Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3132382e302f32342d3234203d3e2039343232.roa
File: 3130332e3137332e3132382e302f32342d3234203d3e2039343232.roa (raw, json)
Hash identifier: 2y1YpPeCSbjljILzPZYGpBxa3eU51AVkW5EOi0KC1PE=
Subject key identifier: FD:E9:64:63:76:AE:D6:0E:6D:86:E3:DC:F3:60:D0:BF:0D:94:17:6D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3B916E5A4077FC821CBF1168BEF8B56C1CB98C9E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3132382e302f32342d3234203d3e2039343232.roa
Signing time: Thu 02 Dec 2021 04:13:02 +0000
ROA not before: Thu 02 Dec 2021 04:08:02 +0000
ROA not after: Fri 02 Dec 2022 04:13:02 +0000
asID: 9422
IP address blocks: 103.173.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:91:6e:5a:40:77:fc:82:1c:bf:11:68:be:f8:b5:6c:1c:b9:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 2 04:08:02 2021 GMT
Not After : Dec 2 04:13:02 2022 GMT
Subject: CN=3082010A0282010100CDE2C25CAE2D6678A627F86E5EBBD258E2AB7DC782C95F03358EC4D36FAD1ABF2AA79BDB162E915BF04FE3D3AD55A0482F98793A0AA4E0EF0E7C66F1B0286A46F5D526202DBBEBB827129BC43D3DA771B9E11EFBFF9B9EAC107E83E753D79D62CD2EB351C0CD6442831AA6DEAE1202BBD7A725B004161D9260115F40864C327D25FAEF5EFA589031F7424C770A12508543C2CD2048CA2E510B4B739A6447555B8D90A7BADA3298411EBDA7E6E6239D72212A48A7446C9C67FCE4B61C8085F4E7328C62F7CDCA109AE2268EA6A4B95DBE4922C9A62D586017913D0791804E6AB5C41489F4250A5DD90ED1C945BAEAB2DAD75D1371D8ACB0770DE49F84723EEC070203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:c2:5c:ae:2d:66:78:a6:27:f8:6e:5e:bb:
d2:58:e2:ab:7d:c7:82:c9:5f:03:35:8e:c4:d3:6f:
ad:1a:bf:2a:a7:9b:db:16:2e:91:5b:f0:4f:e3:d3:
ad:55:a0:48:2f:98:79:3a:0a:a4:e0:ef:0e:7c:66:
f1:b0:28:6a:46:f5:d5:26:20:2d:bb:eb:b8:27:12:
9b:c4:3d:3d:a7:71:b9:e1:1e:fb:ff:9b:9e:ac:10:
7e:83:e7:53:d7:9d:62:cd:2e:b3:51:c0:cd:64:42:
83:1a:a6:de:ae:12:02:bb:d7:a7:25:b0:04:16:1d:
92:60:11:5f:40:86:4c:32:7d:25:fa:ef:5e:fa:58:
90:31:f7:42:4c:77:0a:12:50:85:43:c2:cd:20:48:
ca:2e:51:0b:4b:73:9a:64:47:55:5b:8d:90:a7:ba:
da:32:98:41:1e:bd:a7:e6:e6:23:9d:72:21:2a:48:
a7:44:6c:9c:67:fc:e4:b6:1c:80:85:f4:e7:32:8c:
62:f7:cd:ca:10:9a:e2:26:8e:a6:a4:b9:5d:be:49:
22:c9:a6:2d:58:60:17:91:3d:07:91:80:4e:6a:b5:
c4:14:89:f4:25:0a:5d:d9:0e:d1:c9:45:ba:ea:b2:
da:d7:5d:13:71:d8:ac:b0:77:0d:e4:9f:84:72:3e:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:64:63:76:AE:D6:0E:6D:86:E3:DC:F3:60:D0:BF:0D:94:17:6D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3132382e302f32342d3234203d3e2039343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.128.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ab:c3:e8:91:71:05:24:e9:ab:bf:13:99:b1:df:5e:b2:f4:
3f:cc:8b:8c:e1:8f:80:90:4d:cb:b5:f3:d1:a2:4f:a9:9f:8e:
59:44:72:4b:df:1e:32:33:f1:2b:3d:0f:b9:42:2b:d3:d3:80:
53:46:b6:d3:e3:0a:dd:cf:e5:e6:18:35:8b:22:81:c4:2a:4e:
07:d4:1d:2a:8b:ca:4e:5c:91:0b:c5:e8:10:f2:29:2a:b4:fc:
a7:87:1d:27:d3:e3:5a:15:aa:b7:62:31:94:33:37:c6:15:97:
5a:c8:ed:23:9f:69:cf:d8:78:dc:96:85:8e:81:f9:ac:47:23:
3e:87:9d:8d:93:24:55:85:4c:e9:0a:40:fc:93:6d:4e:d2:4d:
ae:2b:52:9a:02:8f:90:65:6b:09:5f:70:bf:34:c0:db:8f:06:
2e:f4:fc:34:d6:0f:57:a8:80:f1:e8:64:2b:63:8b:7e:52:b1:
32:78:f0:13:57:82:99:88:61:1c:1b:d0:55:1d:fb:b1:74:a4:
c5:59:52:e7:f3:d8:73:2a:44:26:33:81:a0:81:84:8c:57:6f:
e2:d5:ba:c7:3b:22:32:11:f8:3e:f8:42:2f:bf:42:a7:66:1e:
4b:ca:49:a5:17:72:f3:e0:1a:fe:40:76:53:04:5b:c6:2f:bc:
8b:fe:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org