Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32332e32302e302f32322d3234203d3e2030.roa
File: 3130332e32332e32302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: C0ru0L+m6qy+8Caeg26kFf7DVxEMfr0JM2WZepO6ZUo=
Subject key identifier: E2:DB:91:F7:62:4C:C1:32:71:A2:98:25:66:70:E0:D7:A0:BA:2A:7D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 54B668CF6AFB011C7084266812533F1D1A5BDA78
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32332e32302e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:19:46 +0000
ROA not before: Wed 02 Feb 2022 06:14:46 +0000
ROA not after: Thu 02 Feb 2023 06:19:46 +0000
asID: 0
IP address blocks: 103.23.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b6:68:cf:6a:fb:01:1c:70:84:26:68:12:53:3f:1d:1a:5b:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:14:46 2022 GMT
Not After : Feb 2 06:19:46 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:c2:6c:ba:64:92:dc:6d:ce:b9:db:13:81:
b6:3c:3e:a9:77:e3:7a:91:a1:fa:1a:ea:ec:41:22:
51:b6:cd:19:4e:48:bd:27:f0:b1:81:2a:54:60:49:
a6:e2:14:be:2c:48:b9:4f:d0:16:6b:24:e7:02:3a:
ae:09:27:09:9c:42:2f:cb:79:98:95:a5:e0:ad:ab:
36:a6:c6:f5:5d:c3:4d:c0:19:b6:27:76:d0:f4:9a:
2e:4e:53:c8:ad:c9:54:36:4a:6e:04:72:5b:82:d3:
ab:be:13:00:db:79:c8:1c:fe:64:d3:a6:3c:f2:58:
bf:d2:11:2f:6f:94:b8:94:1a:cb:25:2e:d3:9d:dc:
6b:f3:0c:63:41:af:94:1e:07:fd:23:ce:56:38:56:
42:03:17:8c:5a:fc:87:44:7c:b7:ea:b7:d1:b1:7f:
43:aa:d1:ff:7b:c4:1d:d8:02:f2:cf:af:9b:0e:55:
77:42:91:1c:2a:8d:d0:0d:f0:e5:0b:f1:27:19:a2:
9c:39:bb:f3:97:a4:9d:9a:d6:28:f9:28:e7:f3:e5:
96:74:cb:c2:74:8a:9b:f2:dd:45:f7:fc:f5:a9:90:
e3:30:62:f0:66:50:12:8e:c5:c8:e1:17:86:ad:01:
dd:8e:c7:fb:9c:ee:58:ec:8f:3b:50:db:94:6b:86:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:91:F7:62:4C:C1:32:71:A2:98:25:66:70:E0:D7:A0:BA:2A:7D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32332e32302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.20.0/22
Signature Algorithm: sha256WithRSAEncryption
33:50:9d:14:a8:f4:be:c3:1f:a9:5f:9c:a4:c0:32:34:d5:50:
95:6e:30:d5:82:51:c7:6e:18:66:86:19:a9:45:36:c5:5b:a7:
1b:9c:d2:5c:d7:33:c3:e4:ef:30:ad:5e:fd:89:e7:0c:af:37:
8b:44:85:8a:ef:14:26:c6:76:d4:7b:37:08:27:f7:4a:fc:0c:
b9:84:ec:6b:2c:93:bc:26:4b:53:b4:54:c1:32:49:39:14:9c:
72:34:33:4b:93:44:f7:f2:bb:bb:41:80:92:24:59:30:b6:a4:
9b:48:59:56:ed:4c:64:d3:3b:76:61:c1:d6:1f:66:47:d5:4d:
65:c9:5a:c9:df:73:b2:b3:00:29:94:61:aa:95:e4:0c:95:bf:
