Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313339393637.roa
File: 3130332e3137332e3134312e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier: WR5jX4UvkkBSHIKAKjq5RZUzDyPI9e9hgory40oDmdo=
Subject key identifier: F3:98:3D:2E:F0:B7:5B:3D:69:A4:0A:88:10:13:0C:82:94:06:FF:B3
Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Certificate serial: 671373EC5C6D1DE30E79A3EBB10D0F4DDE43B1B0
Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313339393637.roa
Signing time: Thu 25 Aug 2022 11:00:00 +0000
ROA not before: Thu 25 Aug 2022 10:55:00 +0000
ROA not after: Thu 24 Aug 2023 11:00:00 +0000
asID: 139967
IP address blocks: 103.173.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:13:73:ec:5c:6d:1d:e3:0e:79:a3:eb:b1:0d:0f:4d:de:43:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Validity
Not Before: Aug 25 10:55:00 2022 GMT
Not After : Aug 24 11:00:00 2023 GMT
Subject: CN=F3983D2EF0B75B3D69A40A8810130C829406FFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:0e:2b:41:5d:42:06:c2:8c:f8:0f:5a:7f:
14:ef:48:4f:92:0b:72:48:2d:0d:1f:bb:c1:f4:52:
ae:99:85:02:74:e0:19:e1:5f:45:0e:cf:f6:db:c1:
32:44:8f:9a:f8:9e:ae:24:cf:bd:0e:be:bd:ec:75:
2f:6e:f4:15:c3:00:ab:18:b0:eb:01:91:df:ae:b8:
b2:19:6b:56:4f:78:b7:0e:d1:c6:00:11:ea:55:21:
fa:bb:75:5f:e5:b5:e6:59:6c:d0:73:a7:72:57:63:
73:22:81:31:b8:16:0b:c3:78:14:f7:ee:e2:33:75:
88:dd:61:e7:c6:4d:1e:f6:e5:f6:54:90:5f:22:f8:
be:37:54:6a:93:d3:d7:eb:44:72:98:9c:21:58:39:
ab:83:67:81:a9:3b:2c:77:b9:0d:05:3d:9a:38:71:
e4:9f:15:d0:ff:46:ac:50:b6:5e:ba:94:95:f4:07:
2a:63:e7:c0:65:5d:dc:84:e6:b6:96:38:21:77:fd:
ac:25:c4:63:35:f3:73:ca:56:56:16:86:fb:f2:f4:
b1:e1:ec:5b:95:68:c5:ce:98:53:81:e5:c6:de:be:
73:c0:3c:23:b7:8f:86:dc:f0:03:1f:5e:c5:a8:26:
bd:00:a5:37:93:8f:ed:cb:0b:33:5d:d8:c2:e3:3b:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:98:3D:2E:F0:B7:5B:3D:69:A4:0A:88:10:13:0C:82:94:06:FF:B3
X509v3 Authority Key Identifier:
keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313339393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:76:0e:b7:bd:42:d5:18:3f:78:35:8b:fe:9b:0f:d2:31:2e:
7e:e7:39:81:a8:03:a3:53:2f:ef:2f:22:bc:83:6b:26:3b:a4:
0f:0f:9b:f3:59:d8:ac:ee:40:a1:f1:99:f0:8f:b3:38:f6:60:
de:4c:7c:70:58:5c:c7:bb:ec:32:77:02:de:18:3e:bb:86:22:
93:cd:e5:68:90:cd:3a:3c:c1:c2:17:e6:01:45:3a:a4:4f:7c:
ac:57:ca:49:9b:33:0d:ca:08:65:55:05:7e:27:5d:fe:a6:67:
9c:e7:e0:03:15:b3:63:4a:ce:3e:9a:6c:32:bd:76:fd:2b:89:
0f:78:df:a0:a9:79:91:3b:23:d5:66:a5:fd:99:8d:7d:4f:f5:
cd:4b:3f:11:42:16:65:40:72:27:bb:13:0a:0b:71:77:a1:87:
51:ed:45:a2:4f:8d:ae:b1:b6:31:4a:3a:b9:5e:e8:5b:5c:69:
8f:a1:77:ea:be:fa:6d:74:e1:ee:d2:1a:a7:48:bc:15:5e:47:
a1:7e:ea:4d:ad:ca:d9:2b:11:5f:7a:73:7b:93:39:36:b9:96:
b6:89:2e:2b:f8:38:98:dd:b8:ff:5c:ae:7d:6e:69:77:a2:f8:
b1:ef:a9:4a:40:44:99:ce:da:5a:af:06:13:9e:18:de:09:5f:
b1:a7:19:e6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZxNz7FxtHeMOeaPrsQ0PTd5DsbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1
RTJFNDQzMzAeFw0yMjA4MjUxMDU1MDBaFw0yMzA4MjQxMTAwMDBaMDMxMTAvBgNV
BAMTKEYzOTgzRDJFRjBCNzVCM0Q2OUE0MEE4ODEwMTMwQzgyOTQwNkZGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+A4rQV1CBsKM+A9afxTvSE+S
C3JILQ0fu8H0Uq6ZhQJ04BnhX0UOz/bbwTJEj5r4nq4kz70Ovr3sdS9u9BXDAKsY
sOsBkd+uuLIZa1ZPeLcO0cYAEepVIfq7dV/lteZZbNBzp3JXY3MigTG4FgvDeBT3
7uIzdYjdYefGTR725fZUkF8i+L43VGqT09frRHKYnCFYOauDZ4GpOyx3uQ0FPZo4
ceSfFdD/RqxQtl66lJX0Bypj58BlXdyE5raWOCF3/awlxGM183PKVlYWhvvy9LHh
7FuVaMXOmFOB5cbevnPAPCO3j4bc8AMfXsWoJr0ApTeTj+3LCzNd2MLjO2TxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU85g9LvC3Wz1ppAqIEBMMgpQG/7MwHwYDVR0j
BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx
NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF
NDQzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYWJiNTc4LWI5ZGItNGE0Ny04
ZDdlLTExYTYzNDI4OTAxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTM0MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrY0wDQYJ
KoZIhvcNAQELBQADggEBAKV2Dre9QtUYP3g1i/6bD9IxLn7nOYGoA6NTL+8vIryD
ayY7pA8Pm/NZ2KzuQKHxmfCPszj2YN5MfHBYXMe77DJ3At4YPruGIpPN5WiQzTo8
wcIX5gFFOqRPfKxXykmbMw3KCGVVBX4nXf6mZ5zn4AMVs2NKzj6abDK9dv0riQ94
36CpeZE7I9Vmpf2ZjX1P9c1LPxFCFmVAcie7EwoLcXehh1HtRaJPja6xtjFKOrle
6FtcaY+hd+q++m104e7SGqdIvBVeR6F+6k2tytkrEV96c3uTOTa5lraJLiv4OJjd
uP9crn1uaXei+LHvqUpARJnO2lqvBhOeGN4JX7GnGeY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org