Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3130342e302f32332d3234203d3e2030.roa
File: 3130332e34392e3130342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: Lobz9SAujp8YDXQCFnmD6ds+x3h5KWlqdIJJR6JXf+8=
Subject key identifier: 2B:2C:E2:11:2B:43:65:E0:C4:92:20:7E:FE:EB:80:BE:6D:51:0A:17
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4D379FF61346E3B660B34AF1700E7BECF74256CA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3130342e302f32332d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:18:33 +0000
ROA not before: Wed 02 Feb 2022 06:13:33 +0000
ROA not after: Thu 02 Feb 2023 06:18:33 +0000
asID: 0
IP address blocks: 103.49.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:37:9f:f6:13:46:e3:b6:60:b3:4a:f1:70:0e:7b:ec:f7:42:56:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:13:33 2022 GMT
Not After : Feb 2 06:18:33 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:c8:87:bb:83:9d:70:7d:88:4a:91:f0:b1:
6c:eb:3c:de:e4:09:69:07:8e:49:db:e0:49:5a:85:
38:c1:c6:79:03:26:4b:81:d3:34:ef:fc:d2:c5:ff:
6a:d4:50:ba:1f:5c:54:0f:b2:2d:0c:88:7f:68:c9:
90:e8:c9:ca:72:c2:f8:1c:b1:d5:53:e8:5e:3f:65:
42:6d:7d:a4:92:4a:eb:12:5c:f3:13:33:3c:2f:8e:
6a:ed:d1:56:bd:32:33:90:89:58:c4:6d:d7:45:64:
4f:cf:f5:e9:ea:50:cb:15:0a:be:53:13:71:0d:26:
fa:b7:70:c7:05:79:25:e9:34:26:f3:ff:3a:7b:50:
02:b1:b2:e8:fb:ed:4f:5d:c8:44:78:3c:e9:94:83:
ad:5d:a6:80:08:ee:16:38:fa:ba:27:ab:58:8c:c4:
5a:7a:d3:67:fc:e0:09:7e:3f:1c:58:e1:de:37:71:
63:2a:c7:90:44:b2:0d:c4:0c:75:e0:25:49:53:c8:
66:a8:2e:21:7c:e1:d4:8b:c4:34:f3:f8:9c:44:d9:
34:25:ec:05:02:57:bd:4d:23:25:36:07:d2:9b:e9:
d1:6d:96:38:2c:87:ed:f9:12:46:6f:94:30:ed:6b:
21:86:bf:c7:42:53:a4:3a:ef:6b:6e:84:04:8e:80:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:E2:11:2B:43:65:E0:C4:92:20:7E:FE:EB:80:BE:6D:51:0A:17
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e34392e3130342e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.104.0/23
Signature Algorithm: sha256WithRSAEncryption
70:29:40:a9:52:84:97:ef:0e:cf:89:4b:68:57:46:3b:28:8e:
43:b6:21:e9:31:76:92:62:97:69:cc:e3:88:c7:a1:9c:33:46:
f7:2a:66:c1:f0:bd:7c:d7:25:6a:bd:92:b7:6b:3f:2c:9e:df:
64:9c:6b:65:01:62:bd:fa:a5:ba:47:54:6c:7c:c3:57:b3:c3:
d3:20:be:68:85:06:76:ae:74:57:03:b7:cc:16:96:10:92:02:
4f:26:7a:8f:2e:9a:d8:48:16:a8:94:da:a4:ed:eb:88:ed:1c:
f9:cb:87:9b:93:9e:62:ae:f9:81:fe:77:91:3a:ac:21:90:cd:
98:78:05:f0:2a:6d:f6:e1:5c:74:33:b3:5a:90:77:97:e7:e6:
a3:37:15:51:58:48:f8:42:d1:85:aa:7e:e3:ba:62:d1:29:88:
1b:1c:ac:5b:bf:16:6e:77:02:f4:2a:8e:a9:08:56:ae:d6:58:
ab:67:b9:b0:0f:8b:c5:be:0f:70:82:ce:d7:04:2a:cc:e8:62:
3b:af:cc:e1:24:4f:aa:3c:98:1d:d5:a7:5b:ad:7e:ea:cf:76:
e1:af:e1:38:78:a8:38:67:4f:f5:0d:75:44:d5:d6:3f:22:39:
89:8e:2e:ec:23:c5:c0:9d:f6:7a:fd:54:40:86:a7:0e:12:df:
bd:dc:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org