Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa
File: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: Dn2sXBeSZyqEAJHw9tEmfv6OYNyQ5ChhXG2Rnjbn7MU=
Subject key identifier: 57:4E:4F:1A:02:1B:BE:E8:6C:B5:05:82:75:E0:80:97:E8:B2:BC:4E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0D9FA482C487CF41FCD95D8E060D4A3242CEDB9B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 05:00:00 +0000
ROA not before: Mon 26 Sep 2022 04:55:00 +0000
ROA not after: Mon 25 Sep 2023 05:00:00 +0000
asID: 59282
IP address blocks: 103.228.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9f:a4:82:c4:87:cf:41:fc:d9:5d:8e:06:0d:4a:32:42:ce:db:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 04:55:00 2022 GMT
Not After : Sep 25 05:00:00 2023 GMT
Subject: CN=574E4F1A021BBEE86CB5058275E08097E8B2BC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:32:0e:03:cf:94:57:e3:7a:c2:a1:ec:02:
1b:23:93:ba:bc:93:3a:10:be:53:69:74:c5:74:b4:
e9:e0:76:e3:56:1f:62:d0:d0:02:51:75:dd:40:fd:
c6:13:2e:84:5b:4e:07:e3:3b:db:2b:fb:3f:50:92:
3e:41:c7:38:67:60:0b:05:13:85:a2:54:eb:67:c4:
2e:0f:83:82:9e:1b:40:bb:da:6c:19:fb:2a:9d:b1:
dc:79:d9:89:54:92:cf:49:1f:87:20:55:80:96:d6:
93:95:b6:3d:35:dc:a6:90:62:98:c0:71:ca:75:05:
a1:6b:6e:7a:d6:f1:27:e1:9f:cb:4b:7c:cb:75:b9:
72:88:1f:5a:fd:87:05:d2:19:6b:b8:36:38:34:99:
50:c0:20:73:26:0f:b4:33:60:84:8f:2a:a6:2f:8c:
0a:96:07:a4:07:87:d4:91:68:f1:9b:b1:b5:75:f5:
39:2c:91:aa:2c:29:d2:4f:4f:ed:2a:70:c9:a7:12:
b5:69:59:5c:2a:d3:3a:a6:93:4c:85:6e:dc:fc:fd:
4a:e6:90:16:c5:e2:67:60:78:01:2a:01:6f:a6:b5:
de:ca:d9:81:20:d7:9a:a7:b3:b4:ae:e6:a2:7e:c8:
9d:af:5b:8b:4d:06:21:33:ac:79:62:86:86:c6:ba:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:4F:1A:02:1B:BE:E8:6C:B5:05:82:75:E0:80:97:E8:B2:BC:4E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:39:f5:69:48:f3:59:c7:4d:88:4b:0d:98:c6:dc:cf:cd:ec:
a4:12:6b:0f:7e:4b:2b:41:79:1a:75:17:eb:0e:ea:67:39:89:
17:9a:86:86:cd:e2:b7:3d:e1:8c:d4:d8:ea:21:5b:fb:d3:e3:
cb:47:49:cf:c4:f2:20:40:ba:2a:eb:14:76:04:db:c1:8c:d8:
2e:ac:89:fd:99:62:b2:b1:6a:cc:d4:8c:65:80:da:a2:da:1a:
3b:c8:ec:85:d1:3d:e0:4d:b7:e9:df:f7:34:7d:94:ae:38:a9:
62:9d:34:c9:68:2d:41:3c:06:d9:f8:4c:a3:e1:9d:30:e3:a9:
2d:96:f7:bc:98:2e:97:06:ac:53:29:b2:d7:01:57:78:d0:10:
4c:66:64:b1:8c:c3:81:20:db:07:e9:da:9f:27:a6:a9:10:b9:
86:9e:58:b5:4c:78:9a:a5:f5:e6:86:4c:07:a5:50:da:a2:8b:
a2:f9:08:68:ce:05:c8:e6:cb:b0:a0:ed:8d:80:99:0f:13:c0:
b3:02:a9:47:e1:28:38:5d:49:17:31:90:2f:1e:55:2a:93:bc:
16:8c:74:6f:f3:73:a4:20:e7:94:b3:33:c2:db:ed:b2:0b:eb:
95:14:64:1e:ef:cb:43:15:01:16:dd:59:9c:8a:5a:ec:5f:b4:
9c:32:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org