Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e20313439383834.roa
File: 3130332e3138392e39362e302f32342d3234203d3e20313439383834.roa (raw, json)
Hash identifier: OUptFi7NNneqHbU8UFdXIvxkIc30wOrXQIMIU28dbz4=
Subject key identifier: C1:6D:56:BA:49:48:52:F1:CD:A1:62:E3:3F:55:30:04:57:2E:EB:4A
Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial: 3F4EF60485A79050C2C68DC9B0CC2C5C5BB9BA92
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e20313439383834.roa
Signing time: Mon 25 Jul 2022 07:30:13 +0000
ROA not before: Mon 25 Jul 2022 07:25:13 +0000
ROA not after: Mon 24 Jul 2023 07:30:13 +0000
asID: 149884
IP address blocks: 103.189.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4e:f6:04:85:a7:90:50:c2:c6:8d:c9:b0:cc:2c:5c:5b:b9:ba:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Validity
Not Before: Jul 25 07:25:13 2022 GMT
Not After : Jul 24 07:30:13 2023 GMT
Subject: CN=C16D56BA494852F1CDA162E33F553004572EEB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:35:82:a8:bc:40:9b:e0:18:4c:23:b8:60:
a4:8e:cc:f9:f4:84:c0:e4:d7:02:9d:18:9b:7b:f8:
61:75:23:7b:5b:75:ff:09:f2:ed:5b:72:44:c8:b2:
f2:9e:74:57:e2:2b:b7:50:b1:51:4a:c4:dd:5d:20:
aa:a8:38:6d:d8:42:77:37:24:73:da:f7:c0:b3:56:
40:83:02:24:dc:af:76:0b:25:60:c4:de:cc:9d:c5:
b5:4b:e2:b0:2a:d5:ac:7f:e0:1b:c1:3d:c7:7b:b6:
6a:5f:a9:6f:e6:a0:0f:3c:44:6f:c6:46:14:bf:c5:
79:1a:15:e0:92:55:8d:03:51:be:26:87:4f:77:8b:
4b:73:c2:2b:58:7a:30:98:ea:e4:42:4c:3c:ff:e1:
51:49:0a:6c:47:65:95:c9:d3:df:9e:7e:0b:6a:ee:
5f:02:4f:58:fe:78:d4:2a:41:f1:75:64:e3:10:19:
32:d0:71:64:f7:22:d0:41:f2:c7:00:c9:12:65:f3:
20:bd:51:12:e9:24:d6:7b:35:e9:fc:5e:93:41:90:
b4:af:bb:15:1f:1a:d5:f1:df:14:37:a7:05:b6:4e:
cc:d4:d1:61:83:98:e0:fc:31:b5:0e:d3:c3:98:d9:
c6:21:23:fc:c7:c0:41:2c:8e:c9:e8:9b:c5:8a:6e:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:56:BA:49:48:52:F1:CD:A1:62:E3:3F:55:30:04:57:2E:EB:4A
X509v3 Authority Key Identifier:
keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e20313439383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.96.0/24
Signature Algorithm: sha256WithRSAEncryption
84:75:82:8e:d1:dc:d5:2c:87:a5:d0:3d:c3:d5:c0:16:1f:76:
d0:14:00:6b:83:6f:cf:ea:62:3f:93:dc:5d:7b:27:71:0a:38:
22:fe:f9:2a:b1:13:9b:e9:e4:6b:84:1f:ca:3f:7f:ab:65:d0:
19:05:88:74:94:25:07:e5:71:1e:66:47:8f:ae:da:11:6b:8d:
cd:29:5c:2e:4c:fe:33:d6:04:f6:9d:d7:69:ad:e6:07:58:c7:
d8:93:e3:67:ae:86:34:71:c2:b7:76:05:38:e4:28:36:12:29:
b5:b6:13:66:eb:a3:90:85:e1:92:69:ad:6a:fd:33:7c:7b:9f:
44:dd:e0:71:74:7f:0a:64:b1:69:95:0e:70:d8:49:5c:d0:24:
22:62:0d:6e:ba:43:cf:bc:57:ff:85:38:12:1e:9b:96:f5:4e:
d1:3f:55:c1:23:99:3a:c6:5a:71:eb:87:cb:d3:db:7c:23:9c:
c4:9e:ea:11:8c:6a:bb:3a:e5:1b:92:a1:73:20:9c:53:4e:1b:
9d:71:9a:c6:31:1e:d4:f3:6f:84:31:48:db:e2:f4:a1:20:a1:
57:e1:db:19:35:55:2c:a0:94:94:da:cc:bf:8f:c8:4d:25:64:
07:7e:7d:2b:21:fb:a7:83:9d:c4:7e:26:0e:81:3b:f0:63:c9:
5a:43:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org