Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35382e302f32332d3233203d3e20313439393039.roa
File: 3130332e3139312e35382e302f32332d3233203d3e20313439393039.roa (raw, json)
Hash identifier: JHeS9b803JCvSpVaccbdoVf/bIOnnau7gfr+TWJ9Xi8=
Subject key identifier: 09:0B:48:64:5D:B5:55:5B:E8:A3:7C:C8:02:A4:54:1D:EF:82:62:04
Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8
Certificate serial: 51A9EBBE61F074182BEB6D58F07FC6C8CCC547D9
Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35382e302f32332d3233203d3e20313439393039.roa
Signing time: Mon 21 Nov 2022 04:28:15 +0000
ROA not before: Mon 21 Nov 2022 04:23:15 +0000
ROA not after: Mon 20 Nov 2023 04:28:15 +0000
asID: 149909
IP address blocks: 103.191.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a9:eb:be:61:f0:74:18:2b:eb:6d:58:f0:7f:c6:c8:cc:c5:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8
Validity
Not Before: Nov 21 04:23:15 2022 GMT
Not After : Nov 20 04:28:15 2023 GMT
Subject: CN=090B48645DB5555BE8A37CC802A4541DEF826204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:ae:91:92:bc:dd:6f:c1:2e:f2:5b:ed:49:
d3:94:db:c6:30:0f:1c:b3:50:0b:e2:56:5e:28:fb:
f1:f5:86:0d:22:e9:06:78:20:da:42:95:c3:ea:bb:
50:43:19:17:22:44:7f:ee:8d:3a:f9:8b:0c:aa:2d:
10:3f:78:8f:00:e6:9c:96:23:c4:a6:d8:b3:b8:8a:
ba:9c:2b:2c:9c:96:10:a2:c0:8a:e4:ec:e6:29:d4:
3d:19:a6:d0:fe:e1:dc:86:ad:5b:c2:e8:70:0b:e5:
2c:e3:d0:98:75:96:af:18:ff:68:7d:d7:cd:be:8b:
fc:4f:57:07:c0:f4:f8:bc:05:af:91:d2:de:91:6c:
0d:99:3b:30:5e:1f:d9:1e:a2:d4:40:0e:b0:fd:de:
76:b6:2e:05:fd:83:1b:ee:49:39:68:c0:ed:d4:8c:
61:4d:17:8a:80:08:fc:c3:90:88:81:d4:2e:b4:b2:
e5:16:33:45:13:c5:a4:21:b0:a2:68:24:01:f0:aa:
09:9c:94:ee:f9:4b:50:87:6e:9d:58:f3:7b:72:89:
9e:fa:e0:57:8d:28:75:78:97:11:74:12:f6:ee:67:
8f:c8:85:09:19:59:d9:dc:b5:6f:9c:f8:ca:a8:4f:
af:8e:e2:c9:14:39:a2:95:a8:d0:8f:0f:3a:26:52:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:48:64:5D:B5:55:5B:E8:A3:7C:C8:02:A4:54:1D:EF:82:62:04
X509v3 Authority Key Identifier:
keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35382e302f32332d3233203d3e20313439393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:0a:3b:f4:4c:35:29:f9:34:f6:1b:40:a0:67:a1:ae:d5:5e:
84:10:eb:15:bd:2f:8c:43:f3:db:6a:d5:c6:66:8a:3e:49:4b:
88:a4:9d:d8:14:ef:2d:90:65:3f:36:f5:f4:7f:ab:c8:85:da:
c9:25:bc:73:56:b8:7c:c9:1a:80:6e:90:ef:a1:b2:17:df:a5:
e5:37:5a:65:21:5d:f7:1a:6f:85:85:ac:ee:fa:5d:b8:ac:e1:
6f:24:a0:80:5d:a2:05:1b:f0:8f:7a:e6:e2:24:16:7d:23:04:
cf:21:15:5b:05:44:e7:9c:24:d7:cd:4c:8f:8c:57:dd:fe:fe:
2a:ea:ff:d4:ba:ea:02:51:b3:dc:22:9b:6c:a4:0f:fd:8c:d0:
ce:5d:c6:d9:eb:2a:cf:b3:af:27:99:e0:61:07:5b:71:dc:b2:
19:76:9f:70:46:94:40:72:18:b5:e3:e5:75:6c:ca:d2:17:c6:
9a:be:ad:74:44:9e:49:b0:63:a0:91:e7:91:04:96:d8:3a:81:
b9:f0:b1:d4:3d:6c:12:bf:73:f8:f6:08:dd:5d:02:af:1f:3d:
ff:b5:74:c8:15:88:87:fd:2f:44:17:62:d1:05:46:04:2e:8d:
ab:1e:4e:0f:02:ec:8a:5f:06:4d:b7:36:6c:33:1c:d5:6c:87:
1e:11:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org