Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa
File: 3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier: w3Zjm8z8caefwHfzdeCSsJbWTmK0XUK+Wre4ZS+Kvag=
Subject key identifier: F4:0B:13:05:54:1F:66:BB:92:EC:A1:1F:36:58:7D:77:6B:53:C1:51
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 63F966E8F084E59B3D17585113E8687AB6C31AF2
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa
Signing time: Sun 28 Aug 2022 23:01:49 +0000
ROA not before: Sun 28 Aug 2022 22:56:49 +0000
ROA not after: Sun 27 Aug 2023 23:01:49 +0000
asID: 135444
IP address blocks: 103.235.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f9:66:e8:f0:84:e5:9b:3d:17:58:51:13:e8:68:7a:b6:c3:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Aug 28 22:56:49 2022 GMT
Not After : Aug 27 23:01:49 2023 GMT
Subject: CN=F40B1305541F66BB92ECA11F36587D776B53C151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:c2:48:06:be:bb:b6:31:03:bd:2b:21:bf:
26:67:36:60:52:ca:32:2f:18:90:79:39:b0:c1:ce:
3e:e6:1b:f1:9f:bc:22:18:70:71:53:8f:28:a2:b7:
36:a7:66:50:99:01:1d:c0:56:02:f6:88:97:63:6e:
97:ce:5c:9f:35:d0:1a:a7:39:e8:30:34:5c:05:00:
62:75:54:55:52:44:84:50:db:f4:91:96:0b:72:9a:
d5:d6:97:66:31:ef:e4:d6:9d:f4:42:d8:07:ef:34:
f5:ca:66:20:60:4a:31:b2:86:fd:23:64:95:5b:fa:
43:83:67:6f:92:28:86:95:d6:8d:48:9a:bf:ba:97:
a2:4d:53:e7:52:87:f4:3c:32:d4:8f:1b:94:3c:7b:
1d:ec:2e:87:93:e8:36:f2:b8:e6:37:e5:1a:ce:f8:
f0:d5:7d:70:72:14:dc:9f:18:66:4e:7e:a2:80:d0:
de:25:b0:fd:7e:a7:69:28:19:96:80:f1:fe:cb:ed:
cc:91:b1:50:b6:6b:1b:17:7d:32:96:d9:c2:de:a9:
e0:80:1c:c4:73:fb:cc:27:56:ff:5a:d1:5f:77:ce:
6d:ea:f2:dc:19:28:ab:6c:f7:80:91:a3:3a:8b:a3:
9a:69:46:00:68:27:63:17:8f:af:66:96:e1:62:00:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:13:05:54:1F:66:BB:92:EC:A1:1F:36:58:7D:77:6B:53:C1:51
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5e:0b:d9:38:54:b0:0d:13:fc:f6:20:81:58:98:c0:eb:a2:
33:be:32:44:91:10:d7:f7:3e:df:e5:e7:0e:05:ed:12:be:4e:
e8:15:d2:87:9b:10:07:0a:bd:34:0b:b2:83:02:b0:60:8e:59:
5d:33:6d:30:9a:c4:18:da:de:ef:b6:20:67:6d:81:cd:8f:4f:
59:f8:1a:29:84:cb:bd:ae:94:c9:8c:8d:f9:b3:2a:03:b9:17:
24:5e:81:9c:c0:f2:f3:b6:d6:16:39:31:9d:3e:f0:c1:fa:3a:
be:d0:cf:ba:2a:8c:8b:33:47:e6:2f:ae:59:80:57:02:52:ae:
15:63:ad:30:92:22:9d:cb:82:15:a9:85:25:7e:20:e4:c1:a8:
c2:1b:8b:1c:9b:16:48:0a:fc:aa:36:9d:90:3d:69:fe:6c:a7:
1b:7c:c2:78:61:a6:30:ed:b8:ad:df:bb:f7:1e:3d:7c:af:0d:
6f:6d:8d:97:b2:0e:61:1a:ff:4b:b1:53:1c:bb:b1:25:23:00:
df:30:0d:ea:50:7a:76:71:16:24:d8:8a:ec:2a:98:0a:9c:a2:
de:15:6a:b9:5f:5a:20:20:0a:18:ff:30:39:a9:16:4d:11:aa:
2c:76:85:29:87:4b:2e:f1:a6:8b:7e:9c:b0:b4:29:01:62:a9:
7f:f0:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org