Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313431313134.roa
File: 3130332e3137332e3134312e302f32342d3234203d3e20313431313134.roa (raw, json)
Hash identifier: iSRi1iDEl9VGWVogBlMxw52Zkuhd3qCfbpiSZgk1Uq0=
Subject key identifier: 94:6B:89:DD:DD:00:0E:C2:43:18:0B:D2:E1:EC:C5:7E:C7:42:97:02
Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Certificate serial: 0C9307B773AC91F45CF80375F2233C247B654B30
Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313431313134.roa
Signing time: Thu 09 Mar 2023 06:59:14 +0000
ROA not before: Thu 09 Mar 2023 06:54:14 +0000
ROA not after: Thu 07 Mar 2024 06:59:14 +0000
asID: 141114
IP address blocks: 103.173.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:93:07:b7:73:ac:91:f4:5c:f8:03:75:f2:23:3c:24:7b:65:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Validity
Not Before: Mar 9 06:54:14 2023 GMT
Not After : Mar 7 06:59:14 2024 GMT
Subject: CN=946B89DDDD000EC243180BD2E1ECC57EC7429702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:f7:07:75:8e:16:9c:ce:20:89:a1:d4:39:
a1:f0:e6:8e:9b:b7:f3:9b:3d:f3:ea:e4:e2:30:c1:
19:66:39:47:ed:b8:30:e9:4c:d8:e1:97:ad:ee:01:
43:8d:71:88:2d:dc:26:4b:0a:5b:5c:70:23:ea:77:
c4:36:4d:02:48:e1:89:bd:55:b5:63:73:7e:06:44:
f8:62:f0:5e:6f:48:58:25:2d:9d:3b:00:1e:fd:2c:
4a:bf:fd:47:6f:b6:d3:49:55:6a:4c:2c:54:9f:cd:
93:a6:68:db:a2:b5:c6:42:8b:81:d5:c9:e0:80:fb:
c4:5b:90:3c:1a:22:aa:91:a2:b6:c6:e6:f4:56:c0:
90:44:bb:fc:53:85:3c:ac:2d:85:26:13:10:50:45:
e0:89:f3:d7:b8:81:58:e5:9b:3a:e9:fe:b3:8a:53:
ae:95:46:ac:21:54:71:25:a2:ff:ed:5b:ff:a2:d6:
65:0f:f0:a8:d7:0c:f3:34:ec:f4:a9:46:ea:67:31:
29:20:20:af:fc:f4:24:b5:6b:75:00:e0:77:31:bb:
04:8f:db:80:8d:59:d8:26:62:eb:c2:e5:d3:14:69:
e6:56:d2:6d:4c:6a:54:04:41:e5:04:dc:6c:41:6e:
cd:1e:22:c4:20:8d:fd:50:e4:ce:77:77:7f:eb:0a:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:89:DD:DD:00:0E:C2:43:18:0B:D2:E1:EC:C5:7E:C7:42:97:02
X509v3 Authority Key Identifier:
keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e20313431313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.141.0/24
Signature Algorithm: sha256WithRSAEncryption
84:68:ba:3c:d2:cc:98:3c:5d:b2:6b:a8:e4:e7:5d:b3:d6:c1:
5d:3c:50:ce:07:48:c1:68:34:eb:74:eb:36:9e:76:20:56:52:
f0:ca:d2:df:75:7b:51:a9:cc:36:ff:8e:d0:91:90:fb:a9:1f:
b1:d2:63:c3:63:32:4d:ae:10:75:f5:ea:3c:31:da:9b:1c:c2:
7e:85:ce:f2:b6:fd:49:a8:38:8c:72:d2:f1:6c:fd:1a:4f:3d:
0d:23:ae:cd:9e:37:05:b6:a3:37:82:6c:61:4b:99:44:d6:f4:
44:27:5f:a3:35:82:be:de:80:3c:c5:b8:df:01:6b:ef:de:d1:
20:aa:0f:eb:88:45:af:c0:c9:70:ed:70:86:c9:69:62:07:bb:
ad:25:a9:d0:1b:b6:6a:9a:fc:56:a2:2d:f9:ea:b7:9d:64:bd:
14:a4:59:b2:56:dc:20:53:d3:ed:7f:3e:8c:d4:f7:d9:96:b9:
54:c8:8d:34:2c:b2:06:ec:90:1a:80:5d:f4:55:31:0d:b3:4c:
88:17:12:4e:e9:12:a9:99:4e:ec:66:0c:16:df:c4:47:39:47:
99:c7:a3:87:cd:52:92:8b:34:ba:f6:80:05:45:e3:ab:45:79:
c5:ea:f3:fe:24:b3:f2:6b:85:d5:27:cf:f7:9f:14:82:ab:71:
e6:e1:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org