Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313337333739.roa
File: 3130332e3137332e3134312e302f32342d3234203d3e20313337333739.roa (raw, json)
Hash identifier: cCASxBYqvBnUwv4rq964R2djn4JZYz2HBwPDmQiPY+Y=
Subject key identifier: B0:00:95:58:95:F6:6B:19:98:97:E1:4B:72:7C:B2:EF:47:05:8B:DC
Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Certificate serial: 246AD948EB8A914572CDED91B7D06F1004D14A64
Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313337333739.roa
Signing time: Sun 02 Apr 2023 17:49:25 +0000
ROA not before: Sun 02 Apr 2023 17:44:25 +0000
ROA not after: Sun 31 Mar 2024 17:49:25 +0000
asID: 137379
IP address blocks: 103.173.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6a:d9:48:eb:8a:91:45:72:cd:ed:91:b7:d0:6f:10:04:d1:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Validity
Not Before: Apr 2 17:44:25 2023 GMT
Not After : Mar 31 17:49:25 2024 GMT
Subject: CN=B000955895F66B199897E14B727CB2EF47058BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:78:b9:0e:bf:2d:8d:8d:26:4c:e5:2e:ee:
9c:26:fe:d5:0b:94:e0:6a:d4:f9:dd:be:c4:6b:95:
51:f5:50:3f:15:b1:5d:e1:28:9c:c2:27:39:c6:f5:
89:f7:3a:00:4a:0c:58:4c:f5:46:67:1f:af:5c:d7:
14:c5:b2:be:ab:f6:9d:7f:d0:92:d8:45:a7:2c:9c:
05:63:40:57:d6:a5:39:fb:09:ab:74:fa:dd:93:65:
15:04:d3:7b:38:dd:49:c7:0a:2c:b8:1f:85:e5:5e:
9a:cc:12:eb:71:92:40:4e:c8:06:ab:7a:bf:e5:48:
d0:55:56:7b:5e:b9:4e:dd:a3:cc:1a:56:c1:fb:0d:
dd:69:13:c5:7c:69:2c:22:f1:fe:c6:56:c9:e6:4b:
b1:dc:2f:44:8a:e1:0e:9b:06:2f:9c:24:ed:bd:36:
33:12:e0:95:21:e9:9a:5d:c3:64:b4:34:d3:13:f8:
9c:41:70:9c:9e:4b:30:90:5d:8a:e0:84:86:ea:d1:
6c:6f:f3:7d:b8:c0:50:3f:2f:71:90:b1:2f:2c:14:
46:56:b1:ec:f7:59:ee:04:67:f4:cf:6b:9c:01:8d:
10:08:cf:e6:df:73:05:e3:b3:41:20:a0:6f:7e:12:
b8:4c:25:0b:96:ed:20:ad:ee:8e:cf:1f:45:cb:51:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:95:58:95:F6:6B:19:98:97:E1:4B:72:7C:B2:EF:47:05:8B:DC
X509v3 Authority Key Identifier:
keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313337333739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.141.0/24
Signature Algorithm: sha256WithRSAEncryption
75:08:39:49:7e:bc:54:b8:df:fd:64:41:c4:c7:3e:5e:54:50:
ac:e1:5d:28:14:48:6f:3e:d3:38:55:20:c8:2a:5c:12:a7:2b:
a0:97:84:41:0e:f5:40:2a:33:fd:90:bc:0e:75:13:86:7c:c8:
71:f5:28:b3:a1:61:c2:51:d9:28:b9:a4:89:88:a3:f0:5e:0c:
5d:35:7f:fd:2f:f0:c0:ef:cc:ce:4f:83:c0:c9:5e:67:b0:86:
f8:75:ab:1d:e0:e4:94:99:75:37:68:8d:37:60:84:67:56:6e:
e9:e2:fe:9c:78:aa:95:32:00:9d:0a:b0:0e:40:1d:24:f4:9e:
11:89:af:18:dc:cd:7e:93:c8:52:38:d4:24:af:79:3a:67:dc:
8c:db:b7:b9:64:9b:26:ce:e5:23:ac:c4:64:e3:1d:e0:87:00:
98:9f:ac:ad:b0:44:be:e4:c2:38:15:36:dd:ac:c3:7a:98:27:
e8:5c:0e:9c:02:59:26:e4:aa:13:97:8a:d1:fa:fa:d4:89:e5:
17:91:8f:00:37:38:5b:9d:6a:bc:d8:cc:d4:d3:f2:01:54:c2:
ac:99:08:9a:a5:56:65:09:2f:45:38:ed:89:96:e1:34:9b:2f:
ee:eb:3a:6a:3f:6a:e5:c3:b8:15:a2:1a:3c:b0:d3:c2:ec:fe:
ec:b4:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org