Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa
File: AS149692.roa (raw, json)
Hash identifier: UL5r1A/qROxqwCjuFcKF2+wUc3TRgW46sUO1M6otteI=
Subject key identifier: F3:67:90:6E:C3:42:75:E3:F4:DD:B1:6A:EE:FC:36:26:99:47:82:44
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 59B9A62039179B9C0A6E1FAED44DBF91F8A4AA4A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa
Signing time: Tue 07 Jun 2022 03:07:15 +0000
ROA not before: Tue 07 Jun 2022 03:02:15 +0000
ROA not after: Tue 06 Jun 2023 03:07:15 +0000
asID: 149692
IP address blocks: 103.186.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b9:a6:20:39:17:9b:9c:0a:6e:1f:ae:d4:4d:bf:91:f8:a4:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 7 03:02:15 2022 GMT
Not After : Jun 6 03:07:15 2023 GMT
Subject: CN=F367906EC34275E3F4DDB16AEEFC362699478244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:9b:9b:40:af:4f:52:8c:89:4e:02:31:56:
c0:ae:54:22:ac:ee:78:4f:a6:ec:c6:fe:16:e8:26:
3a:dd:35:21:62:5c:48:57:07:db:8e:06:80:13:65:
cf:3d:b5:cd:b8:05:82:e6:f5:1d:2f:88:8f:b5:53:
70:e1:95:3d:ec:ce:ce:d4:2c:81:67:22:e7:46:b9:
56:80:38:e3:f7:1d:cb:05:ab:ea:51:04:b7:77:ce:
6e:bd:23:93:2d:bb:30:c1:f2:36:e8:c0:4f:78:eb:
60:86:96:ca:d0:2d:3a:b4:5a:6f:34:f4:78:1b:25:
6f:85:2f:c1:7e:1e:92:04:db:fe:90:ea:49:c4:b7:
60:d9:1c:9f:7e:55:f9:dd:3b:88:c7:94:af:73:e5:
e6:f5:00:82:13:63:5b:1c:d1:1a:11:45:2e:a5:93:
99:92:2d:07:a0:d0:e7:0c:49:45:7e:f3:ad:ea:e2:
e8:55:56:4b:fa:0b:08:26:38:65:7c:87:83:e1:96:
51:65:93:c4:e6:83:e9:a6:39:19:33:95:aa:71:a0:
9e:84:c7:05:91:12:28:4f:b4:bf:70:54:76:43:c6:
33:10:87:38:ca:30:25:f5:86:2d:6e:3e:08:3d:40:
94:7e:40:c1:e4:fb:25:3f:5f:f9:59:29:b1:df:74:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:90:6E:C3:42:75:E3:F4:DD:B1:6A:EE:FC:36:26:99:47:82:44
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e3:66:71:66:0f:5d:fb:22:a3:7a:1e:61:d2:8e:e6:8a:b0:
e8:25:7f:aa:d0:de:5a:17:72:26:bf:2e:d6:ae:da:41:ce:b6:
39:6f:81:23:fe:7b:5f:6c:0a:86:5e:c0:a3:a4:92:0d:e6:1c:
9f:74:5a:c9:d3:d6:61:80:5d:ff:a6:73:3e:c4:87:2c:a7:20:
54:b6:2c:98:46:91:e4:9a:2d:f3:17:d8:35:6c:a3:72:9c:7d:
7e:54:3f:41:56:7c:00:4e:47:1d:30:15:19:93:ee:1d:05:22:
df:5b:1a:de:d6:33:6f:b7:87:69:50:07:87:ac:5c:f0:e3:82:
4b:68:4d:7c:0e:90:cb:c8:ef:e9:f9:38:d4:71:bd:a6:57:c5:
9d:52:13:8a:cc:b1:55:b6:19:c0:a7:60:20:6c:21:b7:ef:c4:
73:d6:5e:3a:d4:ba:c1:d0:a3:4a:d1:5e:19:07:34:39:b4:95:
5c:6a:41:47:ca:ac:bd:6b:58:fd:2c:3e:f5:ac:92:a7:3d:35:
b7:4c:6f:a7:9d:95:a5:6b:c7:3a:67:a3:8e:cf:68:75:fb:dc:
e0:21:ff:a9:71:e2:be:08:43:85:e4:92:82:45:c1:b0:3c:b4:
39:b3:d7:e3:71:d1:f9:6b:99:32:96:e4:94:e2:9e:35:25:7c:
1a:52:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org