Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313430343534.roa
File: 3130332e3130382e3135362e302f32342d3234203d3e20313430343534.roa (raw, json)
Hash identifier: GpD3/g9MM3x/QzLKao5ZSN/3a0tRdbtx9r4STjDfPt0=
Subject key identifier: FC:93:A2:52:35:07:9F:AC:C4:27:17:41:3C:F9:2B:28:BE:AE:DD:19
Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Certificate serial: 3CEA6D8EBD65875C4987CEE78D52586E01830DAB
Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313430343534.roa
Signing time: Fri 02 Jun 2023 09:55:39 +0000
ROA not before: Fri 02 Jun 2023 09:50:39 +0000
ROA not after: Fri 31 May 2024 09:55:39 +0000
asID: 140454
IP address blocks: 103.108.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ea:6d:8e:bd:65:87:5c:49:87:ce:e7:8d:52:58:6e:01:83:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Validity
Not Before: Jun 2 09:50:39 2023 GMT
Not After : May 31 09:55:39 2024 GMT
Subject: CN=FC93A25235079FACC42717413CF92B28BEAEDD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:43:7a:f0:ff:9e:a4:06:d8:c7:72:2c:57:
8d:b7:e0:5e:80:7b:8d:cf:98:9d:b3:32:fa:3c:ce:
f4:c7:c7:b4:38:15:16:0d:d8:d9:06:90:f8:3c:44:
9e:c9:5f:45:b2:dc:c2:b9:74:6f:d1:5d:26:33:e7:
12:cf:83:fb:e8:00:96:65:25:f1:0e:80:04:0f:aa:
6b:15:cb:66:1d:e6:8c:54:79:af:1e:97:20:a8:52:
dd:d1:d3:0f:66:13:71:72:35:c1:c8:d1:06:d0:b2:
6f:4d:f5:f3:27:33:02:5f:07:d9:53:18:5c:8a:11:
8f:62:5f:bf:6d:6b:43:05:13:dc:e1:c5:82:eb:34:
5f:d5:57:92:8c:12:b4:55:ff:1c:8b:b5:71:cd:14:
a2:14:b6:cc:0a:d8:3b:25:5a:0e:21:60:13:ad:d5:
27:87:6f:32:95:5d:3f:bd:c8:11:48:9a:3c:00:a9:
69:13:29:37:2b:fa:05:3e:61:ff:93:62:96:49:c3:
55:27:85:44:09:5e:61:c6:77:33:20:8f:ca:b5:34:
90:5e:35:15:a5:34:79:10:23:c9:bc:42:61:00:35:
23:94:2d:52:fd:24:60:85:ab:94:44:31:9f:e5:2e:
39:5b:00:0b:da:d7:69:39:cb:e8:be:a6:96:38:86:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:A2:52:35:07:9F:AC:C4:27:17:41:3C:F9:2B:28:BE:AE:DD:19
X509v3 Authority Key Identifier:
keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135362e302f32342d3234203d3e20313430343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2c:7b:30:45:f4:d2:ac:d5:4c:9c:dc:c5:27:ed:c6:55:f4:
38:cf:4b:ef:1d:16:26:16:db:29:e7:c8:2e:3d:27:42:b5:e0:
d4:c2:d1:1c:c3:ac:53:28:cf:20:bf:b4:1c:95:ca:64:b9:99:
30:1e:d7:24:54:db:15:80:4e:e0:b8:95:db:92:45:40:9d:ca:
af:6b:38:11:90:32:60:99:68:20:b5:fb:6f:aa:d4:66:d3:96:
c8:31:62:c3:66:0d:e4:78:48:dc:68:fe:77:70:27:3f:50:44:
22:00:40:0c:19:4b:89:1c:66:d3:39:e9:c3:81:9d:6a:21:d2:
28:41:d5:73:08:2f:00:4d:f8:b6:74:d7:22:42:b6:f0:54:62:
20:f1:25:53:0d:41:d8:e1:e3:78:70:e1:4f:47:d0:b2:85:f8:
0b:48:51:52:6b:3e:a9:5c:f7:08:ec:bd:b5:01:fa:bc:6f:30:
e6:d5:da:ae:25:e8:e0:7d:56:3a:92:c9:4a:c9:9d:2d:7b:14:
99:a0:47:ce:04:4d:b5:59:c3:05:41:e3:9b:ad:f5:3b:0f:0b:
8d:f7:ba:32:37:e6:24:e7:c3:d9:e2:2e:1b:7d:99:be:45:a4:
13:e6:cd:8e:a4:3c:33:7e:8a:09:cb:b9:52:e9:8a:f9:4c:55:
8e:44:d0:f3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPOptjr1lh1xJh87njVJYbgGDDaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE
QzVFMTAxNDAeFw0yMzA2MDIwOTUwMzlaFw0yNDA1MzEwOTU1MzlaMDMxMTAvBgNV
BAMTKEZDOTNBMjUyMzUwNzlGQUNDNDI3MTc0MTNDRjkyQjI4QkVBRUREMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4kN68P+epAbYx3IsV4234F6A
e43PmJ2zMvo8zvTHx7Q4FRYN2NkGkPg8RJ7JX0Wy3MK5dG/RXSYz5xLPg/voAJZl
JfEOgAQPqmsVy2Yd5oxUea8elyCoUt3R0w9mE3FyNcHI0QbQsm9N9fMnMwJfB9lT
GFyKEY9iX79ta0MFE9zhxYLrNF/VV5KMErRV/xyLtXHNFKIUtswK2DslWg4hYBOt
1SeHbzKVXT+9yBFImjwAqWkTKTcr+gU+Yf+TYpZJw1UnhUQJXmHGdzMgj8q1NJBe
NRWlNHkQI8m8QmEANSOULVL9JGCFq5REMZ/lLjlbAAva12k5y+i+ppY4hrv1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/JOiUjUHn6zEJxdBPPkrKL6u3RkwHwYDVR0j
BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG
NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF
MTAxNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMzViZjc5LWU4NGEtNDBlMC04
ZmQ0LWYxNjljMTg2YmU4Zi8wLzMxMzAzMzJlMzEzMDM4MmUzMTM1MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbJwwDQYJ
KoZIhvcNAQELBQADggEBAKQsezBF9NKs1Uyc3MUn7cZV9DjPS+8dFiYW2ynnyC49
J0K14NTC0RzDrFMozyC/tByVymS5mTAe1yRU2xWATuC4lduSRUCdyq9rOBGQMmCZ
aCC1+2+q1GbTlsgxYsNmDeR4SNxo/ndwJz9QRCIAQAwZS4kcZtM56cOBnWoh0ihB
1XMILwBN+LZ01yJCtvBUYiDxJVMNQdjh43hw4U9H0LKF+AtIUVJrPqlc9wjsvbUB
+rxvMObV2q4l6OB9VjqSyUrJnS17FJmgR84ETbVZwwVB45ut9TsPC433ujI35iTn
w9niLht9mb5FpBPmzY6kPDN+ignLuVLpivlMVY5E0PM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org