f1:79:57:f4:02:a2:19:23:b9:ee:91:be:99:97:cb:36:03:50:
04:48:45:b6:67:78:a0:33:cf:77:7f:8c:5d:ef:b7:db:71:07:
7a:22:03:60:1c:7d:2c:22:97:48:57:6a:82:28:16:1a:c9:50:
16:bb:a3:b6:65:98:5e:7c:56:10:fb:52:a1:0a:e7:d5:dd:6b:
bd:55:9e:63:f2:45:0d:6b:2a:94:29:df:95:cb:83:1e:14:3a:
a0:10:89:14:c1:d2:d8:01:c2:fb:97:05:fa:93:c1:ec:d2:a9:
32:42:29:ef
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUVLZoz2r7ARxwhCZoElM/HRpb2ngwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIwMjA2MTQ0NloX
DTIzMDIwMjA2MTk0NlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNUEwQzI2Q0JBNjQ5MkRDNkRDRUI5REIxMzgxQjYzQzNFQTk3N0UzN0E5
MUExRkExQUVBRUM0MTIyNTFCNkNEMTk0RTQ4QkQyN0YwQjE4MTJBNTQ2MDQ5QTZF
MjE0QkUyQzQ4Qjk0RkQwMTY2QjI0RTcwMjNBQUUwOTI3MDk5QzQyMkZDQjc5OTg5
NUE1RTBBREFCMzZBNkM2RjU1REMzNERDMDE5QjYyNzc2RDBGNDlBMkU0RTUzQzhB
REM5NTQzNjRBNkUwNDcyNUI4MkQzQUJCRTEzMDBEQjc5QzgxQ0ZFNjREM0E2M0NG
MjU4QkZEMjExMkY2Rjk0Qjg5NDFBQ0IyNTJFRDM5RERDNkJGMzBDNjM0MUFGOTQx
RTA3RkQyM0NFNTYzODU2NDIwMzE3OEM1QUZDODc0NDdDQjdFQUI3RDFCMTdGNDNB
QUQxRkY3QkM0MUREODAyRjJDRkFGOUIwRTU1Nzc0MjkxMUMyQThERDAwREYwRTUw
QkYxMjcxOUEyOUMzOUJCRjM5N0E0OUQ5QUQ2MjhGOTI4RTdGM0U1OTY3NENCQzI3
NDhBOUJGMkRENDVGN0ZDRjVBOTkwRTMzMDYyRjA2NjUwMTI4RUM1QzhFMTE3ODZB
RDAxREQ4RUM3RkI5Q0VFNThFQzhGM0I1MERCOTQ2Qjg2MkI1RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloMJsumSS3G3OudsTgbY8
Pql343qRofoa6uxBIlG2zRlOSL0n8LGBKlRgSabiFL4sSLlP0BZrJOcCOq4JJwmc
Qi/LeZiVpeCtqzamxvVdw03AGbYndtD0mi5OU8ityVQ2Sm4EcluC06u+EwDbecgc
/mTTpjzyWL/SES9vlLiUGsslLtOd3GvzDGNBr5QeB/0jzlY4VkIDF4xa/IdEfLfq
t9Gxf0Oq0f97xB3YAvLPr5sOVXdCkRwqjdAN8OUL8ScZopw5u/OXpJ2a1ij5KOfz
5ZZ0y8J0ipvy3UX3/PWpkOMwYvBmUBKOxcjhF4atAd2Ox/uc7ljsjztQ25Rrhitf
AgMBAAGjggH0MIIB8DAdBgNVHQ4EFgQU4tuR92JMwTJxopglZnDg16C6Kn0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB4BggrBgEF
BQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMjMzMmUzMjMwMmUzMDJmMzIzMjJk
MzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnFxQwDQYJKoZIhvcNAQELBQADggEB
ADNQnRSo9L7DH6lfnKTAMjTVUJVuMNWCUcduGGaGGalFNsVbpxuc0lzXM8Pk7zCt
Xv2J5wyvN4tEhYrvFCbGdtR7Nwgn90r8DLmE7Gssk7wmS1O0VMEySTkUnHI0M0uT
RPfyu7tBgJIkWTC2pJtIWVbtTGTTO3ZhwdYfZkfVTWXJWsnfc7KzACmUYaqV5AyV
v/F5V/QCohkjue6RvpmXyzYDUARIRbZneKAzz3d/jF3vt9txB3oiA2AcfSwil0hX
aoIoFhrJUBa7o7ZlmF58VhD7UqEK59Xda71VnmPyRQ1rKpQp35XLgx4UOqAQiRTB
0tgBwvuXBfqTwezSqTJCKe8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org