Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32332d3234203d3e20313530343933.roa
File: 3130332e35392e3136302e302f32332d3234203d3e20313530343933.roa (raw, json)
Hash identifier: m9zZDkvtWrqCG01dIQOEsHwJMjW4AStJIKuQx5DVZFI=
Subject key identifier: 7B:81:93:6A:0D:36:87:30:DF:BC:60:C1:ED:E9:FB:E9:08:F0:37:20
Certificate issuer: /CN=9481EF5008E46F3618B42A0945A1522D5C041511
Certificate serial: 3AFBEC484E1C6FF75DBAF73CAA4DAA1100470E0E
Authority key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32332d3234203d3e20313530343933.roa
Signing time: Sat 04 Mar 2023 11:10:09 +0000
ROA not before: Sat 04 Mar 2023 11:05:09 +0000
ROA not after: Sat 02 Mar 2024 11:10:09 +0000
asID: 150493
IP address blocks: 103.59.160.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fb:ec:48:4e:1c:6f:f7:5d:ba:f7:3c:aa:4d:aa:11:00:47:0e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481EF5008E46F3618B42A0945A1522D5C041511
Validity
Not Before: Mar 4 11:05:09 2023 GMT
Not After : Mar 2 11:10:09 2024 GMT
Subject: CN=7B81936A0D368730DFBC60C1EDE9FBE908F03720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:c7:18:b2:91:90:3b:43:cc:61:4d:a8:08:
72:c9:24:61:cb:d3:85:4a:03:34:fd:a6:e1:5f:e3:
d3:6e:77:1d:83:dc:03:21:cc:45:34:6b:78:c3:8d:
5d:24:c4:a9:8d:c1:3b:c1:1f:c2:bf:0b:e1:b1:09:
ef:2e:98:d1:7c:53:2b:b8:b7:0a:3b:ed:d5:8f:e9:
9a:6c:64:55:87:e3:a3:55:bf:2c:5a:89:52:a2:2d:
87:1a:25:48:e7:a7:ff:b9:8b:01:00:00:ba:e5:ab:
70:96:39:75:13:dd:c5:61:62:57:20:9a:20:4a:c5:
8d:65:df:84:bb:e2:8d:2f:f2:74:c6:b8:42:75:45:
bc:db:ab:2c:c4:13:dd:18:e7:c0:ad:30:ca:e9:04:
b6:24:13:2c:d0:fa:9c:1f:02:94:37:78:7e:2f:8c:
8d:9a:1e:44:07:ca:73:0c:2d:5b:0a:db:c5:77:b7:
78:bc:c7:82:48:e6:ed:ac:6f:fa:2b:3f:5e:8c:27:
d3:50:87:45:4b:39:0c:a8:ba:fa:3e:aa:6b:53:a0:
30:d2:fe:f6:e3:28:49:e0:35:79:c0:4e:2c:17:ed:
22:90:ca:56:fe:31:7e:c8:0c:9a:72:e2:1c:6d:66:
28:cb:47:ed:14:e6:a2:9c:77:3f:11:41:8d:0d:b0:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:93:6A:0D:36:87:30:DF:BC:60:C1:ED:E9:FB:E9:08:F0:37:20
X509v3 Authority Key Identifier:
keyid:94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32332d3234203d3e20313530343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.160.0/23
Signature Algorithm: sha256WithRSAEncryption
16:e0:a0:91:d0:7f:31:34:a7:6f:c9:0b:a1:b4:9b:95:8d:10:
9c:5c:73:ec:15:7a:b5:fd:94:7f:a0:6b:ff:ed:1f:0d:34:a0:
81:4f:c2:ec:5f:3f:0d:da:7f:12:aa:86:ea:66:21:fc:57:55:
b4:4d:19:ae:d5:30:e8:71:a2:e7:85:c9:88:44:6c:98:37:bd:
de:56:7c:69:db:fd:84:da:a1:39:43:ed:20:e9:a0:f9:f0:56:
50:c2:2b:07:c1:d8:59:d6:58:37:60:50:a6:13:42:28:ca:7e:
ce:d9:d0:f8:24:d7:37:a5:6d:b2:32:be:d9:7e:15:1d:e7:e1:
7f:4d:41:24:63:5d:37:7f:ca:57:de:a5:8c:ee:2f:8b:cc:ba:
66:3d:45:d4:21:a7:1c:b8:42:9e:46:c0:0f:20:42:e3:14:93:
b0:ef:5d:5a:9f:84:c1:3a:47:fe:c9:23:f5:12:e4:c3:b2:df:
55:4f:8f:09:f3:f2:fa:41:ca:0a:36:07:be:28:da:2f:3e:05:
bc:b2:05:99:13:6d:55:fc:59:e2:92:3d:96:2f:ef:32:e9:19:
6a:ff:e6:71:48:29:e0:cc:36:95:6f:0f:24:e3:5a:f6:30:f5:
ff:77:5e:9a:b2:36:7a:41:4d:fd:1e:6d:ac:de:05:1c:19:98:
09:0c:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org