Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e20313439383834.roa
File: 3130332e3138392e39372e302f32342d3234203d3e20313439383834.roa (raw, json)
Hash identifier: 360T5HpWX7v9V/GB2OcIdi6xMktgkSkssULmWjNVTDM=
Subject key identifier: 66:3D:D7:A4:E4:58:2D:3D:B7:F0:6E:2D:95:D0:98:E7:D7:EF:9D:72
Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial: 78C9A4F37EE76EB82F991DB50C3ED744333347E9
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e20313439383834.roa
Signing time: Mon 25 Jul 2022 07:32:35 +0000
ROA not before: Mon 25 Jul 2022 07:27:35 +0000
ROA not after: Mon 24 Jul 2023 07:32:35 +0000
asID: 149884
IP address blocks: 103.189.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c9:a4:f3:7e:e7:6e:b8:2f:99:1d:b5:0c:3e:d7:44:33:33:47:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Validity
Not Before: Jul 25 07:27:35 2022 GMT
Not After : Jul 24 07:32:35 2023 GMT
Subject: CN=663DD7A4E4582D3DB7F06E2D95D098E7D7EF9D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:bf:d6:c0:b6:ce:1d:e1:7c:0b:15:16:ab:
d7:97:04:19:79:5f:85:29:b2:b5:67:ae:3d:15:e3:
a7:c9:bf:a9:36:09:ce:63:30:56:89:7a:4b:5a:4a:
60:66:8e:da:68:12:12:e6:cf:fc:c5:36:d3:ee:7a:
55:b6:d2:44:bc:c1:87:01:6c:c1:05:d2:e2:5c:1c:
a0:4c:10:49:a1:8f:20:9c:ce:3c:12:7a:c3:7a:05:
7d:aa:f6:05:e4:a0:d4:05:8f:66:1b:db:61:e2:28:
34:31:7b:a6:e1:7f:cb:dc:ce:8d:fa:81:49:93:bb:
71:3f:77:eb:06:e9:47:7d:f4:d0:c7:ce:ca:32:41:
a8:9e:f8:f8:4a:8f:a0:89:e4:30:31:29:aa:f9:11:
10:66:bd:f0:2b:a2:71:7b:5b:2c:23:5f:8f:83:29:
8f:ce:da:64:99:84:72:d7:73:74:2a:e7:fa:09:de:
c7:fe:68:e9:9a:64:b8:1e:70:5a:fc:93:57:dc:29:
ed:cb:c4:8c:28:49:d0:a6:03:52:bf:0f:90:b7:ce:
cb:7c:1c:75:6a:b9:24:30:07:97:f1:c2:c7:c3:83:
3c:d8:8a:56:67:f2:9c:0a:fa:c5:7c:05:5c:82:25:
23:45:d1:0d:f9:03:6f:70:45:41:ed:39:82:e3:5c:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:D7:A4:E4:58:2D:3D:B7:F0:6E:2D:95:D0:98:E7:D7:EF:9D:72
X509v3 Authority Key Identifier:
keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e20313439383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.97.0/24
Signature Algorithm: sha256WithRSAEncryption
51:aa:5d:03:f8:c6:85:f8:a6:b0:07:fd:38:ac:14:b9:9f:9d:
37:b7:07:f9:d9:30:10:0d:2c:e5:0c:79:df:9c:84:28:41:c6:
eb:ac:89:a7:12:d6:9e:78:8c:b8:5f:ad:4d:07:02:db:60:95:
f4:69:b3:51:23:6e:81:da:d2:a1:cd:b2:37:b6:d8:50:4f:0a:
ef:ca:2c:55:4c:da:45:dc:45:a4:fc:a6:9b:d7:9e:32:d8:9c:
40:66:d9:45:89:94:7d:92:82:a6:03:76:17:da:db:d9:90:f9:
d3:7f:66:04:c8:96:28:18:e7:f8:80:6f:88:42:7a:c7:99:be:
ef:47:55:f9:e7:46:16:a8:1f:70:5d:64:37:b4:57:34:c6:d4:
23:e8:e8:65:05:fa:44:58:f8:6d:78:5b:df:ad:96:67:df:9c:
23:79:e7:76:cf:76:2c:04:f3:92:b4:35:83:9e:ba:6b:1c:7c:
d4:f7:db:f1:b1:d9:02:3b:7f:1d:36:ab:51:6b:08:4c:45:3a:
71:f8:1b:a6:b9:98:60:26:a2:52:90:ff:f6:89:28:97:7e:64:
b4:f7:4a:5d:c5:0b:35:d1:2e:b8:8f:0c:3d:b3:74:42:35:23:
e3:20:1e:52:52:bc:42:ad:59:fc:c8:bb:35:66:30:38:5c:3f:
3d:7c:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org