Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149713.roa
File: AS149713.roa (raw, json)
Hash identifier: jgid1szRx+TDvh8lqPqMO91NwgE3+cRYyAL5/NeEqC8=
Subject key identifier: BB:57:1A:5A:EB:32:33:F0:1C:6A:7A:39:95:A0:2A:AD:7F:8F:82:3D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0C802181385BC5B36F6C69243F955C5AC7206519
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149713.roa
Signing time: Wed 05 Oct 2022 06:22:51 +0000
ROA not before: Wed 05 Oct 2022 06:17:51 +0000
ROA not after: Wed 04 Oct 2023 06:22:51 +0000
asID: 149713
IP address blocks: 103.186.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:80:21:81:38:5b:c5:b3:6f:6c:69:24:3f:95:5c:5a:c7:20:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 5 06:17:51 2022 GMT
Not After : Oct 4 06:22:51 2023 GMT
Subject: CN=BB571A5AEB3233F01C6A7A3995A02AAD7F8F823D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:e2:b3:75:0f:c8:7f:b5:1f:25:e8:d8:3b:
81:8c:ef:ff:f4:eb:72:68:02:57:51:7a:ff:1a:1e:
3b:17:d1:49:de:f5:2a:e9:25:11:20:47:29:31:ae:
0d:41:b6:ad:b5:09:86:91:7e:fd:1a:1e:99:df:ab:
25:cd:65:1c:6d:cf:fb:e4:d7:90:8d:ed:44:a7:aa:
f9:27:e9:ff:3a:9c:48:c9:cf:2f:39:4f:7d:a9:43:
0f:01:fe:92:83:7d:61:b9:28:e6:f3:04:9e:b8:6a:
c6:d7:1e:1a:c3:99:74:b8:e5:6c:a0:43:a2:49:b8:
23:92:14:6f:6c:0b:ea:76:3a:c5:76:69:27:56:51:
ce:93:3e:2f:e8:08:3d:e9:c0:69:fc:44:bf:71:0f:
6c:b9:26:ec:c7:68:e6:07:b7:f0:81:71:e5:53:4c:
37:c5:b6:5d:b4:bf:15:6e:85:1e:83:56:a4:f3:8f:
80:28:2f:e3:30:c8:98:a8:49:35:3e:3a:05:e2:bd:
98:f8:d9:0b:fa:56:ca:d7:c7:ec:7f:c4:4e:74:dd:
c7:21:7a:60:23:4a:b3:75:00:af:cc:8b:fe:01:b3:
7f:f5:d3:d7:ee:7c:f6:44:f7:61:da:0c:4d:63:55:
87:cc:df:e7:a2:7f:33:e9:2e:4e:6f:b0:f1:a0:5d:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:1A:5A:EB:32:33:F0:1C:6A:7A:39:95:A0:2A:AD:7F:8F:82:3D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149713.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.193.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2b:12:e9:94:1c:07:6e:cb:51:1c:b2:de:8b:72:4c:f7:73:
71:16:9d:e2:22:31:83:cd:30:dc:d4:50:e1:4a:94:24:c4:26:
cb:c4:3d:4c:e3:c4:db:1d:52:f1:43:ff:00:70:fc:16:28:9a:
58:50:1a:81:96:20:6c:80:4a:68:38:1a:87:c7:1a:a4:15:b7:
26:bf:78:ae:4f:e6:69:21:55:66:8e:41:a3:75:61:95:4d:73:
8f:c5:f1:55:65:28:ab:66:13:e2:87:19:76:4c:08:07:47:10:
d4:4c:3f:16:b6:52:fc:15:0a:f0:fd:4c:ca:1d:53:f1:ef:32:
56:00:f7:68:ae:d6:de:7d:4a:8d:83:fe:cf:68:5c:df:5f:3a:
e6:3c:a5:ad:00:60:ef:e4:e7:bd:e2:a2:73:28:50:96:3e:9b:
5b:88:60:d7:cb:c8:12:2e:09:2d:8a:9e:8c:c6:50:c1:73:71:
87:c0:aa:06:35:bb:77:f5:29:e9:19:9e:32:ed:d7:8e:65:cf:
b9:18:95:ca:51:e7:26:05:05:b0:ad:14:aa:59:48:17:80:03:
61:1a:22:8f:16:bd:b5:a1:42:28:52:50:00:7f:11:fd:1e:1d:
7d:11:d5:a9:cf:95:23:40:55:22:89:a5:c3:16:9b:37:9a:4c:
3a:d1:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org