Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e20313431313239.roa
File: 3130332e3135382e3130332e302f32342d3234203d3e20313431313239.roa (raw, json)
Hash identifier: wkATJ30xGbzAkbpmbiPD7iPQp/hompfyqIAfHluXl5w=
Subject key identifier: 88:54:82:AC:63:B8:CD:AE:B4:D1:FF:80:3D:DF:AB:51:7C:D3:AB:4E
Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
Certificate serial: 224104852D6BD8F6F6F123BA58B5432E4F9C1E8C
Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e20313431313239.roa
Signing time: Thu 11 May 2023 05:39:50 +0000
ROA not before: Thu 11 May 2023 05:34:50 +0000
ROA not after: Thu 09 May 2024 05:39:50 +0000
asID: 141129
IP address blocks: 103.158.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:41:04:85:2d:6b:d8:f6:f6:f1:23:ba:58:b5:43:2e:4f:9c:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
Validity
Not Before: May 11 05:34:50 2023 GMT
Not After : May 9 05:39:50 2024 GMT
Subject: CN=885482AC63B8CDAEB4D1FF803DDFAB517CD3AB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:08:46:d6:3b:83:70:9c:1b:e9:27:2a:47:
11:45:12:55:9b:96:dc:1f:81:da:d8:51:e2:1b:ed:
82:ba:36:cd:ff:01:c5:27:02:2e:38:e5:95:a8:13:
9e:d6:fb:f3:cc:de:65:08:ac:cf:b1:06:1e:b3:bc:
d3:e1:34:b8:f4:65:ac:91:17:fe:8c:7f:79:c1:0d:
59:23:0d:67:f0:06:2d:0f:f3:2f:64:93:79:a3:1f:
b0:76:ef:42:92:fb:6d:23:d0:05:73:c0:2d:7a:5d:
96:15:c4:cb:59:1a:97:0b:26:bb:77:da:10:1c:8e:
8b:ae:57:32:b3:f7:33:32:bb:41:f0:62:43:26:5c:
29:d2:fb:bc:d4:76:b0:b0:22:1c:7a:72:b1:d2:81:
9f:ba:2c:34:85:00:4d:70:e9:66:b5:bd:3e:bf:24:
0d:58:7b:59:94:6a:3a:6d:ce:8e:d7:b9:23:ad:9f:
e9:46:9c:b3:99:ab:c8:ff:4c:1a:b6:07:83:71:0e:
2c:ac:bb:89:f1:45:05:a8:e1:f3:2a:f9:8b:e1:ea:
21:de:94:fe:34:8c:9f:ea:e8:2a:7a:f3:ac:cf:3f:
13:6d:31:47:8b:ce:e8:a9:68:f1:96:a3:73:54:83:
a6:18:e4:a7:f2:85:9b:7b:ec:44:81:2d:ea:0c:65:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:82:AC:63:B8:CD:AE:B4:D1:FF:80:3D:DF:AB:51:7C:D3:AB:4E
X509v3 Authority Key Identifier:
keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e20313431313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.103.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3f:6f:0d:13:ff:fd:95:ca:14:93:a4:74:db:27:c6:f2:50:
ae:45:e3:18:48:f7:88:1f:a9:05:b3:29:23:73:1b:92:a7:b0:
80:62:c0:0d:a3:c6:f0:89:f0:3e:4d:4c:63:e1:a0:3b:ae:bd:
f7:bf:39:fb:db:d4:25:ab:75:bd:43:35:70:64:46:06:d4:19:
55:df:77:3f:d6:b0:6f:6e:51:6d:6a:ba:c6:44:75:5e:58:24:
20:b4:ed:e1:da:58:07:34:25:27:cf:f6:08:6e:14:b8:7a:a5:
4a:3e:6d:a5:7d:78:d6:b7:d4:48:23:a3:6a:22:e5:e8:cf:69:
41:9f:d9:c5:71:1d:09:53:c1:cb:79:37:41:1b:f9:20:d9:84:
8a:be:06:d8:41:58:26:11:1c:af:0a:9b:42:8b:6f:1e:8e:52:
fd:29:2d:5a:39:f3:42:1d:84:f4:15:09:08:12:04:25:89:08:
2c:40:4b:a6:13:5b:c6:29:2c:e7:7b:5f:f8:ab:77:9f:06:72:
3f:c4:7f:04:7c:34:cd:8f:28:d6:ef:21:6c:de:7c:4e:74:b2:
9e:5e:0b:4d:b3:8f:45:57:7e:4d:c5:86:f7:31:41:55:e5:36:
e8:f3:ca:9e:c5:41:85:25:c1:72:05:f4:74:13:ee:fd:39:eb:
22:9b:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org