Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/3130332e3232392e3230312e302f32342d3234203d3e203539323835.roa
File: 3130332e3232392e3230312e302f32342d3234203d3e203539323835.roa (raw, json)
Hash identifier: oncwo7kY4LHvLzOFdyVFufuLNiEBcvLq66mUg/uxBJo=
Subject key identifier: 2D:CC:7C:6C:2B:0C:79:C2:F5:5D:A9:D6:82:C0:CB:1E:A3:EC:D9:B5
Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Certificate serial: 551F53A43769186B00E4180DE4065693C891865D
Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/3130332e3232392e3230312e302f32342d3234203d3e203539323835.roa
Signing time: Wed 05 Apr 2023 18:27:16 +0000
ROA not before: Wed 05 Apr 2023 18:22:16 +0000
ROA not after: Wed 03 Apr 2024 18:27:16 +0000
asID: 59285
IP address blocks: 103.229.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1f:53:a4:37:69:18:6b:00:e4:18:0d:e4:06:56:93:c8:91:86:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Validity
Not Before: Apr 5 18:22:16 2023 GMT
Not After : Apr 3 18:27:16 2024 GMT
Subject: CN=2DCC7C6C2B0C79C2F55DA9D682C0CB1EA3ECD9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:f1:44:81:98:28:60:77:aa:72:af:bc:e9:
55:8b:a2:05:ac:78:22:46:16:9c:77:4a:55:df:68:
ac:18:55:10:e4:5e:55:bf:e5:51:63:25:1a:ca:86:
0f:40:71:2f:99:2a:28:7d:68:30:ee:eb:0e:de:17:
71:c8:9b:a5:e9:84:7b:f9:88:11:9a:3b:22:ef:de:
09:a6:3c:7b:ad:25:3a:3d:19:cc:47:f4:6e:8d:09:
d1:3b:af:95:76:1f:c6:5d:ed:5d:bf:1d:87:6c:88:
65:05:5f:4c:36:1b:17:cd:fb:5e:da:ce:b7:c5:57:
69:c5:3b:05:ba:d7:4d:7c:96:53:d9:44:dd:aa:01:
6d:2c:a7:7f:4f:90:c9:4a:e0:bd:6f:e2:9c:c8:70:
d8:47:16:a6:dd:6f:88:22:0f:8b:53:f8:da:8b:42:
fa:ce:cb:58:6c:da:5d:3b:e3:b1:9f:a2:9d:2a:6e:
90:b0:09:63:1e:fb:28:5b:48:64:1a:ec:6b:32:e9:
02:1f:5d:06:66:f3:69:f9:bf:b7:e8:99:df:5a:41:
84:16:18:a0:9b:36:af:fa:5f:6a:ef:c4:43:9f:7c:
a4:23:30:c9:8c:a0:70:a7:dc:d6:1f:af:d9:b4:be:
51:2f:4f:f9:46:ce:07:db:7c:92:29:ef:07:12:1f:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:7C:6C:2B:0C:79:C2:F5:5D:A9:D6:82:C0:CB:1E:A3:EC:D9:B5
X509v3 Authority Key Identifier:
keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/3130332e3232392e3230312e302f32342d3234203d3e203539323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.201.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:cc:be:00:2b:59:41:24:1b:1d:e5:52:e7:92:f4:68:90:86:
59:c8:03:07:c5:e9:79:f3:f6:bb:79:f2:e2:87:88:89:47:15:
3f:7f:f4:d0:21:f3:d4:32:d7:7f:64:2d:82:ee:36:b4:b8:68:
37:ae:cf:9a:15:88:ee:e3:97:0d:77:fb:a7:b5:1e:2e:ad:e6:
23:c6:1c:6c:ed:92:06:17:a1:f9:6a:df:2e:5a:b8:d3:ac:1d:
58:55:a1:0e:0d:41:f5:a5:94:b3:6f:cf:3b:20:6c:bf:b7:98:
cb:6e:23:99:5d:b8:f5:51:d6:7b:0e:ce:58:38:0f:11:cf:17:
44:e1:92:e2:18:d5:c2:8f:1c:c0:64:c5:6e:b1:21:14:18:33:
de:32:22:69:ad:d1:44:93:24:04:a2:fd:84:fb:4c:f9:b1:ca:
96:d6:8e:ff:c1:75:2d:c9:2c:bf:86:e5:fe:ca:46:50:4a:a4:
9e:87:4e:6d:c8:97:99:17:37:38:33:e2:77:ba:9c:fc:3c:20:
5a:e1:e0:6b:ec:2b:d8:d1:03:c0:09:f1:ad:89:95:2a:2d:9d:
98:80:65:e2:4a:d0:bd:b8:6a:1a:8f:55:a9:c3:c3:f3:b4:69:
ae:38:2b:a1:eb:cc:1c:02:98:f8:35:52:9a:11:fe:e8:49:e9:
24:82:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org