Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e203435323838.roa
File: 3130332e3138312e3234382e302f32332d3234203d3e203435323838.roa (raw, json)
Hash identifier: /CPlGZLDbsaGKsbxYE7mW4dVnXHnPOt6u+cT5EKFW6U=
Subject key identifier: E9:B4:CD:95:B0:BB:85:2F:7F:33:81:2C:95:A3:6A:B9:6C:28:27:01
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 7C195BC0DDC3548BBABE0837BA6548DD219B73F4
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e203435323838.roa
Signing time: Mon 20 Mar 2023 11:19:45 +0000
ROA not before: Mon 20 Mar 2023 11:14:45 +0000
ROA not after: Mon 18 Mar 2024 11:19:45 +0000
asID: 45288
IP address blocks: 103.181.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:19:5b:c0:dd:c3:54:8b:ba:be:08:37:ba:65:48:dd:21:9b:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Mar 20 11:14:45 2023 GMT
Not After : Mar 18 11:19:45 2024 GMT
Subject: CN=E9B4CD95B0BB852F7F33812C95A36AB96C282701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:99:3a:cd:b2:a1:48:88:2c:ed:3f:d9:8e:
55:0c:9c:4a:51:ec:ed:1e:72:ac:26:52:95:30:d2:
0e:e0:44:f6:3a:27:aa:69:54:e5:a6:5e:02:b6:31:
67:56:38:ab:ee:6b:57:e4:c9:32:e7:dc:c3:6a:c7:
b9:82:7b:6c:44:7b:44:ae:b1:ed:f8:e6:01:d6:e6:
e5:b6:72:df:72:d5:21:03:6a:6c:07:50:31:c8:99:
5f:b5:8c:c0:62:da:92:ce:14:ef:ad:c0:d6:87:b8:
50:31:37:38:66:25:f9:f9:36:df:56:9f:4a:f7:4c:
b6:34:92:52:e8:a1:ac:ce:1a:bb:40:a0:41:2b:f2:
52:7b:e3:11:ee:4d:3e:5b:cc:a9:4d:d4:aa:5d:4e:
ac:e1:ef:79:a8:30:61:ab:fc:14:f2:e4:91:d0:31:
63:57:18:27:6c:f4:ba:23:00:a5:31:d6:69:ef:17:
2f:d9:43:67:ed:0a:e8:5c:9b:a4:63:6d:42:14:6c:
ca:00:f7:95:af:51:e5:19:0f:34:54:9d:00:5f:1b:
f5:65:fb:1f:ee:b1:64:15:60:47:38:ca:9c:bd:0b:
81:62:30:e7:10:72:e5:8e:13:f3:4a:95:d9:07:33:
f8:22:00:0c:34:7e:50:d4:19:5c:2e:bd:ae:4d:40:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:CD:95:B0:BB:85:2F:7F:33:81:2C:95:A3:6A:B9:6C:28:27:01
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e203435323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.248.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:99:06:ed:72:54:19:2a:37:97:a6:82:b2:03:67:21:5c:a3:
31:21:59:c0:92:4d:37:bf:cb:a6:fa:c2:54:c5:2f:2e:1d:c8:
3f:8d:cb:72:dc:28:79:07:40:ac:81:18:34:3b:9a:37:41:38:
0c:ab:a6:cc:ab:08:38:5d:44:80:36:bc:9a:1a:08:3b:7d:b3:
6a:2b:5a:db:59:1a:11:7d:7c:2f:1a:05:b3:ce:c8:39:95:10:
ec:dd:1e:57:33:cb:ca:e8:95:47:fd:10:52:18:b6:a3:54:06:
dc:51:09:6d:2b:41:f0:a8:2a:c6:ec:6f:aa:5f:2b:77:6e:fa:
af:2f:95:e9:e1:34:35:70:02:dd:e0:81:3e:6c:11:bf:e1:fd:
6a:02:5a:9c:c8:ab:6f:90:28:56:45:df:a5:21:21:2b:ff:74:
76:bb:7d:7a:ac:e9:d5:87:57:f9:ef:7e:41:65:ce:c0:59:87:
ad:3f:5a:25:5c:8c:bc:2f:be:d4:cb:95:f1:89:45:15:c6:33:
74:2e:42:6f:d5:7c:68:e2:c7:33:ef:d7:fb:40:e8:a6:e9:ae:
c3:ee:c2:27:eb:2c:56:7c:aa:f4:29:e0:76:ae:1e:af:e2:68:
89:36:2f:22:86:a3:47:cb:a4:c8:ae:5c:8f:29:09:22:65:bc:
1b:37:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org