5:2d:15:0a:b4:a5:db:68:05:
d2:fb:b8:44:3a:bf:11:c7:da:25:6b:a5:3c:8b:a1:
c0:2f:5a:d1:85:7a:7e:e8:16:41:51:fe:16:d3:bd:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:42:4F:DC:D8:AB:17:24:EA:A9:82:5F:2C:7D:7C:86:6E:F1:B6:78
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3133342e302f32342d3234203d3e20313431393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:99:f1:13:3d:67:d0:10:f9:c7:5c:4a:3d:97:54:75:36:63:
f3:13:76:43:6d:e2:12:97:23:f5:57:21:a9:4a:65:b6:b8:1f:
e0:5d:80:24:ec:0a:00:7b:a4:78:bf:75:f0:5c:45:eb:cc:b2:
3d:cc:91:5a:e6:07:30:2f:fb:23:af:b6:e8:cc:3a:ab:fa:e4:
f9:e8:18:39:ec:2c:f0:a5:6d:45:bf:fc:fa:c4:de:4b:74:47:
99:c0:39:ff:d0:c6:36:17:6e:8f:23:71:7c:25:bc:d7:d8:c1:
7d:5c:53:87:47:b1:a8:8a:07:99:ed:d0:32:90:1f:ba:01:84:
75:d1:75:f9:27:b4:84:51:e1:b5:11:d5:4a:4a:dc:a4:6d:27:
97:c0:b4:59:98:0c:42:6e:34:eb:09:c9:32:56:63:aa:b9:9a:
6c:30:0f:72:ed:08:c2:10:00:b6:37:03:f7:95:c8:ad:96:fd:
25:1d:82:b8:9d:2e:c6:c0:a2:b7:a4:56:18:4e:42:3d:b8:3b:
ae:31:8c:d2:df:3d:ee:f0:ea:09:82:84:86:0d:c7:0d:50:ce:
cb:c5:90:61:87:99:ca:5c:f6:f9:27:08:0e:1a:12:68:6b:ed:
29:8a:bc:34:1e:99:0f:13:b7:87:33:95:38:e3:9f:72:be:b5:
51:41:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org