Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231362e302f32342d3234203d3e203633343933.roa
File: 3130332e3234382e3231362e302f32342d3234203d3e203633343933.roa (raw, json)
Hash identifier: uGEJmGlEoGg7FwD/JQIxhn/uddJdkThieygpRlj0U1E=
Subject key identifier: C4:B4:3F:F6:63:4E:F5:6F:9D:3C:FF:61:C5:B8:EF:D5:5E:8E:5C:2C
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 86EF316DA873425011C14E5E9677AE9EBD9DAD
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231362e302f32342d3234203d3e203633343933.roa
Signing time: Mon 19 Dec 2022 03:38:33 +0000
ROA not before: Mon 19 Dec 2022 03:33:33 +0000
ROA not after: Mon 18 Dec 2023 03:38:33 +0000
asID: 63493
IP address blocks: 103.248.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
86:ef:31:6d:a8:73:42:50:11:c1:4e:5e:96:77:ae:9e:bd:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Dec 19 03:33:33 2022 GMT
Not After : Dec 18 03:38:33 2023 GMT
Subject: CN=C4B43FF6634EF56F9D3CFF61C5B8EFD55E8E5C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a4:3f:96:30:49:1d:7c:63:ca:d3:82:8c:c1:
f4:5a:95:a0:29:a6:7c:f8:c6:ec:88:48:e2:56:04:
05:e2:37:4c:56:35:07:cb:a2:0a:f2:30:15:94:40:
b2:3d:ba:49:82:de:04:56:04:14:20:1f:7e:1a:b6:
bb:cf:bf:29:37:c0:53:ff:50:54:87:a3:b5:d9:9f:
62:59:fb:78:5f:81:21:73:59:57:f3:be:56:dd:cb:
b3:0d:dd:dd:08:cf:8c:0d:39:77:e1:aa:56:38:6f:
fe:bc:41:ac:5f:2d:b6:a7:51:e2:55:64:80:a8:2d:
16:b6:93:68:73:43:8b:8b:c1:15:9f:66:cf:3e:f1:
1b:e1:b2:3f:f2:12:8c:f2:b2:86:57:1c:24:35:80:
7d:53:e4:4a:92:82:20:07:4c:58:70:c4:90:22:17:
b1:02:b1:e8:c9:b1:3f:7e:ed:7c:56:b9:7a:da:e2:
c3:15:b2:58:b9:9c:ba:0d:75:7a:d0:ea:3f:53:7e:
64:bb:b1:b4:20:14:82:4a:7e:c8:41:b2:3b:e8:a7:
fe:0a:65:53:2f:ce:44:20:fd:ae:44:b9:23:ef:79:
05:4b:51:37:93:73:81:34:20:47:ac:78:f3:8e:37:
8e:fc:9b:25:23:f1:75:8d:a3:bb:d1:64:29:a4:8a:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:3F:F6:63:4E:F5:6F:9D:3C:FF:61:C5:B8:EF:D5:5E:8E:5C:2C
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231362e302f32342d3234203d3e203633343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:10:16:ad:9c:ae:fd:4c:5e:4a:b1:20:35:94:f2:0c:00:4b:
26:a3:cf:67:52:ae:63:87:4f:2c:74:5f:c1:a9:03:aa:5a:60:
55:81:f4:00:a6:7b:b1:bf:0c:cb:50:fd:77:be:92:25:d0:80:
4c:c6:3f:e9:71:1f:34:f3:7c:01:d7:60:a7:24:51:fe:38:fa:
84:8b:84:54:ac:56:24:49:f8:83:7e:38:03:67:43:1d:3c:29:
aa:3b:13:ed:ed:0f:97:cd:fc:74:a6:7d:df:f0:8b:95:0e:28:
51:e2:f7:18:11:83:13:ee:2f:b8:26:23:12:8d:b1:c1:cb:03:
d9:ec:0e:b4:59:b3:d4:35:1b:62:fc:59:dd:09:76:e3:ba:fc:
1c:85:db:60:dd:4d:fd:9f:22:32:c9:62:dc:ff:aa:88:a4:ff:
bd:e7:b5:fa:1b:ba:c4:82:b4:56:af:4a:25:66:76:cb:9d:87:
92:e1:de:1f:6a:79:7d:44:85:df:0e:5d:7f:b7:28:7b:2e:5a:
5e:65:8b:d0:78:3b:9f:2e:d7:38:b8:38:f6:22:a4:8d:0f:94:
f1:67:fa:46:2a:52:a0:0e:f4:62:b6:04:74:81:83:39:a0:b7:
61:2c:43:5a:18:1a:30:df:48:77:4a:4a:98:40:27:9e:36:67:
13:b0:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org