Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313336383533.roa
File: 3130332e3130322e3135302e302f32342d3234203d3e20313336383533.roa (raw, json)
Hash identifier: aMwkGfq80cvWTHmoodblAsvdJAH5Gs27qQZR7svRMBI=
Subject key identifier: AF:BD:1E:31:9B:C6:34:01:CC:BF:F8:2B:24:9B:50:5A:44:4A:0A:63
Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Certificate serial: 4167A43DB99CD8672B5978BF2F27E1F7A093383C
Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313336383533.roa
Signing time: Sun 28 Aug 2022 23:08:30 +0000
ROA not before: Sun 28 Aug 2022 23:03:30 +0000
ROA not after: Sun 27 Aug 2023 23:08:30 +0000
asID: 136853
IP address blocks: 103.102.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:67:a4:3d:b9:9c:d8:67:2b:59:78:bf:2f:27:e1:f7:a0:93:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Validity
Not Before: Aug 28 23:03:30 2022 GMT
Not After : Aug 27 23:08:30 2023 GMT
Subject: CN=AFBD1E319BC63401CCBFF82B249B505A444A0A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:24:b6:fe:dd:a2:19:ae:c1:4e:b0:e4:b9:
5b:4e:9a:d5:fb:26:06:1a:a4:56:74:42:d6:99:53:
47:14:c1:7f:da:cb:b3:a1:b6:a8:4d:70:d2:02:d4:
8d:1c:7c:a2:77:4f:18:25:a6:0c:98:a1:d6:98:91:
f6:44:bd:de:6e:a2:78:65:ef:73:09:b6:e1:5c:ed:
48:e6:08:3a:e1:c9:af:01:52:bc:22:99:1d:ce:4a:
2a:66:a9:1b:a2:4c:90:9d:7a:a8:bd:94:87:ed:cf:
e1:bc:4c:e0:c0:49:95:11:8d:71:d2:dd:44:56:6a:
08:7c:59:72:a4:b5:bc:8f:f7:95:53:7c:f7:70:61:
f2:71:a8:77:70:ee:66:da:86:6e:e0:f5:3c:8e:cc:
3b:c7:18:51:e2:4f:a9:eb:05:8a:54:af:17:d2:e1:
ad:d6:55:61:b2:c9:6d:a8:a5:d3:21:a8:d8:c3:fe:
49:ef:b5:6e:fb:1d:fe:a5:16:44:b4:69:88:e7:6c:
3b:72:ce:26:8c:b6:52:8a:41:6a:ab:95:4a:14:a9:
3f:ef:cc:8e:a9:02:24:03:9d:c9:4d:f3:e0:1d:67:
72:ea:0e:f9:4a:0f:6c:de:28:98:90:45:cd:a1:a8:
97:e3:91:57:f7:35:b8:65:f8:8b:eb:8d:d8:09:17:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:1E:31:9B:C6:34:01:CC:BF:F8:2B:24:9B:50:5A:44:4A:0A:63
X509v3 Authority Key Identifier:
keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313336383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:91:9b:a3:75:16:83:11:29:73:f8:5e:fe:4d:03:1a:00:72:
bb:45:d1:04:07:7e:02:4c:ba:8a:99:b6:ee:de:df:ca:6f:91:
a2:d7:51:1d:d0:87:92:91:26:f7:c4:b4:c3:50:ac:ef:6a:09:
8a:b3:57:a7:1c:63:df:3f:0b:b3:51:68:ca:5d:ca:42:15:1f:
5e:4a:d9:17:55:5f:a2:94:61:ab:e7:a5:be:d9:6c:b5:0a:d2:
2f:09:f5:d6:c1:65:a7:2b:c0:01:96:27:e9:db:6d:67:4c:55:
2b:c6:4b:d2:d5:45:55:9f:4a:3b:16:c0:3d:d3:70:81:72:d3:
66:b7:76:d3:18:bb:6d:1d:0f:f4:f4:49:17:f9:41:2d:89:e5:
0d:81:91:9c:d7:fd:30:1b:f3:2d:55:76:06:9e:0e:ec:60:c1:
52:41:44:ba:04:8d:b7:d0:7e:c8:61:63:62:10:eb:47:3c:b5:
80:40:27:80:c5:40:b6:8b:c4:61:61:0f:20:cc:2b:99:77:6b:
6f:0f:0f:b3:b7:69:1b:4d:ad:9c:17:90:76:20:70:b7:a8:4b:
c3:7a:8d:49:94:d7:01:02:5f:10:ba:83:58:a7:08:14:25:dc:
c8:9f:8c:ff:68:4b:88:b5:14:cb:f6:03:18:cc:1b:23:03:64:
48:78:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org