Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138876.roa
File: AS138876.roa (raw, json)
Hash identifier: OZMA4AgjCaKmnxcGWRbHyvGaJB0yQ4n2IsBbQrMBFyY=
Subject key identifier: 0C:B8:FD:4F:53:6F:BA:8F:CA:E6:B0:8C:75:08:DD:21:8F:EC:11:BE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 64675C1009B08E300907F3EE5118A62AD099C9BE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138876.roa
Signing time: Thu 26 Jan 2023 09:52:16 +0000
ROA not before: Thu 26 Jan 2023 09:47:16 +0000
ROA not after: Thu 25 Jan 2024 09:52:16 +0000
asID: 138876
IP address blocks: 103.140.90.0/23 maxlen: 24
2001:df0:b580::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:67:5c:10:09:b0:8e:30:09:07:f3:ee:51:18:a6:2a:d0:99:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 26 09:47:16 2023 GMT
Not After : Jan 25 09:52:16 2024 GMT
Subject: CN=0CB8FD4F536FBA8FCAE6B08C7508DD218FEC11BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:13:96:90:57:c2:95:ce:c8:9c:df:b8:1d:
02:aa:f0:ef:ea:cc:f0:87:c4:e3:e7:95:0e:cc:af:
1f:43:11:ad:e8:c8:08:ee:fd:06:ca:51:4c:c5:59:
ca:2a:92:cf:43:a0:96:95:52:de:4b:98:d7:8c:c4:
59:d8:e1:b8:4e:d6:fe:0c:44:62:8c:b6:3d:fc:80:
58:2d:8c:d3:24:63:27:21:4e:48:9c:bf:cb:55:1a:
d7:c2:02:e2:8d:1a:13:ef:4e:a5:e1:62:23:04:4f:
22:13:ad:b8:90:28:d4:b0:1b:d9:21:e1:38:1f:0c:
e2:87:77:93:85:35:4d:7e:e4:91:8b:77:05:e7:a6:
a4:35:d4:86:c8:3b:4d:f4:ec:60:e9:67:72:ba:11:
f3:cb:07:6e:cf:50:60:2e:c1:14:ed:4b:28:14:6f:
57:77:b2:f9:27:79:78:0a:34:d1:16:7f:dc:af:e6:
a1:a6:15:50:94:19:34:57:94:33:e6:36:ae:5c:97:
7c:f3:15:22:45:ee:8f:dc:a4:61:88:90:57:d7:82:
e9:d2:de:eb:2f:90:d1:2c:63:fe:69:07:32:01:2a:
cf:9f:ed:e7:18:cf:6c:5b:ad:88:e8:ea:11:57:05:
95:f5:2e:c1:41:9d:c9:7f:e8:8d:30:05:d2:6d:90:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:FD:4F:53:6F:BA:8F:CA:E6:B0:8C:75:08:DD:21:8F:EC:11:BE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.90.0/23
IPv6:
2001:df0:b580::/48
Signature Algorithm: sha256WithRSAEncryption
19:24:9f:6e:bf:75:af:05:f2:cc:8d:36:cf:57:b7:ba:84:9f:
83:9a:35:2e:13:e5:67:6a:23:b2:85:18:61:fd:30:e3:a2:33:
f6:20:b5:4a:d0:49:a6:f0:24:56:bd:ec:17:21:4e:25:33:5a:
25:c3:7b:9d:53:d3:d4:ee:66:b0:09:5a:36:54:42:67:5d:ca:
ef:0e:cc:89:ac:36:3b:1e:cb:be:cd:78:a9:5f:26:d3:b0:43:
b9:6b:2c:bf:29:88:bc:ce:c5:f9:1b:a3:25:78:96:55:c6:32:
6a:bd:31:5b:87:9b:6d:9d:4e:61:e3:21:0f:08:50:23:e8:49:
1f:2c:b5:d0:c7:ba:4e:71:81:43:fc:76:6d:55:31:23:32:f0:
aa:45:1b:cb:65:f8:f0:36:29:fd:a3:71:ed:3d:28:23:86:0e:
4e:69:3a:74:d9:93:eb:a2:82:58:cb:07:45:3d:36:55:5b:96:
e9:6f:31:ba:7a:7d:90:d6:fd:81:d5:c9:c5:a7:c6:6b:dc:68:
51:bd:7f:02:bd:d3:dd:f0:e6:00:97:3b:a8:19:9d:54:87:9d:
cc:16:a3:e1:cc:1e:09:be:cf:dd:06:c3:e6:d3:ce:ac:e6:e0:
50:ad:29:b7:50:aa:92:23:f9:eb:f6:30:8b:80:d7:aa:f4:4f:
66:5b:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org