Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e203535373031.roa
File: 3130332e3233352e37342e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier: 70yl2Uuk2HrLHuQIrTEpQQyeGA2QCcW/boFYN6YMKVU=
Subject key identifier: E1:B1:09:42:45:9C:BA:C4:58:10:96:7F:1E:01:AE:8D:0F:33:CB:C7
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 4C2BDD435B5A867ABA6E886DB70803423AE401B8
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e203535373031.roa
Signing time: Wed 14 Sep 2022 02:26:51 +0000
ROA not before: Wed 14 Sep 2022 02:21:51 +0000
ROA not after: Wed 13 Sep 2023 02:26:51 +0000
asID: 55701
IP address blocks: 103.235.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2b:dd:43:5b:5a:86:7a:ba:6e:88:6d:b7:08:03:42:3a:e4:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Sep 14 02:21:51 2022 GMT
Not After : Sep 13 02:26:51 2023 GMT
Subject: CN=E1B10942459CBAC45810967F1E01AE8D0F33CBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:20:12:2c:cb:e6:75:33:e4:df:90:4d:99:
79:b3:21:33:9d:37:db:eb:b7:f0:e2:79:b4:61:ff:
57:3b:17:70:73:20:28:d7:b8:7c:12:53:dc:19:82:
dd:67:89:80:54:b5:a4:12:1b:79:c5:76:53:67:32:
22:a9:26:c6:ae:99:96:dd:2d:55:3c:a1:ce:2f:0f:
30:5b:5d:1d:8b:22:51:2a:5e:3e:30:23:16:d7:d0:
e9:ea:78:76:5e:94:7c:92:ca:fe:7d:5f:c8:ff:d4:
00:b9:9e:c1:b1:34:ca:ec:61:39:a7:9c:1e:bd:6d:
fc:81:d4:21:0f:dc:e4:64:e6:31:19:cd:0d:71:3e:
c9:b3:1c:06:c1:e6:63:a2:cf:f4:6a:20:cf:70:d6:
93:7b:26:a7:dc:96:bf:f9:e7:f2:00:fe:f2:1b:55:
3e:45:15:60:93:b3:48:05:fb:a0:74:a6:48:2f:47:
d6:b7:8a:df:e6:44:4c:5d:73:cb:9c:8f:5d:6f:9d:
61:85:32:a9:a4:87:26:fe:8f:23:be:7b:95:ee:b9:
73:61:e7:e9:3f:c8:45:0e:e1:0b:6c:25:22:44:88:
ca:81:9a:06:11:cd:9b:af:08:70:7b:29:25:18:00:
f1:20:ce:b1:6c:e9:83:e2:04:5a:d4:de:5d:dd:ec:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:09:42:45:9C:BA:C4:58:10:96:7F:1E:01:AE:8D:0F:33:CB:C7
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3a:3e:d8:79:5e:7d:f8:1e:14:f6:4c:60:88:45:2e:41:7e:
1b:6a:6f:d7:26:bd:75:79:f6:0a:71:cd:ac:69:45:c8:fe:8f:
91:79:73:b5:74:02:d7:e4:e2:cf:6a:09:8b:f5:e4:10:3a:cf:
72:57:37:d9:03:a3:49:5f:7a:e7:c3:ea:00:58:9b:16:f8:06:
47:a4:e9:13:00:47:51:a2:23:46:93:47:d3:a2:d8:a3:b4:d8:
db:cb:8e:13:2a:99:c2:e8:1e:2c:bd:e6:9b:88:36:96:0d:05:
97:01:86:ef:8c:e6:23:50:e4:36:e1:58:ad:9c:4e:ca:39:7a:
23:39:d1:a1:bc:39:df:c4:57:ef:54:31:91:2a:bc:b8:0c:49:
63:b7:0e:72:91:44:1b:e5:1d:30:ed:3b:88:cc:32:93:55:3f:
6d:51:c7:c2:8e:7c:55:b3:7d:8a:03:6c:31:86:4b:71:df:fc:
bd:09:1e:f9:d8:23:c3:73:a9:79:b9:0e:fc:3d:bd:fd:9d:1c:
83:2e:1c:34:78:05:8d:27:22:1d:ad:ce:4f:e3:b8:1c:7d:50:
81:e8:58:a4:4b:c0:e7:47:c8:71:14:8c:27:99:6c:bf:e5:3f:
60:2a:57:b1:71:0d:10:db:05:02:3f:3b:c1:f0:af:70:dc:54:
1f:11:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org