Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
File: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (raw, json)
Hash identifier: wuih5AsLNOoqn5ae7GgepHc/lzknV+3U/H+PqXc57xU=
Subject key identifier: A8:37:A5:4D:F1:A4:3F:26:84:73:A5:73:89:7A:5C:A3:21:75:9E:6A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 55F908BAA793DDD6C3F054ACD6CBAF79EAF0494A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
Signing time: Mon 06 Sep 2021 04:12:47 +0000
ROA not before: Mon 06 Sep 2021 04:07:47 +0000
ROA not after: Tue 06 Sep 2022 04:12:47 +0000
asID: 133355
IP address blocks: 103.209.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f9:08:ba:a7:93:dd:d6:c3:f0:54:ac:d6:cb:af:79:ea:f0:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 6 04:07:47 2021 GMT
Not After : Sep 6 04:12:47 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:20:51:e2:d3:18:66:11:c0:49:4c:aa:69:
94:e1:1d:8f:39:e1:8a:ed:f3:f8:ce:e7:ed:25:2f:
a1:0f:2a:6b:ce:ed:e5:42:86:d6:93:9b:cb:ba:a2:
98:18:50:08:f8:a5:74:9f:e0:82:58:bc:1e:c3:c3:
20:4b:0b:3c:a3:02:08:83:5e:58:70:a8:51:a3:4e:
33:b5:a5:f6:d5:3f:0d:be:1c:82:45:13:a7:23:36:
7a:25:07:00:34:cf:51:29:8f:8d:aa:fb:3e:12:f2:
28:70:b4:c6:f5:86:85:e9:15:68:ad:bf:4d:b9:07:
38:23:e9:6e:23:f7:51:0c:85:d0:31:bd:7b:79:9e:
1c:34:36:7c:b2:9c:c0:cd:15:c9:90:e9:78:59:44:
d0:b6:a0:9f:54:11:09:95:1f:ab:da:78:b2:fe:00:
8d:49:68:f3:7f:d8:63:17:7c:78:e0:53:e3:7b:a4:
e2:c6:00:6a:da:9b:0c:7b:e8:53:0c:76:75:38:84:
76:c0:33:4e:f1:1d:e8:c1:c6:10:a9:e7:01:dd:7f:
36:da:20:fb:56:de:cf:c7:cb:56:99:80:f1:68:6e:
44:86:ed:7b:dd:b8:26:b9:b1:cb:c6:b7:aa:8a:60:
8e:82:5f:a6:30:a8:df:db:dc:45:03:65:fc:a4:94:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:A5:4D:F1:A4:3F:26:84:73:A5:73:89:7A:5C:A3:21:75:9E:6A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f3:56:46:81:4e:fd:b2:8e:d0:37:e1:1c:65:da:5c:51:b9:
2b:31:24:37:54:99:a8:d4:c7:97:97:7b:51:c9:5a:bc:38:d1:
94:e4:f0:63:24:40:cb:7d:a1:a7:a8:6a:a7:0c:58:15:31:7c:
51:bb:f7:67:9b:f1:2c:2d:41:b8:5a:09:6f:e6:70:dd:52:f0:
fd:bd:6c:59:84:23:cb:51:f7:37:87:44:fd:c6:d7:ac:a8:8c:
4d:a4:6e:ee:cd:1d:cd:6e:af:e5:d2:18:dc:74:a4:a8:2a:83:
fe:36:55:58:7a:11:3d:e0:84:45:64:8a:63:20:0c:19:57:cc:
de:62:81:93:29:e4:42:7d:b7:85:87:4f:74:d6:cd:e4:41:ca:
de:e5:b5:66:5a:fc:cf:39:76:18:bd:6a:e6:83:bc:96:4d:65:
0e:af:4d:4f:0d:a9:ed:62:93:d1:6d:82:c4:9e:a2:ba:c1:2c:
b2:d3:8f:a7:ce:38:52:c5:56:97:33:42:b1:7f:20:2d:c7:07:
70:86:77:b0:41:81:e5:bc:63:e4:fd:29:07:08:af:70:fe:84:
95:ea:52:da:93:aa:fe:21:f2:51:56:d8:c2:34:c1:dc:fb:f8:
8f:fb:ba:1a:21:db:e7:6e:67:f8:9d:75:5b:82:f6:e7:90:e2:
64:91:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org