Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313337333036.roa
File: 3130332e3130382e3135362e302f32342d3234203d3e20313337333036.roa (raw, json)
Hash identifier: EwznRhViDYpuTU9YyKqgQvsak2QihC5mAcJnXrr6HA4=
Subject key identifier: 63:93:68:DA:55:76:F8:3B:3C:C8:A4:39:CB:A5:FD:45:F1:64:C1:9F
Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Certificate serial: 7528A52744954DB10DD9884ED8DD71ACFE811A30
Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313337333036.roa
Signing time: Sun 28 Aug 2022 23:02:37 +0000
ROA not before: Sun 28 Aug 2022 22:57:37 +0000
ROA not after: Sun 27 Aug 2023 23:02:37 +0000
asID: 137306
IP address blocks: 103.108.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:a5:27:44:95:4d:b1:0d:d9:88:4e:d8:dd:71:ac:fe:81:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Validity
Not Before: Aug 28 22:57:37 2022 GMT
Not After : Aug 27 23:02:37 2023 GMT
Subject: CN=639368DA5576F83B3CC8A439CBA5FD45F164C19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:37:7c:b2:84:d9:ea:10:1a:64:2f:58:84:
cf:54:6f:e1:f5:2e:d1:b9:1f:50:55:72:62:eb:8e:
69:ff:be:9e:aa:ea:4b:40:fe:cd:70:b0:fd:d0:1c:
05:c9:83:4f:b6:c5:6b:19:19:b8:0b:c0:4c:11:d7:
ba:94:65:4c:6c:fe:7c:6c:d7:25:81:d0:67:7f:26:
8d:bf:f7:e7:fa:61:a2:14:41:1c:a2:28:cd:8e:9d:
66:ff:de:5f:6b:7d:75:c0:5d:ce:8b:25:70:7f:d7:
25:d9:bd:4b:77:8a:09:96:b2:39:1a:bf:91:99:99:
43:19:5b:f9:79:17:33:51:7a:fc:cd:19:7f:9d:37:
fc:c2:f5:95:9c:e6:64:70:73:e3:af:ac:af:f4:23:
13:b9:9a:7a:cf:2c:6f:3c:5a:4b:0d:96:fd:a7:f9:
8d:67:27:77:5f:d8:d0:dd:c8:e7:81:af:cb:21:68:
80:98:e5:f0:9c:17:2b:9a:fd:96:bf:bc:af:2f:80:
e9:3b:15:02:d2:38:5f:57:44:5b:7e:63:87:d7:ad:
66:49:fb:67:36:c9:03:b1:d8:6d:47:c6:66:00:bf:
29:3e:f3:04:9c:a9:c3:5a:6f:2b:b7:07:a9:2d:14:
8f:c5:f8:c3:1a:a6:34:78:72:6e:13:0f:f1:90:55:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:93:68:DA:55:76:F8:3B:3C:C8:A4:39:CB:A5:FD:45:F1:64:C1:9F
X509v3 Authority Key Identifier:
keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313337333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.156.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4d:34:6d:d4:ad:e6:2f:70:23:b6:75:5c:4b:ec:a3:b8:e6:
a5:fd:24:f7:b2:c7:37:69:58:31:da:b6:31:c9:37:4f:0a:10:
2d:b4:89:cf:0f:e7:c1:c6:79:88:19:bb:bc:b8:60:39:8a:22:
50:43:df:bb:c5:f3:1f:8f:e2:e7:af:16:ad:fe:b6:eb:7b:d6:
c7:7a:fa:a9:a3:5b:cc:7e:e6:78:a0:31:5f:31:19:08:ac:e9:
b5:29:71:13:0e:25:cb:17:ad:2f:f3:4f:a4:0e:4a:d0:6f:c8:
ae:fa:db:5e:d6:f2:39:1d:a3:c2:a9:41:f9:19:e8:5e:7f:2f:
11:53:9b:98:3c:b4:aa:0c:ce:4e:e2:de:72:a7:ec:d6:a9:14:
43:b3:e2:ee:2c:07:95:80:08:d2:6a:ae:2f:38:55:20:01:f6:
2c:e0:4c:e2:f0:c7:32:1e:3f:35:75:4e:c8:02:45:f2:15:7e:
c5:53:f7:7b:f7:bc:ed:5b:ec:b8:a7:86:a4:a7:18:ad:c0:04:
96:1d:b7:7b:eb:1b:16:d0:c3:b4:1c:48:9a:3d:b9:66:13:43:
b7:74:9b:8a:a7:54:1e:94:2d:14:cc:20:2f:f9:84:58:1a:89:
98:92:f0:0a:3f:86:89:4e:0a:35:c6:09:9e:49:a8:87:b1:4f:
b4:3a:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org