Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147120.roa
File: AS147120.roa (raw, json)
Hash identifier: BjWJaZKtjg7fDNiKW1Avrs01v9mMqVWHQItT13xwk8U=
Subject key identifier: ED:AE:BC:B1:F8:C7:39:9E:98:FB:DB:FB:C3:A4:F9:2C:01:7E:A4:25
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 64D3A2CA00075DEAE4330E26F0E790931796331D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147120.roa
Signing time: Tue 08 Mar 2022 02:15:24 +0000
ROA not before: Tue 08 Mar 2022 02:10:24 +0000
ROA not after: Tue 07 Mar 2023 02:15:24 +0000
asID: 147120
IP address blocks: 103.175.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d3:a2:ca:00:07:5d:ea:e4:33:0e:26:f0:e7:90:93:17:96:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 8 02:10:24 2022 GMT
Not After : Mar 7 02:15:24 2023 GMT
Subject: CN=EDAEBCB1F8C7399E98FBDBFBC3A4F92C017EA425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:87:57:d8:54:e1:ab:08:8d:f1:b7:4a:0e:
a1:da:73:a1:55:7f:d1:de:eb:fd:4d:fd:de:1b:61:
93:37:b2:13:8f:11:69:3f:05:74:8b:f1:e6:5a:ef:
41:b6:74:f9:87:59:fe:00:c7:bc:d5:4a:c9:78:2f:
72:d7:15:65:f9:ad:22:cf:84:64:c0:70:34:2d:2f:
78:71:79:4c:32:fd:31:41:ce:ff:b0:35:14:c9:d2:
5d:77:81:7c:a9:49:ab:e3:21:b5:9a:8f:8d:5b:08:
e3:75:36:9d:0a:7d:8b:f4:98:d3:b4:c6:83:3b:d3:
cf:a9:e7:8b:77:60:b2:fe:a4:54:84:cb:45:64:c4:
a9:43:b0:48:ea:4c:b4:e7:b3:d1:54:5e:73:d9:ba:
06:06:63:1e:2c:76:5c:6e:ba:4a:14:8c:67:96:f8:
31:06:61:91:46:06:43:ca:9f:eb:e1:b0:5b:96:2a:
d0:73:40:86:ee:e5:d5:2e:79:ef:da:58:41:8e:f8:
57:65:27:f4:38:a1:4f:eb:69:3c:3d:46:5f:38:3a:
4c:b9:74:0a:03:35:a1:87:15:a3:7f:98:18:62:10:
f4:84:50:67:6e:28:81:7e:cd:07:74:2f:52:e2:8d:
93:7b:d9:d8:6a:05:4d:f1:41:21:a3:f7:5d:06:12:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:BC:B1:F8:C7:39:9E:98:FB:DB:FB:C3:A4:F9:2C:01:7E:A4:25
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:6f:fa:ae:15:72:58:29:83:a9:d2:4d:4e:db:03:22:c3:c6:
34:0e:30:a8:7d:c3:af:62:1b:e9:99:90:6a:4b:2d:dd:e1:40:
3b:f7:6b:91:93:cc:e1:70:a9:f0:5d:0d:b2:94:89:65:88:36:
c5:d0:e2:ab:1f:9e:e3:55:5f:5d:b9:6b:e4:b9:9f:4d:10:8c:
99:5e:1d:5b:cb:4b:f7:bc:55:2d:c5:53:82:7d:03:38:bf:d1:
7b:53:cc:b7:53:17:72:05:16:16:f5:90:94:e9:d7:aa:1f:34:
7a:a0:c4:3b:42:5e:71:2d:65:d3:da:a2:e9:6a:bb:4d:90:6d:
22:76:08:42:f8:85:67:75:e5:bd:5c:38:85:53:2e:e3:84:14:
51:5c:58:b0:87:25:16:91:1d:47:4a:9d:39:52:62:7f:e5:64:
3c:ca:85:15:53:54:db:eb:0b:e0:2f:26:6f:83:90:b4:d5:e3:
8b:25:67:7d:ca:66:f5:37:c3:9c:46:cb:d0:71:89:c3:17:fc:
5b:56:ff:10:4a:9f:c8:05:ae:99:4b:d3:43:c5:a6:95:0f:df:
2d:7c:32:ba:d4:8e:84:ce:ce:38:64:7f:a7:0a:f0:ae:00:15:
53:f5:5e:ce:fe:4c:ea:ca:40:ed:15:52:5f:e3:65:08:d6:69:
25:c7:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org