Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/3130332e3138392e3131322e302f32332d3233203d3e20313439383936.roa
File: 3130332e3138392e3131322e302f32332d3233203d3e20313439383936.roa (raw, json)
Hash identifier: 897fe8XKvSw6ipy3okAQrQDEYcMb7/hSS4RWKINoC84=
Subject key identifier: 58:D0:7A:FD:BE:66:53:0C:D0:44:7C:3B:D9:A8:03:83:1A:E5:F1:F8
Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04
Certificate serial: 24EA01F6633E84201AD1544B6ADBD3684F81BEED
Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/3130332e3138392e3131322e302f32332d3233203d3e20313439383936.roa
Signing time: Thu 16 Feb 2023 09:05:11 +0000
ROA not before: Thu 16 Feb 2023 09:00:11 +0000
ROA not after: Thu 15 Feb 2024 09:05:11 +0000
asID: 149896
IP address blocks: 103.189.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ea:01:f6:63:3e:84:20:1a:d1:54:4b:6a:db:d3:68:4f:81:be:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04
Validity
Not Before: Feb 16 09:00:11 2023 GMT
Not After : Feb 15 09:05:11 2024 GMT
Subject: CN=58D07AFDBE66530CD0447C3BD9A803831AE5F1F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:83:91:f8:26:d7:9a:cd:d7:fb:93:b7:e5:
06:c6:a9:12:a5:81:1f:f7:ff:f7:6d:51:d6:8c:41:
e2:34:90:c0:81:25:f3:84:7b:18:37:7f:de:10:76:
55:19:8d:ad:a2:c5:13:07:a6:ea:e2:fc:11:d3:ae:
c2:bc:72:4f:af:0f:ff:75:f4:1e:82:51:62:4d:8e:
22:28:e9:fa:58:45:cc:70:8e:0f:57:22:08:dd:e6:
b4:c4:92:a4:a5:e6:1a:f7:40:3c:07:47:7a:18:6e:
2c:41:f3:66:40:40:57:b1:f6:00:c8:85:b2:c7:d6:
66:1e:ce:b4:18:a8:b3:74:87:4b:2f:cb:6a:21:c1:
37:16:53:2f:49:1c:e5:00:01:74:ed:30:1f:05:41:
13:75:1b:82:d2:f3:58:38:51:d8:9d:52:f3:c1:f1:
3b:fe:8e:6c:a2:b3:0b:a8:fa:00:d8:03:52:74:52:
37:57:c4:17:4b:23:9b:4b:a7:ef:70:eb:66:43:9b:
39:99:cd:07:c5:38:d2:e5:c3:af:65:c1:1a:0d:25:
b0:48:9a:d1:c6:06:50:a8:8d:5e:43:e7:8e:8a:7b:
8c:71:4d:86:18:9d:73:f0:69:d9:98:5b:fe:55:1d:
cb:03:bd:c7:1f:16:c8:83:c6:ca:cd:28:84:e3:0d:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:7A:FD:BE:66:53:0C:D0:44:7C:3B:D9:A8:03:83:1A:E5:F1:F8
X509v3 Authority Key Identifier:
keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/3130332e3138392e3131322e302f32332d3233203d3e20313439383936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.112.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ea:a1:29:b2:68:8b:2e:61:da:d9:7e:ee:54:41:90:38:46:
a2:4a:7f:fb:7e:b9:53:da:7c:29:2f:fd:7f:a7:c7:c6:4b:88:
4e:71:53:8f:2c:1f:6b:e4:e3:f6:bf:ed:63:7b:97:59:a3:34:
f1:c4:ad:81:d2:30:ae:57:64:26:e6:6c:b6:dd:71:ec:5d:3b:
45:55:4f:97:e5:21:5e:e4:8a:19:b6:3c:e0:7d:1a:7a:cc:86:
33:c7:9b:d8:2e:c2:83:d7:c3:7e:5b:ac:ba:92:f6:b3:d9:6b:
03:c9:70:83:95:dc:6d:b6:5b:b5:4c:5b:11:47:ad:1a:bd:17:
f1:0d:ff:cd:86:ce:da:23:77:85:98:8e:f7:71:e5:4e:c4:fc:
65:10:8f:57:4c:d4:59:c1:2b:dd:43:df:9e:72:7d:6d:b2:24:
ea:52:eb:d9:52:7f:e0:7a:6d:e0:bd:d1:09:28:34:04:ea:71:
bd:4c:95:7f:84:cd:fe:5d:ef:e9:f9:08:a0:de:32:6e:aa:35:
e4:06:22:a9:25:6a:86:94:4b:ab:43:6e:32:86:14:3f:a4:98:
17:ed:f7:9a:f7:ed:bb:c9:90:1a:3a:66:8f:69:d0:fb:0f:02:
98:06:eb:ae:af:7e:d6:42:f9:63:36:da:d1:76:4a:ea:f7:b2:
ce:f4:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org