Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35392e302f32342d3234203d3e20313439393039.roa
File: 3130332e3139312e35392e302f32342d3234203d3e20313439393039.roa (raw, json)
Hash identifier: 1Bk0yaJ3nq0AQ1uqPX3Nz1bwk1NksYggdQn+oJRQjsw=
Subject key identifier: 82:D2:2A:19:4B:B4:35:53:A7:15:13:7A:EE:40:AD:EC:F8:BE:D4:3B
Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8
Certificate serial: 34DB6449104174E7584D575962D3D69A6B32793F
Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35392e302f32342d3234203d3e20313439393039.roa
Signing time: Mon 21 Nov 2022 04:27:30 +0000
ROA not before: Mon 21 Nov 2022 04:22:30 +0000
ROA not after: Mon 20 Nov 2023 04:27:30 +0000
asID: 149909
IP address blocks: 103.191.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:db:64:49:10:41:74:e7:58:4d:57:59:62:d3:d6:9a:6b:32:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8
Validity
Not Before: Nov 21 04:22:30 2022 GMT
Not After : Nov 20 04:27:30 2023 GMT
Subject: CN=82D22A194BB43553A715137AEE40ADECF8BED43B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:46:04:71:a2:e7:5d:b4:10:40:47:80:a6:
24:9e:18:43:f7:fb:de:0a:de:43:43:d2:3d:d8:77:
0a:0c:d0:0d:19:b0:a0:7f:3d:f0:fb:38:3b:ed:b5:
20:46:45:53:31:38:bc:2f:5d:fa:c7:ec:a3:35:53:
e3:75:d0:c8:30:6a:23:ba:54:07:67:c2:c3:be:da:
3a:a3:04:be:63:6e:f0:9c:7b:65:11:b4:3f:b8:e4:
f9:d0:18:27:84:64:d6:96:60:ab:6a:d1:ea:8e:e6:
54:9c:64:12:db:b6:cd:1b:ee:06:14:06:a6:aa:81:
98:3e:10:c7:b4:c0:50:c6:9d:fc:f4:2a:87:8b:f1:
18:cd:c7:75:03:47:da:7f:3f:61:51:ba:bc:4d:f7:
15:94:80:d5:66:1a:de:00:0c:68:24:ce:1a:04:f5:
ed:e8:12:66:25:d4:ca:d4:03:26:b8:ec:aa:c3:96:
48:9f:82:12:4c:21:6d:72:7e:be:e0:61:5f:4a:f8:
32:79:0d:02:46:e0:2e:10:6f:e2:13:b2:9e:86:69:
38:90:c0:09:72:92:aa:e6:be:f6:68:bc:55:74:f1:
86:33:87:16:df:9e:d3:18:fe:8e:ac:41:8b:72:14:
a1:d9:ef:01:e4:52:b9:79:7c:65:cd:9d:c0:dc:a5:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:2A:19:4B:B4:35:53:A7:15:13:7A:EE:40:AD:EC:F8:BE:D4:3B
X509v3 Authority Key Identifier:
keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/3130332e3139312e35392e302f32342d3234203d3e20313439393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:f4:75:19:37:7f:36:aa:5e:f5:91:99:87:2a:25:eb:ed:
77:70:0e:bb:f6:22:6a:24:3b:18:8c:9d:78:60:bb:e8:96:13:
4f:ff:6e:58:fd:cd:0c:35:9e:13:c2:9d:53:04:cc:32:0b:cc:
62:57:93:25:3f:9e:97:83:c5:84:e1:a4:16:18:06:61:54:f8:
fb:04:8a:74:50:b5:8e:c2:20:ee:6b:61:ff:5a:ec:52:9a:05:
2d:a7:72:5c:0d:e7:ed:68:3d:86:3b:b2:59:c4:7f:4c:5e:a8:
d7:96:ff:6f:fc:7d:15:9a:d2:a3:72:44:48:d1:5a:c2:e0:bc:
ae:39:30:78:58:65:cd:fe:16:45:ba:9e:bf:ed:82:fc:21:f3:
ed:54:42:9d:53:cc:6e:03:7d:7b:cb:e0:bd:06:bb:5d:70:3d:
68:4a:83:5a:b5:cd:8e:82:86:7b:71:aa:c3:ae:a2:e4:ef:b3:
96:1c:1f:a0:4e:74:75:2e:05:f9:5c:e4:58:4d:81:82:f7:62:
13:ec:b6:4e:41:88:a8:88:ba:8c:67:31:f5:01:b2:c9:be:cc:
b6:6d:46:88:cc:e4:aa:b8:e5:ea:67:38:0d:22:fd:77:d7:c8:
7d:5d:c9:1f:20:1f:e1:86:5f:b2:9a:e7:f8:e9:1f:3b:b4:a7:
0d:78:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org