Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140477.roa
File: AS140477.roa (raw, json)
Hash identifier: TMed+zt7Czd6SW8MiryEaRSOMRY/E1kO9WAAi5dugRo=
Subject key identifier: 47:B8:BB:B0:D7:DA:D6:9B:9F:DE:BD:C1:A4:E3:2D:7C:54:06:9C:18
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 16890294372630204A7142C6667F59DE42F17B69
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140477.roa
Signing time: Tue 08 Mar 2022 02:15:02 +0000
ROA not before: Tue 08 Mar 2022 02:10:02 +0000
ROA not after: Tue 07 Mar 2023 02:15:02 +0000
asID: 140477
IP address blocks: 103.154.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:89:02:94:37:26:30:20:4a:71:42:c6:66:7f:59:de:42:f1:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 8 02:10:02 2022 GMT
Not After : Mar 7 02:15:02 2023 GMT
Subject: CN=47B8BBB0D7DAD69B9FDEBDC1A4E32D7C54069C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:53:c0:18:2a:69:f9:77:91:e1:65:2b:56:
48:f2:f8:a8:80:ca:d3:f0:7f:32:81:c7:ed:10:d9:
1e:39:26:b9:fb:a5:34:73:f5:d8:2a:ec:bc:ac:5a:
25:8f:83:e8:50:19:9e:21:f8:e6:52:60:62:db:ed:
38:7d:2c:1d:96:0a:14:c1:68:99:8e:d4:81:35:64:
e8:ca:91:bf:fb:14:4e:6c:f1:fe:a5:27:42:5e:bc:
1a:ea:02:ab:d0:86:74:3d:6d:67:70:6d:8c:c7:56:
a2:48:28:55:b5:02:d9:0b:66:3c:29:85:71:62:88:
d4:79:8c:bd:50:9d:e3:a6:a7:5f:04:56:0b:c3:c0:
09:7e:12:9c:70:7f:ff:65:b4:f8:66:b0:9d:b0:21:
ff:0e:0c:71:1d:51:f6:b0:a5:20:b8:f1:9b:36:72:
24:75:81:18:8c:30:26:d5:90:b4:e2:95:35:7c:74:
7a:bb:d5:7c:9e:9a:12:5a:3c:6c:b4:0e:b5:ce:cb:
1d:3a:54:91:b1:02:48:68:7f:72:a3:d0:26:53:57:
04:f2:c2:b6:ac:37:ab:d1:cf:40:b0:80:6d:1a:bd:
78:e2:a6:46:10:e8:05:12:78:61:27:fc:bc:59:aa:
f0:1c:4e:44:1f:f8:ab:2a:bf:08:1a:d8:65:b2:39:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:BB:B0:D7:DA:D6:9B:9F:DE:BD:C1:A4:E3:2D:7C:54:06:9C:18
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:02:98:a2:8a:a3:58:df:dd:20:68:b1:96:f5:9a:e5:ac:bb:
a3:16:84:56:69:2a:46:fd:72:e0:cc:4a:f1:d8:f3:fc:1b:9f:
8e:e0:a3:ad:7e:1e:d9:a9:08:e2:73:49:a2:be:b3:8a:25:bf:
1e:cf:eb:8d:57:23:a9:c0:21:67:45:c6:3f:30:5c:b9:1e:15:
d1:ac:e0:5e:cf:62:5c:c7:8b:0e:d5:7b:99:cf:7e:30:57:a1:
1a:c5:01:e2:89:55:a8:69:e4:4b:82:e7:c7:85:76:fa:b7:99:
6f:3f:a8:e1:84:03:e7:36:c8:ef:6e:a5:1d:90:ac:e1:73:98:
0f:82:99:49:ae:cd:2d:68:73:bd:cb:8c:39:c0:a4:87:70:d5:
27:0d:f1:fd:55:41:99:64:14:eb:21:24:6b:75:34:17:94:44:
02:86:a4:2c:a6:e0:ed:3a:77:75:31:61:94:aa:31:65:2c:4c:
35:31:dd:b4:3c:60:23:3e:9f:bb:9d:ac:66:bc:c5:5b:e1:69:
6b:f4:2f:d8:1d:38:ff:92:2d:02:36:56:5c:8d:f2:38:9b:e9:
df:7c:9a:53:58:43:ae:36:2a:ea:99:76:94:03:c7:7d:e6:3a:
29:27:0e:43:15:34:e3:cb:04:53:77:ff:dc:f0:df:8e:fa:bc:
f0:99:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-fra.rpki-client.org