Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3233203d3e20313430343233.roa
File: 3130332e3139312e36302e302f32332d3233203d3e20313430343233.roa (raw, json)
Hash identifier: WhzAIgcjMv+7Jmg+cprq3fhdOweZuHOeuoEa41Zrdfk=
Subject key identifier: 7E:1F:C1:27:F5:8B:0E:21:4D:F6:FE:F2:7D:2E:E7:51:7E:47:28:1F
Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Certificate serial: 08289ECE82F06F99522EF8457245DD78EFCD0E4C
Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3233203d3e20313430343233.roa
Signing time: Fri 15 Jul 2022 17:52:31 +0000
ROA not before: Fri 15 Jul 2022 17:47:31 +0000
ROA not after: Fri 14 Jul 2023 17:52:31 +0000
asID: 140423
IP address blocks: 103.191.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:28:9e:ce:82:f0:6f:99:52:2e:f8:45:72:45:dd:78:ef:cd:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Validity
Not Before: Jul 15 17:47:31 2022 GMT
Not After : Jul 14 17:52:31 2023 GMT
Subject: CN=7E1FC127F58B0E214DF6FEF27D2EE7517E47281F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:96:ae:f5:91:57:ad:bd:79:3c:a4:a2:7f:
e6:d8:c7:6d:41:d6:d3:a6:c5:2e:aa:4a:d7:09:65:
df:ff:71:de:fc:7c:cb:d5:9d:c7:0e:a7:3c:3d:d7:
7b:4e:d7:42:04:dd:b3:d2:da:01:da:a7:56:20:df:
3e:be:e7:50:33:35:da:a9:11:27:2c:ab:ed:2d:3e:
39:01:e4:b1:2d:08:e0:87:5a:34:8a:47:98:97:3c:
c0:f1:53:73:d4:0c:6a:ab:0f:97:24:cb:91:f1:76:
12:d0:ce:be:90:83:59:a1:82:e6:22:b9:fb:49:0c:
95:24:f1:a1:25:c7:02:d7:2c:13:96:50:df:b1:95:
c2:06:2a:24:36:41:05:2d:e4:45:aa:dc:7e:fe:17:
bc:85:b7:1f:e2:3a:2a:4f:5b:13:da:69:6b:96:69:
21:82:12:8e:75:33:5e:80:e3:8b:bd:e7:6f:37:db:
91:91:75:64:a9:b1:8e:5c:dd:4b:21:b6:59:08:ad:
08:05:5c:2c:ed:d2:f9:5e:a5:4a:1a:93:69:70:26:
54:1d:e9:35:ac:1f:f8:1b:0b:73:1e:ca:74:f4:97:
63:89:e8:4f:da:c7:44:02:04:60:ca:82:42:8d:d6:
46:b7:31:13:ea:ef:0b:fe:7b:49:98:f0:12:cf:5b:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:C1:27:F5:8B:0E:21:4D:F6:FE:F2:7D:2E:E7:51:7E:47:28:1F
X509v3 Authority Key Identifier:
keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3233203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:33:26:f7:a8:15:cc:68:02:bb:17:9a:95:60:a5:89:5d:90:
db:4d:df:60:82:7b:53:af:16:85:b2:2f:39:cc:46:9c:fa:f9:
af:b2:86:a1:fc:9f:73:9a:f0:67:2f:a5:7b:0e:be:c8:d4:21:
39:7c:f2:a7:83:e9:69:b9:d8:8c:45:b9:63:fe:af:e0:b6:fa:
e1:43:2f:85:55:ae:cd:04:27:26:4e:19:17:1c:5d:dd:de:f1:
0e:62:66:21:01:44:85:7a:eb:0a:bc:f6:83:f0:57:37:ec:89:
43:14:5b:45:d3:d2:51:4d:3f:fe:cf:c1:4c:9e:3e:b4:f9:97:
9c:bb:b6:dc:f7:a7:b3:ae:6b:ff:ba:b5:ff:37:68:c7:9b:48:
48:0d:fc:56:1a:5a:eb:b4:b6:8a:3b:2c:92:a0:64:ca:b9:8c:
32:7f:ff:55:b3:1b:aa:20:a0:f8:b1:38:0d:cc:49:fa:b7:ec:
2b:a0:30:a4:8f:10:43:ab:45:1d:eb:98:44:d6:fd:e9:4e:b6:
ee:19:9a:fd:d2:75:d4:35:a5:4d:b9:a8:8b:28:75:03:3e:26:
f5:88:15:85:ae:e8:43:25:23:70:ae:17:18:7e:ab:c2:8d:98:
e7:20:26:4a:fd:a4:a5:75:02:7c:cb:c9:76:b3:8d:ad:d5:6f:
7c:63:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org