Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa
File: 3130332e38392e342e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier: A1WV2oPDqFDJKA249qwPNpinJSipP4QnmhMQwtnjp6E=
Subject key identifier: B1:0C:3F:8A:62:17:05:6A:41:EC:15:3D:A0:19:7B:54:6B:7F:14:AB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4BA397222F12AD29F0225621330B5387B804C753
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa
Signing time: Sat 09 Oct 2021 04:00:01 +0000
ROA not before: Sat 09 Oct 2021 03:55:01 +0000
ROA not after: Sun 09 Oct 2022 04:00:01 +0000
asID: 133800
IP address blocks: 103.89.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a3:97:22:2f:12:ad:29:f0:22:56:21:33:0b:53:87:b8:04:c7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 9 03:55:01 2021 GMT
Not After : Oct 9 04:00:01 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:5f:40:ac:3c:5a:21:be:69:32:9a:65:18:
60:41:7c:cf:c1:49:8c:74:97:80:f4:9e:dc:a3:65:
cb:7e:b8:34:06:fe:00:ba:dc:be:92:76:01:9f:f2:
6e:b2:39:6d:4e:c4:db:27:61:8f:84:a4:a7:2b:71:
a3:86:14:a3:1f:53:86:34:55:45:a6:0f:47:fd:25:
ad:c9:cd:11:57:7f:bc:fe:e4:96:cf:d7:63:57:b2:
ae:1b:d0:5a:c9:fa:2d:42:2e:c8:06:36:6c:94:60:
c5:b4:59:58:72:86:cd:31:27:23:5c:f8:b9:61:13:
ae:40:60:72:d4:2f:ec:c5:58:82:97:de:8f:46:b1:
d4:01:30:64:7a:bf:9d:3f:2f:ad:67:7e:39:d0:f0:
c7:90:b5:18:ea:f1:a8:54:c9:e8:a7:a0:d2:08:6b:
d9:ed:9c:a1:3b:e7:9d:b0:8b:fe:0b:92:4d:a4:eb:
73:fa:f2:42:1a:ba:cf:52:e0:f0:c8:fe:ad:e1:15:
92:84:f9:21:dd:a0:b6:eb:ab:a7:cd:b6:45:6a:50:
77:26:28:88:05:89:a5:7c:44:96:d3:79:87:9c:75:
c6:08:f8:47:fd:77:e5:e3:cf:fd:b3:06:33:9a:6e:
83:5c:d1:3c:54:a8:c0:8f:36:ed:e9:20:3b:26:fc:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:3F:8A:62:17:05:6A:41:EC:15:3D:A0:19:7B:54:6B:7F:14:AB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a7:49:6c:3a:0e:8b:94:5f:67:78:f8:43:8d:d1:5d:e0:db:
eb:ee:23:21:8b:d0:03:99:57:ef:e2:e8:74:a2:e4:a9:a6:09:
7f:91:53:e2:14:de:94:94:f4:63:ee:c5:0c:cf:82:00:e7:b7:
be:7a:0a:30:1a:cf:e4:5d:84:2a:9f:5f:2f:12:5c:cb:a8:70:
1b:2d:59:1f:e7:7c:af:8e:06:3f:08:e3:94:d3:7d:42:f9:5e:
48:b7:4a:e2:12:ab:3c:5d:5a:e5:0f:56:45:89:41:23:43:87:
3a:d8:af:f0:fa:9e:69:e2:04:8e:a2:a5:4e:89:aa:28:b4:7f:
4f:f3:d9:03:94:0a:b5:30:e3:2c:60:66:2e:52:0f:59:e4:31:
bb:cd:01:85:8d:54:bf:bf:72:6c:6d:e0:fa:fe:aa:af:d9:15:
9a:3e:f6:bd:4d:68:d1:d8:ba:1e:2b:da:41:3f:2c:29:b2:6a:
cd:0b:1f:8b:d2:da:ae:63:4a:56:66:9a:b4:8b:53:6f:5d:61:
2c:c1:0b:11:e8:c4:1c:f0:5f:03:0a:53:03:ee:06:08:c3:8e:
df:ca:f8:69:18:09:5e:9c:da:1b:98:9d:67:ca:bf:80:19:47:
1f:9b:6a:e0:af:ae:cc:df:ff:f7:03:5e:d6:af:38:55:ee:68:
8c:5e:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org