Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3233203d3e20313339393535.roa
File: 3130332e3134372e38342e302f32332d3233203d3e20313339393535.roa (raw, json)
Hash identifier: DFH/0QXhAqZmKnZF/SJbWuRwtEWPW8QPgLyxVI3wD38=
Subject key identifier: CA:C9:D3:AD:E6:C2:0C:9A:1B:A3:D7:0A:B6:CC:24:79:9B:E1:5A:B7
Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
Certificate serial: 5DAAE5FB8F0A9ECDCA34B32A00DADCC846D8126F
Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3233203d3e20313339393535.roa
Signing time: Fri 02 Dec 2022 18:11:49 +0000
ROA not before: Fri 02 Dec 2022 18:06:49 +0000
ROA not after: Fri 01 Dec 2023 18:11:49 +0000
asID: 139955
IP address blocks: 103.147.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:aa:e5:fb:8f:0a:9e:cd:ca:34:b3:2a:00:da:dc:c8:46:d8:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
Validity
Not Before: Dec 2 18:06:49 2022 GMT
Not After : Dec 1 18:11:49 2023 GMT
Subject: CN=CAC9D3ADE6C20C9A1BA3D70AB6CC24799BE15AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:25:da:8d:12:d9:d6:8d:e5:dc:d6:fe:ee:
c6:2a:67:27:1f:0b:7d:4f:24:85:3a:d9:40:61:43:
75:84:e9:9f:2a:c3:7a:68:74:40:95:6f:bb:96:93:
b9:47:25:74:4c:e4:80:09:4f:9c:bc:ef:76:9c:3d:
70:c6:02:a9:c7:91:5a:d4:33:2f:08:5a:2e:7c:97:
b7:9e:76:b7:89:c5:00:e9:4b:02:af:5e:26:53:55:
66:0f:29:e9:e9:bf:16:3b:4c:cf:38:5b:b9:0d:ab:
9c:b6:af:e6:1b:b3:4e:69:ec:7b:f6:34:c8:9a:b0:
5a:19:cc:76:7c:fb:73:99:47:85:62:e2:4f:aa:50:
33:9e:55:fc:05:e6:fd:1f:bb:92:f5:f1:23:6a:3c:
45:23:09:ac:25:25:2c:40:d0:4b:ea:77:f2:b7:fa:
14:90:36:7f:8f:bf:62:b6:cc:57:6b:01:75:51:1e:
17:64:5e:b8:9c:e1:08:86:a1:38:72:60:a1:8f:2f:
7a:59:25:fb:5c:e3:49:7e:f1:e2:4c:be:77:81:d5:
fb:6f:3c:52:2a:a1:ef:09:18:32:b7:81:f5:0b:a1:
13:5c:13:4e:5d:44:71:5c:26:2f:3b:a0:f0:47:67:
85:81:6b:e5:dc:32:36:fb:00:6b:12:e6:3a:4a:15:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:D3:AD:E6:C2:0C:9A:1B:A3:D7:0A:B6:CC:24:79:9B:E1:5A:B7
X509v3 Authority Key Identifier:
keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3233203d3e20313339393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:da:1f:68:12:40:5a:51:4b:44:ad:6b:09:a4:82:d7:27:17:
ca:89:23:0f:8e:77:38:9e:07:bf:ab:14:2d:b9:77:81:03:bf:
97:5b:bc:06:ff:41:59:66:d4:80:9d:04:0f:d5:4b:c0:5b:d9:
31:98:21:fd:2c:50:5b:70:3d:4b:b9:2b:b6:61:6e:8e:74:23:
26:3c:8e:87:3e:8d:de:fc:97:81:29:ae:86:38:5a:52:e7:ef:
7a:03:02:07:75:2c:6b:f1:d9:28:e4:2e:7d:bb:e6:25:8c:9e:
7b:69:2e:ca:7a:2d:f6:ee:6e:d9:92:a5:a5:c6:57:48:29:b6:
db:e5:9d:14:d4:4b:aa:19:d1:a3:ac:88:ab:4d:56:07:3b:8c:
93:28:b6:e0:7d:cd:b8:30:98:46:df:a0:f5:92:b6:cd:db:e3:
cf:c1:7c:8a:79:1d:a3:0e:e8:8d:86:92:02:0e:7e:2b:82:d5:
a5:90:36:90:e5:84:78:d4:6e:3a:60:d4:30:a3:3c:0b:05:39:
b7:76:90:4f:07:96:05:e9:dd:1a:f3:aa:e2:17:5c:9b:c1:d5:
26:1d:18:ba:45:18:21:cd:75:35:03:f9:43:f2:be:8d:bb:cc:
d0:8f:04:6e:b2:48:41:39:e5:52:c3:70:51:10:84:cf:e0:65:
99:4b:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org