Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3232203d3e203539323832.roa
File: 3130332e3232382e3234342e302f32322d3232203d3e203539323832.roa (raw, json)
Hash identifier: HthSWniwt0F6ZKD0CpTRdnt50GMhM7o18uVdIymupkk=
Subject key identifier: 1D:58:0B:DC:5E:91:19:34:17:5F:0B:85:28:35:8E:BB:44:1B:A4:F0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4B387B803D6A8FCD38185F0F63D6B5056FEBE991
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3232203d3e203539323832.roa
Signing time: Sun 28 Aug 2022 23:06:12 +0000
ROA not before: Sun 28 Aug 2022 23:01:12 +0000
ROA not after: Sun 27 Aug 2023 23:06:12 +0000
asID: 59282
IP address blocks: 103.228.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:38:7b:80:3d:6a:8f:cd:38:18:5f:0f:63:d6:b5:05:6f:eb:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Aug 28 23:01:12 2022 GMT
Not After : Aug 27 23:06:12 2023 GMT
Subject: CN=1D580BDC5E911934175F0B8528358EBB441BA4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:98:fe:74:1e:a5:ff:89:b8:b8:57:f4:68:
35:6c:dd:4c:f8:26:ff:e7:7a:2b:38:2c:02:70:ef:
aa:8f:72:33:64:c0:04:c9:11:cb:d1:f1:e2:7c:e5:
66:9a:75:c6:fd:03:0f:45:f9:58:98:b7:af:88:ab:
0b:1a:2e:8e:b2:48:b3:8f:0c:f7:24:88:70:e2:48:
7e:43:9d:58:40:ff:27:1f:09:49:f8:25:31:19:7f:
0a:f1:8e:c5:de:cf:82:b9:1a:0d:3d:dd:08:24:90:
0a:3a:f6:41:57:e9:59:62:29:ec:85:c3:07:c5:1c:
ba:5f:f3:45:42:47:75:51:7c:f0:f4:1c:5f:24:69:
e3:6f:2a:0b:86:ee:61:ed:09:cf:01:47:d0:9a:15:
2c:b4:a2:38:11:76:2a:fa:9b:b1:25:fd:28:dd:85:
db:e8:45:0e:60:6b:c5:0d:8c:28:00:26:54:11:03:
bd:d6:a7:99:91:52:1e:11:76:fc:12:d8:0f:bd:c3:
2c:61:e5:a5:52:b4:87:c9:56:6f:3c:46:a7:be:48:
2c:f5:47:ad:7d:9b:4c:87:d3:3d:20:71:e2:f3:74:
c2:db:f9:b4:03:0a:fb:bc:70:44:9d:58:c4:23:f1:
b6:5a:52:c0:3a:3e:0b:cd:1f:d4:b8:b0:96:3c:65:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:0B:DC:5E:91:19:34:17:5F:0B:85:28:35:8E:BB:44:1B:A4:F0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3232203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.244.0/22
Signature Algorithm: sha256WithRSAEncryption
43:4e:e5:28:c6:cc:c6:da:b9:84:0d:d4:5e:51:30:c3:57:a9:
50:f7:65:93:82:63:f6:7b:c8:dc:8d:a0:bc:30:cc:d2:20:aa:
95:d1:bd:c5:16:76:12:09:81:e3:19:4a:2e:20:34:eb:f9:42:
79:3c:77:e0:a0:34:10:02:53:a7:a0:58:56:07:79:68:5e:d5:
1f:0e:0a:1e:c4:41:7c:c6:96:e1:44:5e:41:c6:88:e5:3e:5f:
cb:bd:34:15:c7:95:aa:ac:7e:f9:18:21:9c:9f:6b:a6:dc:fd:
a9:07:b2:45:94:e8:db:dc:4d:cd:89:99:d4:7c:ca:cc:02:c9:
78:db:3c:e1:be:68:e1:dc:cd:88:d9:21:d2:08:b3:98:33:89:
6a:9d:cb:32:d9:63:76:ef:07:25:05:df:58:42:f4:c3:e6:79:
86:3f:9f:0c:33:04:e1:2b:7c:03:d1:bc:63:22:19:b4:49:93:
db:d3:c4:12:c4:e3:fa:78:58:ba:4e:cc:51:45:d1:37:d8:2b:
4d:14:20:53:57:c9:bd:89:a4:9d:8d:eb:10:e7:09:59:82:c9:
93:ea:40:06:91:03:6e:19:3f:cb:f5:bb:b8:43:a3:d3:2d:23:
0a:e1:25:e3:06:8e:03:7e:3e:db:3b:d7:c7:ef:08:1b:df:6f:
38:dd:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org