Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
File: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier: 6shdawk5Ud2Ob4Un2Qp6hmaHk4xccuFWQKUVk6rQyS4=
Subject key identifier: F2:C7:7C:41:24:8E:F5:3F:39:E3:EC:3E:FE:CB:B5:D4:AF:87:81:43
Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Certificate serial: 5E9BF9C1800B61A416751592A2DD6ED51EB651EC
Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
Signing time: Tue 19 Apr 2022 09:00:38 +0000
ROA not before: Tue 19 Apr 2022 08:55:38 +0000
ROA not after: Tue 18 Apr 2023 09:00:38 +0000
asID: 59151
IP address blocks: 103.255.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9b:f9:c1:80:0b:61:a4:16:75:15:92:a2:dd:6e:d5:1e:b6:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Validity
Not Before: Apr 19 08:55:38 2022 GMT
Not After : Apr 18 09:00:38 2023 GMT
Subject: CN=F2C77C41248EF53F39E3EC3EFECBB5D4AF878143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:c4:74:cf:5d:56:c5:82:2d:eb:b1:9d:9a:
ef:65:59:84:7e:ad:51:20:f7:5f:90:63:c0:f9:bb:
f9:4b:d8:dd:a6:20:e1:7d:e2:d6:b3:1c:2e:cc:56:
f8:37:8a:bc:f7:73:c4:e5:22:84:cd:0c:52:4a:74:
db:dd:4e:63:3b:02:cf:f7:be:26:43:f0:14:43:fc:
a8:13:05:59:34:36:e7:a8:8d:d2:cb:56:b3:9c:93:
85:61:f2:d7:0c:49:ba:a3:90:7a:08:c4:d3:fd:42:
5f:7b:1e:bb:ff:b3:a1:a9:cb:4b:87:59:ad:41:99:
e0:dd:93:a2:4b:45:74:22:84:f4:84:bc:e2:ef:47:
2a:b2:a1:3b:43:92:09:97:c8:5f:4d:0a:3b:92:df:
ed:ca:78:57:40:35:bc:77:61:9c:fc:56:d5:5f:f9:
09:f2:32:17:f4:5d:c9:fb:3e:45:2d:60:f7:a5:19:
76:18:6f:38:48:d2:a8:07:98:1a:3e:af:0f:b7:9b:
52:f6:71:d7:8c:43:ca:50:33:e9:63:45:08:88:b3:
46:fa:44:25:d0:93:52:06:98:29:32:87:e7:47:6f:
5d:4d:e5:8f:95:03:46:16:84:b9:e9:ff:d4:86:fd:
84:d8:d5:dd:77:7a:aa:96:b6:31:c3:b0:e2:5a:6c:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:7C:41:24:8E:F5:3F:39:E3:EC:3E:FE:CB:B5:D4:AF:87:81:43
X509v3 Authority Key Identifier:
keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:dc:13:d4:63:60:8d:ca:0a:3b:ad:0a:d5:cb:d5:07:84:7b:
d2:d6:c1:0d:de:3d:8b:1b:45:a6:52:dc:5e:89:38:40:3d:b7:
c6:92:7d:05:e9:00:97:38:ac:f0:fd:9c:a3:3a:5f:e4:98:ce:
0f:3a:65:0d:ce:49:84:8e:93:0d:fa:4d:09:a5:1d:fa:40:3a:
f1:98:a4:04:2b:53:03:8c:b3:ad:a3:83:11:12:1e:da:67:f6:
2d:02:0f:d6:88:c3:d8:4b:d2:f2:3c:c6:cd:9e:8d:43:6d:82:
9f:05:41:44:31:fc:6a:38:e6:a3:74:c4:c0:2d:81:a4:96:1b:
aa:bd:8f:2e:6c:39:3c:18:19:0e:9e:b3:08:a6:26:94:62:e2:
f9:8d:a6:bf:16:76:6d:d4:cc:4b:6d:ed:3a:f1:e7:05:8a:19:
2e:76:3a:45:bb:75:16:a3:3b:2a:fb:c4:50:25:4a:dc:84:55:
68:b4:f8:07:ba:6e:5d:f7:30:f4:50:96:58:11:85:87:b2:0c:
b0:2a:21:1d:a2:e1:f8:94:96:53:8d:92:4b:0e:7e:6b:6d:49:
d4:35:45:3c:13:51:44:d8:5e:a3:b6:2e:45:2c:d6:22:16:54:
98:22:f8:62:9e:c8:2a:b7:c1:bd:f7:e1:ea:83:61:70:d0:ce:
73:82:2b:02
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXpv5wYALYaQWdRWSot1u1R62UewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF
RjIwNURDQjAeFw0yMjA0MTkwODU1MzhaFw0yMzA0MTgwOTAwMzhaMDMxMTAvBgNV
BAMTKEYyQzc3QzQxMjQ4RUY1M0YzOUUzRUMzRUZFQ0JCNUQ0QUY4NzgxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPsR0z11WxYIt67Gdmu9lWYR+
rVEg91+QY8D5u/lL2N2mIOF94tazHC7MVvg3irz3c8TlIoTNDFJKdNvdTmM7As/3
viZD8BRD/KgTBVk0NueojdLLVrOck4Vh8tcMSbqjkHoIxNP9Ql97Hrv/s6Gpy0uH
Wa1BmeDdk6JLRXQihPSEvOLvRyqyoTtDkgmXyF9NCjuS3+3KeFdANbx3YZz8VtVf
+QnyMhf0Xcn7PkUtYPelGXYYbzhI0qgHmBo+rw+3m1L2cdeMQ8pQM+ljRQiIs0b6
RCXQk1IGmCkyh+dHb11N5Y+VA0YWhLnp/9SG/YTY1d13eqqWtjHDsOJabAlvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU8sd8QSSO9T854+w+/su11K+HgUMwHwYDVR0j
BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2
NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw
NURDQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZmUxNjNjLTE0ZDUtNGUzMS1h
YzIwLWMwNGUzZTQ0YzM0Zi8wLzMxMzAzMzJlMzIzNTM1MmUzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf/DzANBgkqhkiG
9w0BAQsFAAOCAQEAtdwT1GNgjcoKO60K1cvVB4R70tbBDd49ixtFplLcXok4QD23
xpJ9BekAlzis8P2cozpf5JjODzplDc5JhI6TDfpNCaUd+kA68ZikBCtTA4yzraOD
ERIe2mf2LQIP1ojD2EvS8jzGzZ6NQ22CnwVBRDH8ajjmo3TEwC2BpJYbqr2PLmw5
PBgZDp6zCKYmlGLi+Y2mvxZ2bdTMS23tOvHnBYoZLnY6Rbt1FqM7KvvEUCVK3IRV
aLT4B7puXfcw9FCWWBGFh7IMsCohHaLh+JSWU42SSw5+a21J1DVFPBNRRNheo7Yu
RSzWIhZUmCL4Yp7IKrfBvffh6oNhcNDOc4IrAg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:28 2025 by rpki-client