Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa
File: AS150551.roa (raw, json)
Hash identifier: NMJkbGgv/sPSYFzLLrACAWfvWOn9bL3tWgeBWtx4vww=
Subject key identifier: 16:60:51:15:1D:F2:43:BE:5D:21:7C:EA:3A:7C:79:3D:47:61:DE:5F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1C98BA358418C7DE1FC94BCE53F8FDEF5FF008DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa
Signing time: Mon 27 Feb 2023 03:28:27 +0000
ROA not before: Mon 27 Feb 2023 03:23:27 +0000
ROA not after: Mon 26 Feb 2024 03:28:27 +0000
asID: 150551
IP address blocks: 103.190.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:98:ba:35:84:18:c7:de:1f:c9:4b:ce:53:f8:fd:ef:5f:f0:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 27 03:23:27 2023 GMT
Not After : Feb 26 03:28:27 2024 GMT
Subject: CN=166051151DF243BE5D217CEA3A7C793D4761DE5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:90:2a:e7:81:5a:04:1d:65:81:4e:2b:19:
3c:f8:57:02:54:57:ca:21:b5:20:6a:6a:e0:c0:b0:
39:d4:ec:89:d9:63:6e:37:a5:55:e1:30:c1:e7:1e:
11:86:42:9f:e3:37:de:85:3a:d5:4a:31:28:82:99:
d8:f3:29:7c:ad:b7:76:2a:64:ee:f8:9f:11:30:75:
3e:0e:c3:9d:a6:e5:3f:bf:7f:4a:ef:dd:54:e4:9e:
40:a7:46:9b:a7:e0:36:5a:3f:39:89:89:e6:07:ea:
99:99:e5:3e:f2:f7:6f:f0:97:a2:e2:38:78:ec:21:
f3:d4:98:39:f3:1d:1a:ef:3c:a2:98:b7:bc:c4:65:
4b:f6:7c:87:3c:f7:30:76:c8:fe:df:24:b2:38:8d:
dc:53:98:ed:11:c8:14:5e:01:c1:0a:a4:1a:45:1f:
dd:01:27:b4:e7:70:bb:07:35:fb:37:14:ff:7c:e0:
d3:3a:e4:96:ba:06:52:7e:0d:77:a3:df:fd:6c:9d:
30:58:d9:1e:f8:9e:5f:d7:63:50:66:9c:a8:aa:c8:
98:c0:36:fa:ad:ed:95:c9:e8:4d:07:3e:27:7e:68:
4c:8f:7d:b6:4e:08:7c:cf:5c:ba:1c:d0:79:10:79:
41:98:cf:be:15:74:f6:59:2e:9b:0d:b0:89:ca:0a:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:51:15:1D:F2:43:BE:5D:21:7C:EA:3A:7C:79:3D:47:61:DE:5F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.94.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ef:f6:58:98:9a:ac:cf:a7:9b:97:35:65:e9:10:87:d7:fa:
3a:ac:83:6a:27:75:62:05:c2:a6:1f:69:72:81:a4:95:be:e7:
ed:be:ce:76:c9:be:87:c4:14:b6:ff:5c:0e:a6:48:7b:f2:a7:
80:ef:bb:d8:3a:7b:84:f8:9c:bd:8b:c0:38:df:5a:00:75:ed:
c2:86:d2:5a:f5:3b:b0:95:8e:c7:18:50:35:ca:e4:21:77:87:
a2:4b:7d:b5:4f:93:a6:a0:78:a8:61:59:f5:ac:c3:80:b3:a8:
d9:7f:7f:63:2c:3c:97:86:ae:ab:ca:06:aa:22:80:0e:4e:dd:
79:dd:2c:40:82:0b:6a:f3:96:85:ef:e7:4f:0d:6f:13:37:b8:
ae:5e:00:e6:61:20:a6:4b:a0:0c:46:3a:97:b8:b9:e4:50:db:
21:7f:71:01:de:0d:f8:43:a0:93:b6:05:21:50:bd:53:d4:f5:
45:97:97:bb:60:2c:f7:49:67:71:7e:54:77:23:fb:07:13:13:
71:d5:f5:ea:4b:e4:2f:3e:b0:cc:b9:ff:95:95:3c:1a:53:68:
c9:04:29:b2:a9:92:7d:22:28:6c:c7:6b:70:7a:c2:df:16:5f:
b5:cf:50:a2:a9:10:2e:95:fe:d3:95:d2:26:73:01:c0:49:84:
8d:32:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org