Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa
File: 3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: 4M0TTntNJ8gYnxsmyuJ1h/YqqFG1jn3edPIJg+7An4Q=
Subject key identifier: 1A:BF:9F:56:41:AA:39:1C:4C:1D:99:80:BD:10:3A:FA:54:14:E7:43
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 14D6CC1C83A801F632C83E1F191084EDB86F6039
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa
Signing time: Tue 04 Jan 2022 07:31:22 +0000
ROA not before: Tue 04 Jan 2022 07:26:22 +0000
ROA not after: Wed 04 Jan 2023 07:31:22 +0000
asID: 140443
IP address blocks: 103.178.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d6:cc:1c:83:a8:01:f6:32:c8:3e:1f:19:10:84:ed:b8:6f:60:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 4 07:26:22 2022 GMT
Not After : Jan 4 07:31:22 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:6c:95:4e:3e:9c:2c:2c:96:a3:2d:d5:d4:
35:d7:96:1b:21:60:f5:03:92:c3:bf:57:b7:4a:d9:
c0:fb:6c:33:6d:ff:a1:15:9d:14:52:21:5b:1c:26:
76:84:d7:14:cb:d1:bf:0f:40:03:18:62:a2:4b:c7:
8d:a1:d1:ff:c4:36:72:76:fa:a3:31:66:96:93:a5:
f4:85:1b:69:0a:fc:ab:e7:76:2d:74:6f:13:e6:14:
4a:fd:be:dc:55:e7:9c:29:ca:70:4f:62:ce:18:58:
21:d4:a1:e8:66:77:cc:64:f8:f6:a4:5e:ab:ec:69:
a5:54:fb:e4:04:7c:ff:85:5c:6e:99:05:4e:82:d2:
a5:59:81:35:36:23:2b:45:bd:5b:bc:9c:c3:7f:7d:
5b:21:ce:70:52:7c:44:dd:c1:55:47:3c:37:ac:b7:
db:9a:10:8c:2f:aa:5c:1b:1b:0e:28:28:71:4b:0e:
fe:d6:d3:6b:79:13:c9:fe:34:09:e4:9d:d0:35:27:
df:43:63:dc:d8:d6:70:76:c3:44:21:a1:1e:9a:1f:
a0:4e:a0:b8:2e:72:64:37:15:6b:12:bd:6f:8d:ed:
e3:77:2a:1c:c5:bc:cb:4c:70:98:42:78:ef:73:73:
ce:cc:48:c2:13:18:eb:14:6d:a2:9f:06:03:1c:d9:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:9F:56:41:AA:39:1C:4C:1D:99:80:BD:10:3A:FA:54:14:E7:43
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
49:37:05:68:ce:ee:e0:2b:c2:4e:46:df:70:b5:27:aa:ee:a4:
a6:a1:42:a4:d9:8e:9a:dd:c8:8c:12:6e:23:f8:d3:1d:c4:78:
9a:ae:fc:e2:58:52:e9:fc:fe:18:3a:91:3c:e9:d1:12:b9:1b:
73:67:c4:a2:06:75:b1:ac:c0:44:a7:7f:e6:93:5e:c9:22:6e:
76:0e:2f:c9:ed:71:dd:23:ea:c7:28:c1:4c:11:95:bd:5b:ba:
36:fc:e3:71:9c:b8:66:9a:41:65:d9:19:1b:ab:14:6c:90:a7:
b7:00:66:85:f7:4c:f6:20:6d:53:23:c6:a8:f3:2c:4e:6a:90:
8f:91:ff:72:f5:7a:96:cb:f0:8d:28:cd:2c:38:b7:1b:d8:6c:
a5:87:65:6f:fb:75:d6:b5:56:c0:bf:48:48:b2:7e:1e:68:17:
69:5b:e8:11:65:49:e7:04:e6:fd:27:6f:63:85:0f:bf:80:88:
74:e2:57:f8:ac:ba:d2:e2:40:78:cd:dd:60:6d:ad:fc:fd:d7:
cf:ca:11:12:d3:f6:d0:82:b9:2f:e6:25:2c:77:26:49:d0:5f:
3a:b4:7a:60:78:91:90:08:c6:3f:65:de:5c:b5:f3:91:2e:1b:
b1:7b:a1:50:a1:77:fc:1d:00:e8:1f:8d:bf:81:0e:04:14:48:
98:68:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org