Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e203633343933.roa
File: 3130332e3234382e3231392e302f32342d3234203d3e203633343933.roa (raw, json)
Hash identifier: dI5eKFQCw0yby7eJO2GvGxwuaveiLdQcLWkfqIDxPKU=
Subject key identifier: A0:3C:DC:69:CD:15:36:76:F9:28:64:98:52:40:6A:FD:F9:2A:D4:0E
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 3E4779662B39092AC52D2DEDC9497A25A366A24C
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e203633343933.roa
Signing time: Mon 19 Dec 2022 03:39:39 +0000
ROA not before: Mon 19 Dec 2022 03:34:39 +0000
ROA not after: Mon 18 Dec 2023 03:39:39 +0000
asID: 63493
IP address blocks: 103.248.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:47:79:66:2b:39:09:2a:c5:2d:2d:ed:c9:49:7a:25:a3:66:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Dec 19 03:34:39 2022 GMT
Not After : Dec 18 03:39:39 2023 GMT
Subject: CN=A03CDC69CD153676F928649852406AFDF92AD40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:0f:7b:d0:b1:66:c8:50:e8:e9:25:46:a4:
dc:c9:85:0d:1f:0d:a1:d2:24:b3:c2:36:67:ad:f4:
19:15:66:d9:14:4b:41:5e:33:50:36:96:5e:f0:ea:
ad:d1:9a:ea:fb:4f:47:a6:f4:2f:38:1b:64:7a:f7:
f4:6e:79:03:c0:8c:ee:85:a1:ac:6b:d9:c7:2e:d8:
b6:98:f1:2c:d7:85:cf:9c:7d:55:d9:a6:90:48:3e:
ba:ee:9c:9e:10:55:f8:d9:20:1b:af:e0:da:71:51:
94:84:3f:03:e2:6d:58:e8:ff:2b:44:49:cd:2f:59:
71:9b:11:b0:de:6a:a9:ce:08:48:bd:ad:ec:99:40:
d7:c4:55:14:9a:21:24:0b:54:4e:d5:1e:ca:b1:c8:
f1:c7:cf:53:23:c6:5d:d2:80:77:80:70:fb:e6:c3:
e6:22:4b:f0:3f:37:71:2f:e3:36:09:a6:f3:12:63:
22:d4:8f:ba:9a:04:a1:dc:99:b3:6f:11:7b:c8:98:
8c:b9:0e:0f:0d:c0:ef:0a:8c:ed:77:3b:1f:24:f3:
5e:ce:81:a3:3b:ca:bb:58:20:f1:f1:4b:b8:fe:47:
92:3a:a3:89:f3:31:33:48:ab:24:5d:8b:ac:01:65:
32:e0:42:79:4f:46:e5:3a:9e:80:b6:ad:52:75:e5:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:DC:69:CD:15:36:76:F9:28:64:98:52:40:6A:FD:F9:2A:D4:0E
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3130332e3234382e3231392e302f32342d3234203d3e203633343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.219.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1a:e0:47:ec:6e:f2:74:b2:0b:0a:5f:3d:b6:49:53:62:2d:
e9:e1:e9:14:12:1a:a4:8c:01:50:0e:05:83:e1:38:0a:c0:76:
42:c8:70:88:4d:ea:d2:db:84:69:2a:48:e9:d2:a7:85:d0:aa:
35:e8:e7:00:a1:eb:cf:d9:44:35:d3:24:20:e7:1d:85:7e:5d:
87:0f:44:86:f6:be:d7:3e:d8:dc:c1:eb:ac:a6:3a:6c:1e:ba:
6c:86:ce:17:b9:09:3c:fe:51:72:6f:00:72:64:ef:d2:df:dc:
bb:1b:12:09:a2:dd:50:88:a1:86:d6:96:56:e2:fc:6e:70:2e:
43:48:1d:33:d4:7c:e6:5b:22:22:58:c7:e6:2a:4c:59:dd:d0:
4a:cc:8e:c3:dd:ab:a9:f0:0c:0b:96:d8:30:f4:e3:af:dc:59:
23:c5:b9:18:18:44:ad:14:63:23:16:6b:f6:ea:0b:f7:71:e7:
38:12:4d:bc:78:d8:50:0a:fa:20:62:de:99:d7:4b:02:5a:fd:
b2:7f:10:34:df:23:dc:3e:2b:bb:2b:6f:f8:6d:f4:c1:fc:7a:
d2:3a:4c:3b:d8:08:e0:73:c5:41:c0:c0:1b:b6:dc:73:3c:e1:
44:68:90:14:3d:1e:06:3a:88:82:61:21:ed:c0:2b:f6:80:42:
f8:5a:03:12
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPkd5Zis5CSrFLS3tyUl6JaNmokwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw
RTIzRjVCNjAeFw0yMjEyMTkwMzM0MzlaFw0yMzEyMTgwMzM5MzlaMDMxMTAvBgNV
BAMTKEEwM0NEQzY5Q0QxNTM2NzZGOTI4NjQ5ODUyNDA2QUZERjkyQUQ0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQA970LFmyFDo6SVGpNzJhQ0f
DaHSJLPCNmet9BkVZtkUS0FeM1A2ll7w6q3Rmur7T0em9C84G2R69/RueQPAjO6F
oaxr2ccu2LaY8SzXhc+cfVXZppBIPrrunJ4QVfjZIBuv4NpxUZSEPwPibVjo/ytE
Sc0vWXGbEbDeaqnOCEi9reyZQNfEVRSaISQLVE7VHsqxyPHHz1Mjxl3SgHeAcPvm
w+YiS/A/N3Ev4zYJpvMSYyLUj7qaBKHcmbNvEXvImIy5Dg8NwO8KjO13Ox8k817O
gaM7yrtYIPHxS7j+R5I6o4nzMTNIqyRdi6wBZTLgQnlPRuU6noC2rVJ15YXNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoDzcac0VNnb5KGSYUkBq/fkq1A4wHwYDVR0j
BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5
RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz
RjVCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcxLTdlY2ItNGRiZC1h
NDIxLTk5YjljZDIwOTAzYS8wLzMxMzAzMzJlMzIzNDM4MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/jbMA0GCSqG
SIb3DQEBCwUAA4IBAQB5GuBH7G7ydLILCl89tklTYi3p4ekUEhqkjAFQDgWD4TgK
wHZCyHCITerS24RpKkjp0qeF0Ko16OcAoevP2UQ10yQg5x2Ffl2HD0SG9r7XPtjc
weuspjpsHrpshs4XuQk8/lFybwByZO/S39y7GxIJot1QiKGG1pZW4vxucC5DSB0z
1HzmWyIiWMfmKkxZ3dBKzI7D3aup8AwLltgw9OOv3FkjxbkYGEStFGMjFmv26gv3
cec4Ek28eNhQCvogYt6Z10sCWv2yfxA03yPcPiu7K2/4bfTB/HrSOkw72Ajgc8VB
wMAbttxzPOFEaJAUPR4GOoiCYSHtwCv2gEL4WgMS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org