Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335343434.roa
File: 3130332e3233352e37332e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier: fdYhaqiz8LkR6xxUWTYXLj0MeP8SB1dk1TGvjXA2TX4=
Subject key identifier: 77:69:CF:A4:58:CE:C9:1A:BD:E1:DA:11:3C:EB:46:C3:E4:5E:71:69
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 383CAA0F5C7450343F364EC925FD6A99B9FFE0EF
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335343434.roa
Signing time: Sun 28 Aug 2022 23:01:49 +0000
ROA not before: Sun 28 Aug 2022 22:56:49 +0000
ROA not after: Sun 27 Aug 2023 23:01:49 +0000
asID: 135444
IP address blocks: 103.235.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3c:aa:0f:5c:74:50:34:3f:36:4e:c9:25:fd:6a:99:b9:ff:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Aug 28 22:56:49 2022 GMT
Not After : Aug 27 23:01:49 2023 GMT
Subject: CN=7769CFA458CEC91ABDE1DA113CEB46C3E45E7169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:12:09:12:d4:e1:84:f5:b4:8a:d4:61:35:
30:de:e2:c7:df:95:aa:14:4f:c1:50:b9:cb:c9:c0:
0c:f7:a8:4d:58:b6:3f:dc:a6:99:ab:4a:fa:b6:8b:
96:7b:c4:22:cd:99:7e:52:3f:6d:f1:d2:25:6c:7a:
16:52:9a:06:e8:b7:23:49:4e:11:7a:2a:30:6f:a8:
66:54:8d:2b:8a:87:15:8d:db:68:76:7d:75:b1:b7:
e3:b2:20:12:9a:0a:bf:06:67:42:db:d4:fb:6c:e4:
58:58:d3:1f:7b:70:6b:4d:bf:12:34:c7:40:1e:ce:
cb:46:aa:6a:b3:44:e4:25:cc:6f:d0:f8:02:a8:00:
64:e6:04:ae:99:be:9b:46:5d:21:bf:eb:35:bf:61:
c3:60:ab:ff:e4:5c:a2:d7:50:0a:38:99:35:d7:5e:
ac:43:6c:f5:5c:f9:4d:2b:a6:c3:7e:31:bf:fb:22:
d2:34:7f:c6:b9:a4:0e:5e:6d:48:92:5b:f8:e8:c9:
ea:5a:0b:a0:40:cd:c4:93:04:cc:00:c5:a5:e9:f3:
af:30:47:5a:0b:ea:92:00:b0:90:87:d2:b0:9e:0e:
7f:2c:75:93:e9:ee:a4:14:cb:dd:4c:7a:2e:61:86:
0b:13:56:69:d2:2f:cb:79:52:33:bd:d2:96:eb:71:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:CF:A4:58:CE:C9:1A:BD:E1:DA:11:3C:EB:46:C3:E4:5E:71:69
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
67:33:2a:d9:9f:8b:c2:5e:d3:7a:62:20:ae:03:a2:da:4f:5e:
10:42:be:18:4c:b8:f8:bb:53:51:ea:de:84:9b:15:0d:23:53:
99:4e:ee:06:30:97:f4:34:b2:7d:d2:20:a0:19:64:34:10:aa:
78:34:9e:93:49:e0:db:a2:6e:18:87:a2:98:95:44:c6:2a:dd:
ee:f7:b5:c9:b1:b7:07:08:9a:c0:0f:8d:7e:e0:84:97:11:ab:
1c:7e:5e:b2:34:75:f5:11:4b:03:9f:1f:0e:e7:02:46:96:47:
94:52:59:a2:08:43:08:57:43:28:02:55:b2:19:51:3a:c6:06:
7e:5c:bf:fd:07:b8:84:5c:ba:2a:26:61:e2:71:87:ee:8d:e6:
3a:20:ea:71:75:3d:36:f7:0e:d6:4b:f3:6c:2e:c6:3d:92:78:
e9:07:b6:87:ba:1a:bd:6d:05:0e:ad:29:74:f1:65:e5:d7:be:
83:7a:c8:32:6b:02:9f:46:c2:f6:6b:f4:3c:0a:7a:ae:b3:0b:
0a:1f:ca:8a:f8:1c:77:5f:a9:c8:fe:1a:39:21:d8:de:f2:e0:
18:1f:b2:5b:8b:bd:77:37:33:06:b4:9f:b7:bf:6a:84:a8:69:
40:8c:4f:b4:f1:a6:73:04:46:f4:42:5a:36:08:22:4a:8f:82:
18:ed:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org