Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32332d3234203d3e20313431393638.roa
File: 3130332e3136372e33342e302f32332d3234203d3e20313431393638.roa (raw, json)
Hash identifier: vHW3g3BjGgv3VGU+aTJ2oNfH7iDt82HYTFF9iALtJro=
Subject key identifier: D1:87:A5:99:84:8D:FE:9E:1C:8A:60:CE:99:20:2B:A7:E2:C4:5B:BD
Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial: 49D9F5C4C2B7C5B492457FA250478270A81C44AB
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32332d3234203d3e20313431393638.roa
Signing time: Sat 30 Apr 2022 09:00:00 +0000
ROA not before: Sat 30 Apr 2022 08:55:00 +0000
ROA not after: Sat 29 Apr 2023 09:00:00 +0000
asID: 141968
IP address blocks: 103.167.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:f5:c4:c2:b7:c5:b4:92:45:7f:a2:50:47:82:70:a8:1c:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Validity
Not Before: Apr 30 08:55:00 2022 GMT
Not After : Apr 29 09:00:00 2023 GMT
Subject: CN=D187A599848DFE9E1C8A60CE99202BA7E2C45BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:08:49:48:e7:ee:f8:27:09:f2:64:f8:36:
6f:ae:f7:3a:da:a3:e9:ae:23:a0:20:6d:6b:17:0d:
86:53:b5:e3:22:12:41:ab:8c:97:da:11:06:ab:d0:
80:7e:ac:3e:a1:a4:57:56:30:94:bc:9b:8d:e3:d8:
eb:c6:d8:bd:30:89:42:36:69:a5:c6:02:72:7b:d6:
13:fe:f8:93:cc:69:92:0c:c8:c8:b5:a9:ed:98:30:
ba:92:c1:28:4d:c8:52:fd:18:7e:43:a8:db:0e:a6:
ea:15:a9:42:a8:8e:28:2c:97:4d:d3:28:15:f1:04:
a2:20:5b:67:38:d5:d0:48:34:d1:4a:0f:e2:83:9f:
03:ca:72:78:a1:80:78:41:9f:3b:55:08:28:cf:d7:
c5:df:bc:94:0c:5e:79:b0:75:ad:f4:af:24:34:59:
25:4f:82:fd:7a:ba:0c:28:b2:db:1f:dc:64:85:23:
1a:a1:e7:cb:2f:40:50:74:53:9a:fb:ca:bb:e5:97:
c8:f6:44:46:c7:b4:77:f5:d5:19:7f:af:e6:c0:00:
03:f2:ee:90:59:63:ac:6e:f1:0f:2c:ab:74:5b:bd:
c3:1f:e3:66:ab:0d:20:53:b2:f9:8f:6e:d7:71:54:
0e:3d:78:30:fd:ed:cd:c1:76:b1:67:44:be:4e:34:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:A5:99:84:8D:FE:9E:1C:8A:60:CE:99:20:2B:A7:E2:C4:5B:BD
X509v3 Authority Key Identifier:
keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32332d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.34.0/23
Signature Algorithm: sha256WithRSAEncryption
28:93:1f:fc:a8:e5:b4:6b:0a:0a:eb:25:2b:07:19:9b:9a:3c:
98:17:d8:1e:a5:43:96:14:b7:00:67:f5:58:79:b1:53:9f:fb:
65:bd:0f:54:1d:51:fc:32:a9:07:fa:20:e2:c3:86:fc:5a:82:
0c:ee:f9:52:2d:27:3c:bc:5b:37:d2:64:43:0d:c1:c9:dd:e8:
40:5f:22:ae:a4:10:73:e4:06:df:c5:b0:de:ae:a5:7c:de:65:
3f:b1:1e:6b:6f:33:58:ef:6e:47:26:ec:1b:20:01:8f:cc:26:
79:c7:57:21:c3:e1:60:cb:60:aa:2a:f7:72:ad:6d:01:35:c8:
64:af:e9:5c:16:02:4f:d7:7d:fc:88:44:bf:49:ef:13:80:1a:
3b:e2:dd:9e:34:0e:60:b0:4f:ef:8a:20:9b:5b:7c:c9:8e:cc:
02:47:55:78:c5:28:52:66:41:96:ad:42:51:42:cf:4b:d7:1d:
aa:0f:86:8a:6d:44:46:9f:50:a7:5d:88:b8:46:26:e7:3a:64:
43:04:e9:e3:db:a5:f6:86:2c:e9:6c:8f:76:0a:f2:72:91:20:
80:67:58:1f:2e:46:ee:85:9e:25:94:e2:41:05:13:8e:68:9c:
b1:b1:00:23:94:24:fa:72:5a:53:9f:10:c9:38:6b:84:32:6a:
f6:95:12:25
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSdn1xMK3xbSSRX+iUEeCcKgcRKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB
NEY2OTM4NzAeFw0yMjA0MzAwODU1MDBaFw0yMzA0MjkwOTAwMDBaMDMxMTAvBgNV
BAMTKEQxODdBNTk5ODQ4REZFOUUxQzhBNjBDRTk5MjAyQkE3RTJDNDVCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQAhJSOfu+CcJ8mT4Nm+u9zra
o+muI6AgbWsXDYZTteMiEkGrjJfaEQar0IB+rD6hpFdWMJS8m43j2OvG2L0wiUI2
aaXGAnJ71hP++JPMaZIMyMi1qe2YMLqSwShNyFL9GH5DqNsOpuoVqUKojigsl03T
KBXxBKIgW2c41dBINNFKD+KDnwPKcnihgHhBnztVCCjP18XfvJQMXnmwda30ryQ0
WSVPgv16ugwostsf3GSFIxqh58svQFB0U5r7yrvll8j2REbHtHf11Rl/r+bAAAPy
7pBZY6xu8Q8sq3RbvcMf42arDSBTsvmPbtdxVA49eDD97c3BdrFnRL5ONMjzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU0YelmYSN/p4cimDOmSArp+LEW70wHwYDVR0j
BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw
QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2
OTM4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMxMzAzMzJlMzEzNjM3MmUzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6ciMA0GCSqG
SIb3DQEBCwUAA4IBAQAokx/8qOW0awoK6yUrBxmbmjyYF9gepUOWFLcAZ/VYebFT
n/tlvQ9UHVH8MqkH+iDiw4b8WoIM7vlSLSc8vFs30mRDDcHJ3ehAXyKupBBz5Abf
xbDerqV83mU/sR5rbzNY725HJuwbIAGPzCZ5x1chw+Fgy2CqKvdyrW0BNchkr+lc
FgJP1338iES/Se8TgBo74t2eNA5gsE/viiCbW3zJjswCR1V4xShSZkGWrUJRQs9L
1x2qD4aKbURGn1CnXYi4RibnOmRDBOnj26X2hizpbI92CvJykSCAZ1gfLkbuhZ4l
lOJBBROOaJyxsQAjlCT6clpTnxDJOGuEMmr2lRIl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org