Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3234203d3e20313530323338.roa
File: 3130332e32302e3130382e302f32332d3234203d3e20313530323338.roa (raw, json)
Hash identifier: Zve6Z2FC/g6BX8dEDqaqpo7Tg9PS5l3oM/x0ryyVVXQ=
Subject key identifier: 3C:B3:A2:C8:7B:73:6E:05:4E:E5:DA:0E:12:BD:FF:1E:2A:BA:71:12
Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Certificate serial: 1F4F4BC3F79F7DA88D387BB9B9D02D52131BCA47
Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3234203d3e20313530323338.roa
Signing time: Sun 30 Oct 2022 05:23:47 +0000
ROA not before: Sun 30 Oct 2022 05:18:47 +0000
ROA not after: Sun 29 Oct 2023 05:23:47 +0000
asID: 150238
IP address blocks: 103.20.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4f:4b:c3:f7:9f:7d:a8:8d:38:7b:b9:b9:d0:2d:52:13:1b:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Validity
Not Before: Oct 30 05:18:47 2022 GMT
Not After : Oct 29 05:23:47 2023 GMT
Subject: CN=3CB3A2C87B736E054EE5DA0E12BDFF1E2ABA7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:f8:b2:c3:0e:38:93:13:c2:58:e2:65:9d:
4b:9a:f7:ef:07:85:77:27:47:1b:08:7e:3a:e0:46:
01:77:dc:68:28:23:da:6a:29:c3:96:70:ba:51:ca:
bc:a3:c4:61:3a:d6:53:4a:be:5e:49:19:da:b5:42:
9a:a3:de:d6:16:03:1c:74:2c:6e:9b:13:b2:a0:96:
69:76:3d:99:1d:1f:c3:03:33:f6:c9:eb:d3:7b:dd:
a2:f6:e1:a8:a4:d7:87:ef:3b:82:1c:ba:73:06:17:
a0:88:e7:66:48:15:4a:44:ab:a0:2d:e4:e5:51:11:
3a:f6:fc:cc:5a:15:a6:14:8a:7a:aa:46:14:32:b8:
fb:49:47:e4:9a:b7:8a:71:99:3c:69:1d:d5:81:26:
cd:d2:72:6e:dd:d5:bf:16:d0:0b:36:a0:4a:98:3a:
e9:5f:a2:51:39:e6:2c:a9:6b:ab:00:0c:88:0d:ac:
a6:29:40:66:09:8a:99:db:6c:7d:10:7f:c5:6d:9e:
b2:29:69:e8:db:d2:1c:ad:c2:64:8d:a1:bc:d6:3c:
93:27:cc:c4:e6:15:24:78:ed:b6:5a:7a:d9:19:29:
f9:db:6c:93:49:da:33:39:06:bd:22:8e:0b:f6:8a:
b8:93:20:ab:96:0a:e2:10:53:ec:e7:1b:9f:f2:45:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:A2:C8:7B:73:6E:05:4E:E5:DA:0E:12:BD:FF:1E:2A:BA:71:12
X509v3 Authority Key Identifier:
keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3234203d3e20313530323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.108.0/23
Signature Algorithm: sha256WithRSAEncryption
63:a7:bc:76:c7:2d:69:85:5e:bb:2b:c9:21:eb:52:14:4a:bc:
27:96:bc:f3:ec:27:74:8c:78:88:c6:b9:c6:36:4a:c0:30:dc:
f6:85:4d:ef:30:b1:78:14:ff:ab:a9:cb:27:9f:f5:82:75:7f:
5b:85:38:f7:3b:47:26:22:d1:a1:64:60:e6:1e:10:19:d2:32:
c4:7a:09:0c:1c:79:7e:87:03:8e:28:88:3b:52:f3:ae:cd:e2:
b0:bb:b5:63:ad:ee:49:7d:0c:89:75:c9:b8:01:73:14:ee:f3:
2d:7a:b5:45:e1:45:05:a0:63:19:80:4c:d8:2d:7f:45:2d:38:
db:dd:00:a0:4c:b8:bb:dc:f0:6c:e2:b1:f4:cd:06:77:ee:5f:
13:26:ce:b2:6a:57:6c:e1:a8:b9:d9:47:a4:9e:57:ec:9c:e5:
8a:7b:3a:f9:1e:b9:06:63:c1:ef:89:fc:cb:a3:77:b1:64:33:
4c:b7:e8:a0:98:ba:58:6e:b7:fa:67:bb:46:e6:85:99:07:99:
d1:8a:f7:cd:17:71:fc:39:7f:9e:39:11:30:35:fc:05:80:93:
7f:3b:7c:04:8a:db:ac:64:ca:0a:5d:91:d7:74:bc:59:24:79:
0a:ce:ee:41:60:2b:20:05:a8:4c:b8:1e:e9:53:82:08:62:26:
04:d1:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org