Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e39352e302f32342d3234203d3e2030.roa
File: 3130332e3230392e39352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: TtywSCRVA9WEzT5ZpVoL87DXCzLROwLfHNPF/Gt0tRQ=
Subject key identifier: 99:3E:16:6F:AA:09:57:3B:6B:39:30:69:80:60:4A:20:0D:C0:10:06
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 03BDDB413842640DCCA17419B8DBB1E385F1B6F3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e39352e302f32342d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:31:49 +0000
ROA not before: Wed 02 Feb 2022 06:26:49 +0000
ROA not after: Thu 02 Feb 2023 06:31:49 +0000
asID: 0
IP address blocks: 103.209.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bd:db:41:38:42:64:0d:cc:a1:74:19:b8:db:b1:e3:85:f1:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:26:49 2022 GMT
Not After : Feb 2 06:31:49 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:75:3b:60:7f:f7:3c:6e:70:95:f0:e6:71:
d7:84:5a:04:f6:ee:6c:46:a8:b6:63:f8:89:4a:35:
6c:8e:f5:7d:ad:08:df:e3:41:99:46:a7:91:68:96:
67:d8:16:57:28:c0:66:67:b7:44:ca:b6:bc:b4:ef:
57:9c:68:6a:99:0b:a9:3e:66:ee:3c:e7:a7:53:df:
c5:3f:d1:83:a2:8f:4b:51:fa:de:14:90:b8:eb:ae:
9c:67:84:07:68:01:b5:51:0f:e3:53:90:ac:1c:f4:
72:ed:95:d4:0f:c2:f3:b1:1c:05:24:ec:37:6b:8e:
f8:63:6f:93:03:74:ad:05:46:94:27:c0:51:0b:3d:
00:e0:2e:79:db:73:0b:e6:e7:76:47:3b:f4:a3:5e:
34:51:2a:25:8a:f2:e1:ff:24:7f:76:39:66:7f:38:
ae:f8:d6:46:27:48:04:5b:a2:45:e7:c7:b6:f4:79:
e8:4e:bb:ae:00:95:a6:75:c2:76:16:7d:98:e1:78:
ad:78:db:29:7e:dd:7b:58:6f:fe:ea:bc:8b:5c:7e:
8d:26:f6:be:cb:79:d0:2e:35:96:58:e6:cd:74:9e:
d0:ab:49:3d:15:50:34:c5:a9:85:9d:90:51:67:b4:
06:40:bf:e5:a8:b6:d2:88:b7:08:5a:b7:ec:0d:ac:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:16:6F:AA:09:57:3B:6B:39:30:69:80:60:4A:20:0D:C0:10:06
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230392e39352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.95.0/24
Signature Algorithm: sha256WithRSAEncryption
61:15:fb:db:5d:8c:e8:7a:50:3d:fd:1f:db:b7:f5:4e:94:dd:
c4:47:87:65:9a:f7:5a:25:99:2f:0f:26:06:a1:c6:7f:c0:2a:
61:6a:a3:2d:54:24:fa:45:a5:f7:c3:20:4c:de:41:3d:2d:67:
01:01:ca:5e:ce:ac:fd:9b:c9:1a:4b:f3:b0:59:19:5c:bb:f5:
4f:68:ca:dc:4a:a1:63:f9:28:38:7e:49:6c:98:2a:02:4b:63:
4a:dd:81:c4:16:85:41:c2:cf:7d:81:cb:a0:ad:8a:b5:59:42:
ac:a9:f9:93:43:3d:01:97:57:6f:33:18:85:be:52:b1:d5:c9:
dc:61:80:07:5e:92:52:f2:37:f7:83:b1:a9:bd:60:c3:4b:92:
88:62:f6:8c:fc:2b:e5:3d:db:11:62:90:d7:20:6b:94:52:1b:
17:91:42:47:76:c0:ad:dd:19:f1:b2:66:5e:db:7a:b9:73:d7:
66:b3:8a:db:08:1e:3a:47:c2:28:61:ca:6c:b7:a3:80:0b:4a:
62:dc:ac:d0:08:f8:29:d2:12:0c:37:b7:87:d1:fb:87:d3:27:
66:bf:2e:b2:ad:f6:1a:47:a6:94:da:79:fb:25:1b:c7:27:00:
fd:c3:60:48:29:0a:15:1d:6b:f8:ba:19:2b:d3:94:11:86:f4:
db:fe:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org