Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231382e302f32342d3234203d3e203633343933.roa
File: 3130332e3234382e3231382e302f32342d3234203d3e203633343933.roa (raw, json)
Hash identifier: hISoKeTTZ5k2Gems+O4d546Z+RSILEEHU74xN7gO9xQ=
Subject key identifier: D6:AE:7D:29:AF:1D:F3:58:D1:A9:BA:F6:51:56:2D:27:AF:0D:11:84
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 2A7BCA6C639C357994A1C464D6C5419620AF124D
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231382e302f32342d3234203d3e203633343933.roa
Signing time: Mon 19 Dec 2022 03:39:25 +0000
ROA not before: Mon 19 Dec 2022 03:34:25 +0000
ROA not after: Mon 18 Dec 2023 03:39:25 +0000
asID: 63493
IP address blocks: 103.248.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7b:ca:6c:63:9c:35:79:94:a1:c4:64:d6:c5:41:96:20:af:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Dec 19 03:34:25 2022 GMT
Not After : Dec 18 03:39:25 2023 GMT
Subject: CN=D6AE7D29AF1DF358D1A9BAF651562D27AF0D1184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:50:eb:5f:bf:75:8d:0a:09:b5:55:96:40:
cd:82:99:e0:58:4d:2c:49:66:46:56:cc:46:ff:dc:
b8:20:0d:ea:39:9b:15:f4:41:7b:88:af:57:56:fd:
7f:9e:de:58:34:da:86:97:38:48:79:d4:be:36:3e:
a9:5f:e5:7e:51:d8:73:7b:ee:49:e3:16:e9:d6:67:
25:1c:74:4a:d7:04:f3:d2:9d:be:a7:87:aa:42:95:
7b:07:6b:4a:b0:14:d4:d5:e5:d3:dd:61:f9:80:46:
1d:c1:b4:1c:34:60:a4:7e:ab:2d:45:8b:aa:58:dd:
af:ea:39:b6:9e:57:c9:98:e8:64:a7:10:f4:8e:d9:
78:14:a5:62:13:c9:b4:a6:3a:21:aa:f2:a2:4d:c8:
d1:07:bc:ff:af:9a:7d:5a:e1:92:4f:70:09:a2:8f:
37:74:1d:1d:b0:13:74:f4:76:d9:d2:be:b2:dc:35:
b3:3d:8e:e5:45:25:6e:40:46:ed:8f:f0:58:05:41:
f3:d2:71:ac:f0:f9:d7:48:1b:5f:f7:d2:42:8a:7a:
3a:a2:38:74:02:9b:aa:c4:01:e7:7b:83:05:b4:b1:
b4:69:fc:7d:0f:40:8d:00:d8:2a:69:a3:01:60:96:
58:95:ba:08:ce:c8:55:29:d2:30:7b:3a:1e:74:27:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:7D:29:AF:1D:F3:58:D1:A9:BA:F6:51:56:2D:27:AF:0D:11:84
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231382e302f32342d3234203d3e203633343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:4d:da:21:8f:ad:86:91:7a:39:67:36:57:bc:7b:ab:15:1d:
6d:13:32:2a:c5:84:d5:7b:08:66:73:0b:94:42:9f:32:a2:dc:
8b:f8:d2:ff:6b:09:14:cb:4a:07:91:38:44:fe:7a:99:c2:ac:
70:cb:e7:1a:54:32:7a:58:a0:b9:93:f3:a1:67:27:79:4b:ab:
c3:c3:a6:8e:86:69:74:af:ae:77:57:26:ea:c6:4c:80:97:8a:
2f:2c:8b:4f:fc:6c:47:0b:fc:38:8e:29:96:6e:bc:79:56:c2:
17:b8:27:1c:f9:23:66:b8:de:eb:7d:0a:c7:f4:2f:ec:fc:4e:
6f:8a:85:ee:98:11:2d:52:0e:a9:8d:90:07:c7:ba:f0:e0:d0:
9a:04:87:00:e0:e3:58:00:98:75:3f:66:2c:40:fa:91:ba:e8:
f1:45:bf:2a:04:96:93:00:e7:59:d2:4c:58:57:38:a4:6f:b1:
7c:66:b4:72:42:ba:78:a5:4c:76:f2:f0:08:80:e4:99:b4:23:
46:91:9f:34:b7:d9:ef:5d:9c:c6:59:5b:dd:4f:f7:59:0f:3f:
0b:3e:23:cf:92:b3:6d:15:23:af:0d:9b:93:79:d1:01:d1:f0:
b4:31:03:e9:9c:45:97:04:60:89:80:9d:f1:38:30:3e:94:82:
64:6e:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org