Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e20313530323130.roa
File: 3130332e3234382e3231392e302f32342d3234203d3e20313530323130.roa (raw, json)
Hash identifier: iPt4xOOxVygdXkcfjA4AHw+/gzawaxYJ3d2UIl7b7o0=
Subject key identifier: BF:A1:8B:58:4C:99:DF:66:D3:73:EE:6A:DC:99:7F:A0:76:11:18:31
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 3A906CE2877A15204E78439171CB2D7AB3DD2022
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e20313530323130.roa
Signing time: Fri 10 Mar 2023 14:58:07 +0000
ROA not before: Fri 10 Mar 2023 14:53:07 +0000
ROA not after: Fri 08 Mar 2024 14:58:07 +0000
asID: 150210
IP address blocks: 103.248.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:90:6c:e2:87:7a:15:20:4e:78:43:91:71:cb:2d:7a:b3:dd:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Mar 10 14:53:07 2023 GMT
Not After : Mar 8 14:58:07 2024 GMT
Subject: CN=BFA18B584C99DF66D373EE6ADC997FA076111831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:8b:73:2f:51:a1:b5:bc:40:c6:d0:39:c6:
6d:76:39:4a:9d:60:9e:b8:09:05:cb:ec:bb:fc:a9:
00:6c:5f:ef:0e:df:5f:a7:7a:13:44:06:84:ea:ac:
d5:ad:7b:a2:7b:cd:9f:40:ac:b3:3d:2f:f8:f1:3b:
bc:4b:2f:20:b2:ed:59:1a:73:83:d0:d5:81:86:f8:
ca:30:f8:50:ce:ac:48:50:90:af:51:e3:a5:de:93:
cc:fe:63:2f:4e:3e:57:63:a1:2d:e4:99:04:35:a8:
f8:e0:31:91:b7:77:f0:18:bf:e7:92:db:4b:66:76:
a6:bf:b2:4b:ea:0d:04:02:33:6b:1c:5a:19:13:34:
9c:84:5d:b6:d6:1c:a6:1f:cf:0a:46:72:98:ae:bc:
65:44:92:56:13:5d:00:91:ab:ac:86:5a:bb:52:cd:
93:ab:47:97:9b:bd:77:4f:c3:6a:fb:29:e0:08:c7:
f5:60:94:a1:9b:8d:9c:8c:36:af:b5:51:e9:c2:d3:
5e:99:d2:a1:05:33:26:3d:f2:4c:57:53:b2:de:33:
9c:7a:07:fb:20:a9:fa:f8:86:95:84:68:6e:74:e3:
4f:63:9b:bd:a6:7c:ac:f0:47:b3:3d:11:a3:46:4d:
db:85:e7:6b:a4:22:cf:0b:d5:e3:14:a5:e0:6c:8a:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:8B:58:4C:99:DF:66:D3:73:EE:6A:DC:99:7F:A0:76:11:18:31
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e20313530323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c3:da:a7:2d:75:6c:a5:33:57:a4:80:9b:b4:18:aa:d7:44:
24:f3:cf:50:09:08:06:f5:d2:42:f9:9a:a8:5c:e0:5e:9e:a8:
60:b9:f3:1e:b4:03:2c:88:e4:b3:56:52:bb:2f:cb:12:5e:d4:
f7:e1:26:97:8e:cb:9d:56:c3:cb:f2:3f:4f:13:bf:4a:22:ad:
d4:4b:c4:d8:13:75:b4:b2:04:ba:b5:89:91:c4:a0:1e:6d:9c:
41:2b:30:26:b9:0e:9b:02:9a:b0:12:d1:00:56:6c:c1:74:55:
f4:30:c8:f6:56:03:c5:3a:88:e2:98:8b:5a:08:5f:2c:85:04:
18:66:f6:f0:42:11:ee:4f:f1:6b:a1:2c:83:5d:ae:45:60:91:
a6:72:f6:99:aa:87:74:d2:2d:40:0c:1d:8c:13:c1:d8:ba:0a:
1e:4b:78:4b:ca:17:3f:e1:6a:2c:ef:47:57:69:4c:ce:63:02:
42:32:ec:53:da:93:4b:46:69:2f:17:cd:88:c9:46:6a:0f:85:
0c:60:46:a0:cb:be:4b:93:3d:1c:9d:b5:aa:8c:ab:a0:fe:dd:
11:a5:8e:8d:36:20:a4:6d:50:78:b3:4e:dc:c0:7a:e5:51:28:
86:3d:2f:d8:54:e9:c1:0a:34:6b:9f:cc:4e:0b:e8:24:ea:09:
10:cd:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org