Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa
File: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (raw, json)
Hash identifier: 2relS54ja+N7pCA/8665nuFBMYQKAR2g42V5bFEdX8o=
Subject key identifier: 3E:F7:00:5E:9C:C4:0B:63:14:9E:0B:F5:0D:3B:3F:BA:81:80:CD:E4
Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial: 4EC413912FB4303F9EC23C37AB64D01BA2D9CF3D
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa
Signing time: Mon 05 Sep 2022 13:00:00 +0000
ROA not before: Mon 05 Sep 2022 12:55:00 +0000
ROA not after: Mon 04 Sep 2023 13:00:00 +0000
asID: 139427
IP address blocks: 103.52.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:13:91:2f:b4:30:3f:9e:c2:3c:37:ab:64:d0:1b:a2:d9:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
Validity
Not Before: Sep 5 12:55:00 2022 GMT
Not After : Sep 4 13:00:00 2023 GMT
Subject: CN=3EF7005E9CC40B63149E0BF50D3B3FBA8180CDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:c1:3f:bb:8b:c7:39:54:de:5f:44:ce:64:
31:b6:76:95:cf:f7:88:49:01:83:d6:13:bc:35:30:
d4:ea:01:d0:d2:08:54:7f:fc:66:e5:14:23:62:e1:
1f:a5:3e:98:64:00:f5:84:c4:4a:49:ec:48:f8:10:
c5:82:1d:91:9c:4c:37:9a:22:20:67:16:4e:12:cf:
34:61:8e:99:38:fa:8e:77:71:c0:7a:fd:6c:f7:6a:
b5:c9:98:a3:55:d9:e3:b7:5a:29:60:e7:5e:af:5e:
b9:a1:af:95:4c:82:e6:ce:de:82:ac:62:a0:52:d2:
4e:68:b7:53:1f:35:ae:c8:fe:31:b8:4d:34:69:97:
db:2c:d2:4c:d0:f2:73:ab:85:18:af:d6:45:b6:68:
ec:ed:67:e2:cd:0c:b5:9c:89:5a:04:73:ab:be:03:
c4:e0:85:d7:2c:b4:5c:f8:41:67:6c:e6:3d:63:7f:
a9:6c:22:89:b0:44:a9:85:1a:bd:6f:2b:0b:3e:f3:
f1:c6:37:8b:bf:f4:e2:85:d0:5e:b4:08:56:4c:39:
27:05:f7:4b:58:f8:7f:1b:76:86:ff:64:f7:3b:2e:
91:98:0a:dc:c9:2a:f4:9f:d1:80:ae:1c:9c:69:e0:
5d:8b:49:42:f6:03:db:2f:6d:f6:c7:5b:9e:e5:70:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:00:5E:9C:C4:0B:63:14:9E:0B:F5:0D:3B:3F:BA:81:80:CD:E4
X509v3 Authority Key Identifier:
keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:be:8a:26:a5:11:0f:38:d3:ef:e2:e6:a9:5b:f8:9f:6a:d0:
1e:8f:37:4e:c5:f6:e1:4b:2b:3f:24:48:9d:50:79:7f:38:aa:
4e:16:a9:0c:0c:c2:71:3e:af:3d:5c:61:0c:77:9c:85:0d:68:
31:0d:b5:8a:86:67:46:28:8f:8a:2b:f9:fa:53:7e:22:4b:3d:
52:ef:9d:67:de:e6:38:d1:c4:50:ce:e8:35:f7:2a:f3:b3:4f:
50:28:e2:c2:8d:e7:20:74:48:75:b9:70:c6:1b:88:74:e3:40:
1b:06:9a:2a:a0:cd:63:40:14:c5:33:f9:13:5c:47:b2:3d:d8:
39:9f:7f:5a:db:5f:84:87:49:57:db:a7:e2:b5:28:8f:d8:b3:
8f:f5:c9:e1:55:a8:78:44:01:3c:b7:b0:46:8c:bb:60:f8:45:
34:46:18:8e:a4:93:0c:1a:ba:cc:a3:24:45:da:3e:e3:34:44:
f8:23:23:e0:9f:d3:3f:a8:1e:26:3d:ff:0c:57:62:2c:5e:98:
2d:5e:e8:e0:41:f6:e2:07:39:31:5e:cd:1c:45:01:b0:40:51:
f9:c3:b3:19:b3:78:7e:79:df:fe:ea:b2:5c:cf:6f:0d:9b:62:
b8:b7:a4:12:d1:df:27:71:5d:d9:c8:ee:55:08:3d:8c:1c:fd:
50:ff:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org