Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
File: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier: m1voBrABBIB9ruDTDW1dSqRPjHAzO5F1HetwOe6+F2w=
Subject key identifier: 71:63:5D:49:CF:C5:D9:0E:3D:2D:72:AA:6B:88:39:38:32:98:BA:4E
Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial: 20E4036BBA5E6E38898E4290191D9C9FA9FD1EB0
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
Signing time: Mon 05 Sep 2022 13:00:00 +0000
ROA not before: Mon 05 Sep 2022 12:55:00 +0000
ROA not after: Mon 04 Sep 2023 13:00:00 +0000
asID: 139427
IP address blocks: 103.52.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e4:03:6b:ba:5e:6e:38:89:8e:42:90:19:1d:9c:9f:a9:fd:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
Validity
Not Before: Sep 5 12:55:00 2022 GMT
Not After : Sep 4 13:00:00 2023 GMT
Subject: CN=71635D49CFC5D90E3D2D72AA6B8839383298BA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:09:89:9a:3e:66:ee:91:bf:ca:93:03:0b:
20:a9:cc:d4:8a:c8:3f:8e:11:80:47:86:15:8f:47:
5c:d7:10:e4:e4:46:46:3d:96:f8:57:1f:04:89:80:
d3:d3:86:6b:2e:29:f0:22:7d:54:cb:91:6b:a7:09:
d5:b6:78:d3:c2:f0:17:9e:61:6c:01:96:a1:0a:5e:
5a:6d:91:87:ce:79:a7:40:08:c3:6d:70:ab:4a:9c:
44:34:35:0d:99:89:23:c1:b6:64:52:ff:62:f5:05:
85:f6:e4:32:51:a7:bd:5b:79:47:49:86:94:28:40:
52:87:de:c1:b2:5e:ac:e0:2c:36:63:40:6b:01:d9:
1d:74:6c:72:67:53:78:e6:d6:e4:cb:5a:65:a2:b0:
f1:6c:b3:b4:a3:0d:ff:82:aa:d9:ec:83:27:ce:18:
cf:10:f4:78:be:5f:d1:f3:2b:04:6a:82:be:b1:55:
6d:9e:87:bd:fb:fc:a3:d5:96:7e:bf:a7:b0:19:9c:
f4:bb:40:5e:cb:c5:80:b2:c4:ed:98:0c:37:a8:07:
f9:20:08:f5:14:e1:70:b3:be:2f:d5:a7:90:4c:75:
6f:37:e4:df:53:28:fb:71:3c:73:8b:92:c2:cb:2f:
54:73:da:a2:f0:d4:f3:a9:79:52:bd:3d:f4:03:53:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:5D:49:CF:C5:D9:0E:3D:2D:72:AA:6B:88:39:38:32:98:BA:4E
X509v3 Authority Key Identifier:
keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32342d3234203d3e20313339343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.60.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f5:a0:50:01:8b:82:91:f6:f1:ba:c6:66:a5:00:8a:a6:8d:
ac:7e:18:ad:ee:29:e3:78:f7:d2:32:f8:1d:78:73:b2:36:47:
c4:17:c5:69:a0:2e:e4:8f:f5:62:9b:f4:fb:93:24:98:ed:1b:
70:34:a2:53:2b:ed:8d:66:38:09:22:9a:3c:1e:4f:ed:67:9e:
5e:ae:35:b3:d8:80:49:f0:4d:24:bb:89:40:41:11:87:62:e6:
13:45:cb:39:47:7c:f9:b0:22:90:bc:1f:57:74:0a:1f:a8:7d:
5a:c2:f7:94:08:64:be:68:29:6a:2e:f1:22:e7:2a:bb:43:31:
30:e1:e2:c4:96:22:a5:d0:d3:50:64:56:35:2a:ea:d9:df:87:
3a:4e:5b:4f:73:f9:4b:eb:2d:63:65:e1:1a:01:d7:85:c0:3c:
7a:aa:51:7f:e6:37:66:2c:ca:e0:1a:26:17:0e:7e:90:18:f8:
12:0e:61:01:c8:64:9f:8a:b7:d9:2f:64:30:2c:e3:44:44:33:
4d:2b:7e:35:40:b8:3a:c1:f3:2d:24:cc:4e:9b:73:9b:e9:df:
0c:6c:7b:4f:8f:f3:27:2a:c5:40:b7:b0:d0:34:88:79:16:4f:
e0:d7:df:e7:00:14:08:22:ed:52:bf:4a:3a:bf:90:6b:68:7a:
6b:3f:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org