Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313336383533.roa
File: 3130332e3130322e3135312e302f32342d3234203d3e20313336383533.roa (raw, json)
Hash identifier: aB9iM6N5L4PiorV1tWMX8cn9ndLtA9RxomvmCdsouKk=
Subject key identifier: 87:62:51:3C:05:1C:F5:48:0A:6B:63:01:34:06:F2:6D:B3:D2:0E:C4
Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Certificate serial: 213338BA2AC75493C242118A82EA3A6D28F48FAD
Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313336383533.roa
Signing time: Sun 28 Aug 2022 23:08:30 +0000
ROA not before: Sun 28 Aug 2022 23:03:30 +0000
ROA not after: Sun 27 Aug 2023 23:08:30 +0000
asID: 136853
IP address blocks: 103.102.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:33:38:ba:2a:c7:54:93:c2:42:11:8a:82:ea:3a:6d:28:f4:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Validity
Not Before: Aug 28 23:03:30 2022 GMT
Not After : Aug 27 23:08:30 2023 GMT
Subject: CN=8762513C051CF5480A6B63013406F26DB3D20EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:55:42:b2:8e:9b:dd:a2:d0:4e:a1:2b:f1:
a1:e8:46:3a:31:0f:85:de:03:91:08:6f:5d:41:d6:
b2:5d:88:2e:54:2e:77:25:43:74:a7:0d:29:39:da:
32:6b:3d:7e:71:3d:fa:d8:68:64:aa:86:d5:cb:4b:
a7:a1:01:24:45:49:d5:41:ca:7c:7f:3e:5d:50:d1:
db:d2:d5:35:1f:1f:76:08:b2:25:f5:0d:64:1f:98:
80:97:f9:e9:3b:14:51:91:d6:de:b0:44:d2:3a:86:
37:c6:7e:c9:56:91:ef:fa:26:ce:9d:0d:bb:d7:84:
26:7f:73:13:a8:e7:e7:48:c8:4b:c9:80:52:86:b5:
b7:6d:17:c5:02:5e:6b:c6:a4:f0:82:8f:89:c1:40:
2e:f8:9e:94:64:dc:be:fe:fd:45:a1:8b:0f:75:b3:
cb:30:d0:7e:a6:ae:ee:7c:a3:10:53:7d:87:fa:97:
95:f5:12:b5:e0:03:33:d5:10:41:94:21:e5:ff:20:
8f:73:0e:bf:15:62:08:b4:fd:eb:02:23:37:29:ce:
19:fa:6c:b4:d0:80:41:35:9d:96:6d:f2:bd:2b:d7:
1c:8f:59:6b:2f:5c:c3:4c:52:e9:ca:08:2a:5a:80:
c7:3a:97:57:3d:52:ba:c8:e5:cd:6f:14:24:ec:c1:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:62:51:3C:05:1C:F5:48:0A:6B:63:01:34:06:F2:6D:B3:D2:0E:C4
X509v3 Authority Key Identifier:
keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313336383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3c:6b:db:1d:2e:bd:3f:20:e7:c6:e0:fd:2f:f7:d4:cb:3e:
28:84:e2:b0:7c:91:18:c0:71:60:d5:86:bd:96:2d:25:e6:1d:
85:6f:1e:cd:55:f4:b4:36:df:55:07:85:22:c9:a0:c6:bc:b6:
cd:65:23:19:87:a8:be:11:fb:c6:fc:20:a0:4c:98:e8:97:b2:
7c:d2:7c:79:07:1a:8b:81:e2:51:1e:b6:e9:e5:90:77:80:41:
b5:42:78:e4:d4:a3:8a:4a:70:17:39:be:d8:5c:15:00:54:f1:
bf:53:5d:97:2f:48:1a:15:c5:67:c0:28:58:06:c1:b6:d2:85:
d7:74:f2:87:1b:24:a2:08:0c:dc:37:ae:3f:57:45:42:05:0d:
a7:dd:90:09:39:b3:a4:e2:8a:6d:f5:d0:0e:e1:75:a6:c3:8a:
3b:c6:a8:3d:3c:8f:05:6d:82:15:08:50:6e:3b:88:86:20:86:
23:cc:76:39:d5:89:48:ab:c6:ca:8f:00:cb:84:d5:70:d4:3e:
59:24:fb:8a:9c:2f:f5:4b:87:0c:2c:d0:83:86:ef:0d:54:e2:
de:1a:55:52:43:de:d5:2b:0c:15:8d:a0:89:0d:0b:71:97:3c:
13:03:56:c4:5a:73:3a:4e:d7:99:00:7f:b0:20:b6:43:68:a0:
6e:4a:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org