Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
File: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier: xft6vQvdTK8OEUFVVfSxxkjOPIu4RnkYo5/v1zC5cTM=
Subject key identifier: EA:9A:3A:72:AF:71:58:2E:C0:8A:FE:A1:21:2A:59:3D:75:09:54:E1
Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Certificate serial: 214701FDBC6461DA7B812BFA77A89F871474983D
Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
Signing time: Tue 19 Apr 2022 09:00:38 +0000
ROA not before: Tue 19 Apr 2022 08:55:38 +0000
ROA not after: Tue 18 Apr 2023 09:00:38 +0000
asID: 59151
IP address blocks: 103.210.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:47:01:fd:bc:64:61:da:7b:81:2b:fa:77:a8:9f:87:14:74:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Validity
Not Before: Apr 19 08:55:38 2022 GMT
Not After : Apr 18 09:00:38 2023 GMT
Subject: CN=EA9A3A72AF71582EC08AFEA1212A593D750954E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:a6:0a:da:bc:23:b6:78:0e:71:0f:4f:1a:
3a:4c:32:0e:89:86:2e:ce:cb:fa:07:2a:75:ed:b8:
0b:23:e3:28:f4:89:5c:29:eb:ed:53:81:32:3c:e0:
ff:5e:a5:fe:64:c9:25:0c:0d:90:7e:8c:fe:43:2d:
e8:a5:53:dd:af:7b:c1:47:21:8d:3e:d8:eb:c3:47:
6a:2d:2b:c9:29:c5:4d:14:7b:f6:86:ed:75:d5:06:
fa:38:d7:39:2d:8b:e4:79:c2:83:c0:11:cb:1a:83:
ce:a0:33:eb:01:6c:ba:eb:1d:14:2a:d1:38:d9:57:
c4:70:bf:a5:f0:2e:55:1b:8f:d2:de:da:21:f6:b1:
f2:31:22:99:53:d9:6d:9b:89:45:07:cc:4b:66:86:
18:2b:56:29:6c:af:33:48:94:b0:32:9f:c8:83:5c:
94:d0:83:f4:41:31:2e:7e:84:d8:0c:84:ee:41:bd:
d5:5a:63:54:b9:1a:6d:ad:b9:2e:32:7f:3d:ab:df:
27:d1:e6:df:00:57:27:59:9a:13:c2:09:35:e1:75:
0d:b8:92:b1:16:74:14:d2:43:3b:b5:01:72:81:d3:
1e:0e:7c:37:b2:ad:af:4f:73:91:d8:d4:c7:e7:f6:
4c:aa:d2:12:66:bf:58:9d:12:bc:dc:b0:69:15:0a:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:3A:72:AF:71:58:2E:C0:8A:FE:A1:21:2A:59:3D:75:09:54:E1
X509v3 Authority Key Identifier:
keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d8:ec:e3:e4:18:c9:30:5a:ab:80:21:da:6d:db:a0:e6:f6:
3b:a0:ed:ed:7f:16:38:1e:26:23:8b:bf:11:3c:bf:a7:e9:bc:
fc:b2:66:e6:27:d3:bc:ba:83:96:4f:f1:1e:b1:78:03:58:fc:
2b:6c:e6:87:20:41:db:74:89:91:09:66:a9:2e:34:ec:b8:94:
3b:ac:11:7d:f2:e0:23:2e:69:02:7a:3d:14:8a:9f:eb:d1:20:
fa:77:5c:4c:51:a3:8b:40:8b:5c:a6:d2:64:74:f0:2a:ec:e7:
db:74:fd:34:f5:5c:b5:d2:5a:ad:13:34:de:be:66:11:aa:3c:
fc:42:3b:66:b6:1d:76:80:a9:15:41:c9:48:e3:0f:03:c6:7f:
0d:72:17:53:bf:90:5a:ad:56:16:6c:e8:cb:12:5d:b1:c2:91:
2c:55:5b:f8:c4:c8:f3:14:a0:6c:98:e0:d5:51:dc:34:c0:45:
24:e6:71:94:47:7b:3a:70:ee:c7:15:c6:25:66:a3:e9:5e:a3:
c0:9f:c7:d6:f1:d0:85:f4:df:96:7c:d0:24:60:35:e1:d3:73:
08:d9:97:b2:57:60:ed:5a:40:c2:d6:5b:62:af:85:92:17:32:
bb:81:c8:33:d6:db:78:45:c0:41:93:8e:10:74:f0:5c:7b:3c:
0a:c0:59:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIUcB/bxkYdp7gSv6d6ifhxR0mD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF
RjIwNURDQjAeFw0yMjA0MTkwODU1MzhaFw0yMzA0MTgwOTAwMzhaMDMxMTAvBgNV
BAMTKEVBOUEzQTcyQUY3MTU4MkVDMDhBRkVBMTIxMkE1OTNENzUwOTU0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdqYK2rwjtngOcQ9PGjpMMg6J
hi7Oy/oHKnXtuAsj4yj0iVwp6+1TgTI84P9epf5kySUMDZB+jP5DLeilU92ve8FH
IY0+2OvDR2otK8kpxU0Ue/aG7XXVBvo41zkti+R5woPAEcsag86gM+sBbLrrHRQq
0TjZV8Rwv6XwLlUbj9Le2iH2sfIxIplT2W2biUUHzEtmhhgrVilsrzNIlLAyn8iD
XJTQg/RBMS5+hNgMhO5BvdVaY1S5Gm2tuS4yfz2r3yfR5t8AVydZmhPCCTXhdQ24
krEWdBTSQzu1AXKB0x4OfDeyra9Pc5HY1Mfn9kyq0hJmv1idErzcsGkVCkx7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6po6cq9xWC7Aiv6hISpZPXUJVOEwHwYDVR0j
BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2
NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw
NURDQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZmUxNjNjLTE0ZDUtNGUzMS1h
YzIwLWMwNGUzZTQ0YzM0Zi8wLzMxMzAzMzJlMzIzMTMwMmUzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfSIzANBgkqhkiG
9w0BAQsFAAOCAQEATNjs4+QYyTBaq4Ah2m3boOb2O6Dt7X8WOB4mI4u/ETy/p+m8
/LJm5ifTvLqDlk/xHrF4A1j8K2zmhyBB23SJkQlmqS407LiUO6wRffLgIy5pAno9
FIqf69Eg+ndcTFGji0CLXKbSZHTwKuzn23T9NPVctdJarRM03r5mEao8/EI7ZrYd
doCpFUHJSOMPA8Z/DXIXU7+QWq1WFmzoyxJdscKRLFVb+MTI8xSgbJjg1VHcNMBF
JOZxlEd7OnDuxxXGJWaj6V6jwJ/H1vHQhfTflnzQJGA14dNzCNmXsldg7VpAwtZb
Yq+Fkhcyu4HIM9bbeEXAQZOOEHTwXHs8CsBZbw==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:44 2025 by rpki-client