Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150944.roa
File: AS150944.roa (raw, json)
Hash identifier: H2ET1HBkqsKF5GL6vBZdfY7HbvUbRp7elsL4seER+Zo=
Subject key identifier: 81:E9:BC:37:A0:09:B4:72:23:87:64:4F:0A:6C:A5:43:90:69:37:8D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 774212152E64AB6D43EC10AB1DBD6D5A08C405FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150944.roa
Signing time: Mon 08 May 2023 07:00:27 +0000
ROA not before: Mon 08 May 2023 06:55:27 +0000
ROA not after: Mon 06 May 2024 07:00:27 +0000
asID: 150944
IP address blocks: 103.107.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:42:12:15:2e:64:ab:6d:43:ec:10:ab:1d:bd:6d:5a:08:c4:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 8 06:55:27 2023 GMT
Not After : May 6 07:00:27 2024 GMT
Subject: CN=81E9BC37A009B4722387644F0A6CA5439069378D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:bd:7a:33:67:ec:7b:a3:39:84:66:85:4a:
82:d0:7f:fe:e6:11:6d:74:7a:4a:cc:ba:a8:cf:5a:
a3:34:ff:72:b0:b2:30:1a:d4:26:a1:5c:43:60:04:
c8:cd:7a:63:5a:35:8e:de:8b:f1:67:44:1b:8d:a0:
1d:5c:e8:72:3a:d0:34:be:99:a3:8e:d7:27:01:09:
75:a5:ce:74:55:5b:32:dc:d8:4a:b9:02:72:cb:a2:
ac:0f:72:79:e1:b9:c7:66:50:15:da:f1:b4:c6:2f:
d9:33:99:c7:12:48:cd:a4:4c:a5:5f:10:0b:f7:79:
59:72:e4:b4:91:38:57:64:1f:f0:82:5c:cb:41:3f:
0b:19:6e:73:b4:7e:55:b5:13:5b:99:78:55:3f:12:
ed:31:93:f2:9a:d7:2b:2a:fd:6e:8e:92:46:f8:ec:
30:84:20:52:d2:50:90:56:e9:39:8c:e0:81:64:3d:
7e:06:d7:7a:53:0e:12:cc:5b:06:fd:56:26:91:1a:
20:89:35:4b:7d:f1:fb:db:02:8e:f5:fb:01:d0:a5:
40:4c:30:a8:dc:5b:a8:c3:68:7f:9d:97:89:63:b1:
15:19:11:7f:10:59:b8:9b:43:0a:af:98:25:7f:64:
9d:0a:a5:a5:a6:d1:35:78:0c:e3:84:a1:53:d4:ec:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:BC:37:A0:09:B4:72:23:87:64:4F:0A:6C:A5:43:90:69:37:8D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.176.0/23
Signature Algorithm: sha256WithRSAEncryption
73:22:7b:86:84:c9:30:6b:3e:f0:0f:8c:68:f5:7a:fb:47:72:
09:45:ce:ca:bb:06:eb:dd:49:06:a2:8a:78:86:24:67:43:38:
c3:e4:da:76:f9:a7:3c:31:42:7b:c8:fc:cc:b1:c3:ed:85:22:
74:2b:71:d8:11:0b:e5:e6:29:d5:f1:70:21:65:1b:47:6f:63:
05:3f:96:3e:fa:34:bc:b7:ae:be:df:2f:76:ce:1e:1b:e0:90:
c9:56:35:6f:39:8f:a0:6c:45:44:3c:7b:4e:aa:e0:9a:90:93:
ab:69:09:ed:8e:73:b4:27:21:02:9e:16:a9:0b:48:c2:ff:7c:
aa:bf:fc:75:54:58:d6:ce:9e:78:e6:51:e9:0d:00:32:ec:4c:
e6:7c:4d:e3:90:92:69:64:7a:ff:73:ea:34:aa:5d:3f:5d:c7:
47:d3:6f:a0:08:e0:61:63:e7:8e:78:77:99:f5:57:8f:77:76:
42:81:3e:b3:42:dd:0d:8c:1b:cc:a3:c9:75:d8:26:4b:aa:da:
a8:4b:4f:f6:6a:7d:e7:f8:be:2c:3e:12:17:d5:cc:4c:83:17:
6b:c5:e1:10:70:2c:6c:d8:27:03:73:b7:65:04:76:87:4a:23:
9d:11:71:34:3e:4e:da:94:81:e1:14:71:0c:96:de:d8:ba:f6:
e4:41:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org