Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135392e302f32342d3234203d3e20313430343534.roa
File: 3130332e3130382e3135392e302f32342d3234203d3e20313430343534.roa (raw, json)
Hash identifier: FqrhVxi5b7pTAOQYOKUcdn7ahMNoXgP5yd03gSUTjOU=
Subject key identifier: 92:73:B0:06:EE:57:5C:68:C1:67:AC:2F:EC:FD:FF:32:A2:F3:63:E3
Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Certificate serial: 13CB02D207D6EF48268B92AF382A5F52D76D616A
Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135392e302f32342d3234203d3e20313430343534.roa
Signing time: Fri 02 Jun 2023 09:56:18 +0000
ROA not before: Fri 02 Jun 2023 09:51:18 +0000
ROA not after: Fri 31 May 2024 09:56:18 +0000
asID: 140454
IP address blocks: 103.108.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cb:02:d2:07:d6:ef:48:26:8b:92:af:38:2a:5f:52:d7:6d:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Validity
Not Before: Jun 2 09:51:18 2023 GMT
Not After : May 31 09:56:18 2024 GMT
Subject: CN=9273B006EE575C68C167AC2FECFDFF32A2F363E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:35:3c:cb:e8:eb:e5:9b:b3:67:d9:02:60:
51:5c:f7:9c:03:3b:2e:52:52:e9:1c:1f:76:9a:24:
aa:8a:9d:26:e2:35:3a:f2:87:cb:97:6d:71:85:45:
5f:12:b5:eb:70:36:9e:2e:96:46:98:52:68:60:c1:
b5:e3:99:e9:bd:87:3a:c5:b1:6c:62:50:85:56:ae:
2e:92:8c:e7:8a:39:b1:be:8b:31:e8:ca:9d:47:41:
02:f5:f4:ca:33:9d:4c:90:4e:2e:fe:ed:0b:52:fd:
a1:73:49:ee:50:8d:99:3d:ed:98:d9:1f:34:0b:e9:
c4:bb:04:c6:82:f4:11:02:97:14:27:58:1d:b8:de:
4e:b2:a1:f6:28:3c:4c:99:82:f4:83:dc:20:20:4d:
44:55:e5:51:fc:db:fd:82:22:ac:2c:14:93:4b:94:
f4:97:23:5c:1f:65:74:96:00:e8:bb:89:1c:70:55:
2f:f4:89:b4:e1:98:fe:3c:9c:63:2f:57:01:cd:70:
14:9a:d6:71:a7:bc:b6:86:2e:6b:ad:51:26:6d:47:
84:91:50:93:79:7f:44:7b:fd:69:78:3f:1e:78:56:
0c:76:f5:9e:92:a8:17:99:0e:ff:78:b7:39:b3:2e:
68:52:23:26:1e:4b:a2:4a:3f:2f:d6:4c:83:85:4e:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:B0:06:EE:57:5C:68:C1:67:AC:2F:EC:FD:FF:32:A2:F3:63:E3
X509v3 Authority Key Identifier:
keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135392e302f32342d3234203d3e20313430343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:f7:18:7f:44:b9:25:cc:8e:ef:27:41:5f:6f:d1:86:72:
07:c8:75:8e:fd:fb:23:00:30:f1:81:59:9f:1e:5c:b4:b4:58:
4d:2e:24:15:93:6d:31:57:46:d5:24:cf:9c:2f:54:7b:94:7c:
68:d8:57:04:0e:bb:e2:76:a9:e6:35:22:36:4c:20:73:81:21:
41:e4:d9:e2:07:7e:fd:a6:e2:bd:0a:80:d7:b8:f3:e9:01:74:
06:07:b3:e0:19:e4:de:4f:54:6b:57:4e:a5:55:60:1b:e7:eb:
b5:48:0f:86:ae:44:a1:ff:0f:44:cc:a0:ee:db:8f:35:7e:e0:
b5:b7:65:d7:fe:91:44:67:d3:65:d5:65:65:05:d8:fa:2f:5e:
d6:9e:28:55:92:ee:81:4a:a0:4f:e4:aa:29:ef:eb:4c:cf:9a:
04:51:06:e8:c8:68:23:b0:2b:bb:d3:a5:90:ba:92:9a:3b:3b:
f9:39:92:6c:8c:20:db:0f:ac:d0:e8:07:b9:36:4c:42:0a:dd:
88:59:b8:fc:8b:a2:db:9d:e8:96:c7:13:2a:fd:82:6d:bb:4c:
c7:03:9a:be:b9:24:f5:3a:8f:c3:fa:12:b2:7a:05:60:f0:44:
3c:57:db:47:15:cf:23:6d:20:f6:cf:f2:e2:54:4f:8c:a3:2e:
8c:40:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org