Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136362e302f32342d3234203d3e20313439393530.roa
File: 3130332e3131332e3136362e302f32342d3234203d3e20313439393530.roa (raw, json)
Hash identifier: AqapA3i9gqk9prbAYOpFNw4p76mr0SJx1TFzzC9HHNI=
Subject key identifier: 86:FA:5F:D1:A3:12:22:A4:37:CF:19:E1:AF:B3:F6:69:0C:B4:D7:10
Certificate issuer: /CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
Certificate serial: 6556ACFD53230DBC3E291AEE3426BFEB22F1099F
Authority key identifier: 40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136362e302f32342d3234203d3e20313439393530.roa
Signing time: Fri 09 Sep 2022 11:23:33 +0000
ROA not before: Fri 09 Sep 2022 11:18:33 +0000
ROA not after: Fri 08 Sep 2023 11:23:33 +0000
asID: 149950
IP address blocks: 103.113.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:56:ac:fd:53:23:0d:bc:3e:29:1a:ee:34:26:bf:eb:22:f1:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
Validity
Not Before: Sep 9 11:18:33 2022 GMT
Not After : Sep 8 11:23:33 2023 GMT
Subject: CN=86FA5FD1A31222A437CF19E1AFB3F6690CB4D710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:ab:cb:ee:89:a9:2e:eb:c8:cb:66:eb:f7:
1e:8b:bc:10:ae:a6:a4:56:ea:a7:95:f1:71:f3:ae:
38:8e:f7:91:0a:f5:e0:21:d7:97:83:cc:12:6c:cb:
08:70:89:e8:e3:5c:d1:74:f4:c7:78:40:32:be:a3:
f7:76:40:14:de:07:85:85:88:90:de:f9:92:3d:07:
f3:ea:f6:35:24:32:eb:6d:b4:da:61:d4:b8:c9:52:
00:ff:d0:08:ff:52:0c:4f:98:3b:0a:97:50:4d:10:
32:71:2a:dd:cf:6f:99:df:ea:96:f4:17:99:b3:27:
c1:7b:23:2c:26:a1:c8:be:be:1f:7f:a2:e5:ae:de:
86:6c:5d:aa:78:fc:c4:f0:bd:ce:a8:e8:c6:35:d2:
fc:bd:02:01:de:bf:78:81:2d:27:0e:3f:4b:c8:18:
f3:ff:29:22:f1:54:54:60:ca:34:e2:8a:5a:ad:55:
e3:d0:b4:3e:28:ae:88:26:44:67:1e:98:27:84:6d:
e1:31:c4:9a:3d:a0:c8:87:57:c8:74:0b:ae:f7:19:
61:98:16:09:5a:55:ea:29:b0:7d:ea:8a:fd:40:05:
bb:d6:c6:56:4a:85:48:03:da:01:fc:1f:3e:85:5d:
9b:c8:8f:ac:c2:7e:8f:1e:f2:e7:31:5a:0e:a9:12:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:5F:D1:A3:12:22:A4:37:CF:19:E1:AF:B3:F6:69:0C:B4:D7:10
X509v3 Authority Key Identifier:
keyid:40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136362e302f32342d3234203d3e20313439393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.113.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:35:e4:c7:79:fc:56:d9:fb:19:91:81:09:c3:a7:35:26:5e:
7d:87:0f:ed:34:c5:fe:fd:04:f3:a8:0b:d2:29:93:ca:e9:f8:
