Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313530323338.roa
File: 3130332e32302e3130392e302f32342d3234203d3e20313530323338.roa (raw, json)
Hash identifier: 0GWoyvBJorpO1mB+NbpvH+9n/ZQLMUmHARLK+q5s5rU=
Subject key identifier: 4B:9D:09:7D:A9:41:CE:32:C1:F6:FC:1F:21:F5:A9:41:75:0B:EA:93
Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Certificate serial: 098441CAB80F379C589B156739C980268A34B8D6
Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313530323338.roa
Signing time: Mon 24 Oct 2022 07:28:37 +0000
ROA not before: Mon 24 Oct 2022 07:23:37 +0000
ROA not after: Mon 23 Oct 2023 07:28:37 +0000
asID: 150238
IP address blocks: 103.20.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:84:41:ca:b8:0f:37:9c:58:9b:15:67:39:c9:80:26:8a:34:b8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Validity
Not Before: Oct 24 07:23:37 2022 GMT
Not After : Oct 23 07:28:37 2023 GMT
Subject: CN=4B9D097DA941CE32C1F6FC1F21F5A941750BEA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:e6:3c:1c:d1:f3:1f:54:86:88:4b:01:af:
09:38:2c:3c:c8:29:95:b7:f2:a1:bb:0b:04:41:f1:
06:0a:ba:aa:5f:a8:c8:43:ab:7e:09:55:82:ff:a3:
e1:76:28:0a:97:dc:23:1a:1d:13:8e:53:f3:8d:6a:
19:62:83:0c:5b:b8:22:04:83:0d:65:8a:81:a8:58:
f7:e6:a2:9c:62:6f:81:d5:61:81:67:eb:46:58:f3:
c7:41:5e:e8:64:5b:7b:28:59:b1:f6:31:14:27:4e:
9f:fc:c2:fd:e5:db:4a:47:c1:41:0e:70:69:8c:62:
2e:9f:19:9b:2c:d3:77:7d:6d:82:1b:94:9b:ce:7f:
4c:c0:72:1f:62:5b:d1:2d:24:c3:55:55:95:0f:4e:
3f:6e:e3:e0:98:7a:ef:f7:47:b3:b6:a7:8c:59:5e:
c2:2b:55:bc:e0:ec:b0:88:af:5c:10:37:62:84:e4:
ff:29:03:49:2f:bc:98:a4:88:1c:45:91:45:2d:2f:
8e:68:9d:56:84:22:72:8f:ad:ad:de:13:19:2e:ad:
03:9d:ad:8f:3a:78:83:b4:7a:e0:21:81:ef:5d:2b:
d8:3a:13:cc:29:e9:e7:13:1d:16:46:7a:30:0e:fb:
1e:8f:b5:2e:98:e0:d7:ee:64:c8:6c:0d:83:d9:89:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9D:09:7D:A9:41:CE:32:C1:F6:FC:1F:21:F5:A9:41:75:0B:EA:93
X509v3 Authority Key Identifier:
keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130392e302f32342d3234203d3e20313530323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:99:c7:01:26:a6:47:20:ec:25:0c:51:81:89:a9:0a:32:09:
fd:50:dd:b9:7f:59:28:f2:f3:69:88:d4:32:a1:a2:5e:2d:0c:
d1:c8:6b:4f:8f:7e:c3:96:77:08:99:43:92:83:05:93:e5:ba:
ba:9e:77:e6:13:f9:13:e6:7d:04:1a:46:7a:f7:e0:3a:b5:74:
3f:73:d8:be:02:6e:fb:0e:b3:ae:bd:ec:9d:fb:06:16:35:41:
bf:50:8d:f1:0c:d7:78:dc:b3:f8:4b:32:4b:40:47:3a:18:b6:
8a:ba:15:90:4c:85:b4:c5:85:d6:b5:12:9c:05:44:ec:d3:98:
bb:1a:c4:2d:c6:ac:74:e8:f4:c7:40:91:9c:65:0f:bd:59:63:
a5:dc:ea:9b:9d:d5:69:a9:c5:46:05:35:14:1f:a6:d4:f0:e1:
31:ba:15:dd:ed:fb:66:91:26:b9:52:02:f1:7a:5f:5c:1c:59:
4e:e3:84:f7:15:d7:08:f9:32:c3:fd:c9:a1:4a:e1:a6:a5:68:
5e:ed:0f:62:c4:d4:84:a2:ec:b4:95:30:5e:8c:75:c5:03:c6:
78:1d:10:71:03:0a:f8:15:f6:48:8d:20:88:35:0e:9b:5d:8a:
65:c4:2b:d6:88:c7:3f:64:8e:0d:46:5f:7e:cd:04:c5:c8:64:
f8:9e:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org