22:e0:00:3d:2d:87:7f:14:dd:ed:c6:14:bc:f1:37:14:36:f2:
b1:21:fc:9b:46:ca:3f:ac:06:29:3c:c6:17:68:de:4d:aa:6a:
d8:2e:ff:74:d6:76:cc:70:19:cb:e2:ca:d6:1d:d6:62:a3:b6:
6c:d0:de:bd:d7:40:78:ef:28:11:ba:6b:71:0a:4c:49:f4:4b:
0b:88:da:68:b3:d4:46:34:f9:46:83:f1:3a:a4:69:8d:51:9f:
a7:0c:7e:bc:22:35:37:c8:19:c1:25:76:cc:9c:29:31:9f:ca:
96:03:c4:67:b1:7f:07:ff:48:b1:e3:f3:77:72:7d:d1:c6:d1:
70:dc:af:57:cc:c6:8f:98:f2:ff:b4:d1:cb:27:59:2c:7b:04:
7f:a6:7f:36:ec:ce:cd:d2:ed:c9:77:48:30:e5:7c:74:97:5a:
21:f3:9d:3f:ea:24:b0:c5:ee:3d:2b:eb:b4:38:19:11:a5:29:
82:8b:66:ae:64:c4:85:3f:5e:03:c7:60:37:d8:27:8c:aa:87:
d6:d0:44:e8:30:56:6b:37:9d:f7:12:d5:b5:80:c6:07:96:14:
24:6e:55:fa
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZVas/VMjDbw+KRruNCa/6yLxCZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCMjg0MDJBODkxRTZCMzRFQjlBMkY2QUY3NkNCMTdE
QTlCMDAzQTAeFw0yMjA5MDkxMTE4MzNaFw0yMzA5MDgxMTIzMzNaMDMxMTAvBgNV
BAMTKDg2RkE1RkQxQTMxMjIyQTQzN0NGMTlFMUFGQjNGNjY5MENCNEQ3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI06vL7ompLuvIy2br9x6LvBCu
pqRW6qeV8XHzrjiO95EK9eAh15eDzBJsywhwiejjXNF09Md4QDK+o/d2QBTeB4WF
iJDe+ZI9B/Pq9jUkMutttNph1LjJUgD/0Aj/UgxPmDsKl1BNEDJxKt3Pb5nf6pb0
F5mzJ8F7Iywmoci+vh9/ouWu3oZsXap4/MTwvc6o6MY10vy9AgHev3iBLScOP0vI
GPP/KSLxVFRgyjTiilqtVePQtD4orogmRGcemCeEbeExxJo9oMiHV8h0C673GWGY
FglaVeopsH3qiv1ABbvWxlZKhUgD2gH8Hz6FXZvIj6zCfo8e8ucxWg6pEtFBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUhvpf0aMSIqQ3zxnhr7P2aQy01xAwHwYDVR0j
BBgwFoAUQLKEAqiR5rNOuaL2r3bLF9qbADowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzJiYjg3MS0wMThkLTRkMjEtOTkxMy1mYzk0NmMzODc5NGYvMC80MEIyODQwMkE4
OTFFNkIzNEVCOUEyRjZBRjc2Q0IxN0RBOUIwMDNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBCMjg0MDJBODkxRTZCMzRFQjlBMkY2QUY3NkNCMTdEQTlC
MDAzQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MmJiODcxLTAxOGQtNGQyMS05
OTEzLWZjOTQ2YzM4Nzk0Zi8wLzMxMzAzMzJlMzEzMTMzMmUzMTM2MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncaYwDQYJ
KoZIhvcNAQELBQADggEBAC015Md5/FbZ+xmRgQnDpzUmXn2HD+00xf79BPOoC9Ip
k8rp+CLgAD0th38U3e3GFLzxNxQ28rEh/JtGyj+sBik8xhdo3k2qatgu/3TWdsxw
GcviytYd1mKjtmzQ3r3XQHjvKBG6a3EKTEn0SwuI2miz1EY0+UaD8TqkaY1Rn6cM
frwiNTfIGcEldsycKTGfypYDxGexfwf/SLHj83dyfdHG0XDcr1fMxo+Y8v+00csn
WSx7BH+mfzbszs3S7cl3SDDlfHSXWiHznT/qJLDF7j0r67Q4GRGlKYKLZq5kxIU/
XgPHYDfYJ4yqh9bQROgwVms3nfcS1bWAxgeWFCRuVfo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org