Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa
File: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (raw, json)
Hash identifier: lWKJNvCVzeLYFi1O3bzRFLzosE6t4VJa7JzXEi8mjf8=
Subject key identifier: CC:0F:9F:BA:19:E1:CA:07:B2:D5:47:CE:E3:F4:C5:01:E2:60:F4:7E
Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C
Certificate serial: 38925B9D2468511EF495265AE46F999334B3788D
Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa
Signing time: Mon 16 Jan 2023 04:50:29 +0000
ROA not before: Mon 16 Jan 2023 04:45:29 +0000
ROA not after: Mon 15 Jan 2024 04:50:29 +0000
asID: 150503
IP address blocks: 103.126.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:92:5b:9d:24:68:51:1e:f4:95:26:5a:e4:6f:99:93:34:b3:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C
Validity
Not Before: Jan 16 04:45:29 2023 GMT
Not After : Jan 15 04:50:29 2024 GMT
Subject: CN=CC0F9FBA19E1CA07B2D547CEE3F4C501E260F47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:32:de:90:93:2e:22:45:8b:f4:6c:a6:49:
a5:ce:b4:58:3b:f5:c7:16:f0:4e:3d:f1:35:58:67:
13:cf:2e:bb:a4:03:cf:2d:dd:ce:22:82:83:52:4f:
75:8e:4f:da:2d:fb:e2:56:10:88:98:d8:28:34:25:
99:17:ba:e6:f8:dc:fa:a8:9e:01:a7:cc:8d:e3:2d:
a1:b3:f4:c2:45:f9:f4:59:99:e0:2c:ab:3f:17:08:
1f:b3:85:7c:97:60:6d:54:6b:1b:9a:09:29:f6:f8:
e8:9d:7b:9d:43:5d:2a:55:f4:d3:18:ce:cb:89:f2:
c1:4e:d5:60:d7:18:47:12:93:ba:2c:67:3e:bd:5d:
0a:9e:a1:93:e7:d1:8c:28:1f:aa:64:b0:65:d2:d1:
9d:ed:2f:06:57:62:44:fd:07:2a:64:51:55:1e:36:
9e:98:1d:54:a0:10:18:69:8f:95:00:cd:90:a5:00:
82:18:fc:b8:f9:6f:4e:0b:b0:ba:6e:7b:f8:85:5c:
79:3c:84:a7:d0:54:6a:a5:3b:2f:11:db:76:c4:14:
18:3f:84:9c:34:8e:1a:21:04:6a:73:3e:e4:31:7c:
58:9d:f3:18:7e:5c:27:fd:c0:f9:ec:b3:04:bb:94:
43:ca:df:a6:36:a3:35:6f:c5:17:47:7e:87:33:07:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:9F:BA:19:E1:CA:07:B2:D5:47:CE:E3:F4:C5:01:E2:60:F4:7E
X509v3 Authority Key Identifier:
keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.238.0/24
Signature Algorithm: sha256WithRSAEncryption
74:84:f5:af:11:31:6e:fe:ea:e1:3c:a2:b5:43:64:ff:94:61:
0a:af:8b:c2:68:0b:1a:e3:27:4b:91:05:e8:d3:1d:f6:95:0d:
ba:36:1c:17:7d:8e:cc:20:9b:87:b8:f1:a3:0a:fc:37:00:0d:
be:2f:17:b8:cf:d1:f9:86:6d:ea:95:ce:8d:40:0b:fe:ff:ea:
da:69:b9:46:83:0a:4c:53:b7:77:38:02:55:52:07:f9:5e:5a:
cc:41:fc:b5:29:f4:a5:f3:b9:99:da:c7:b4:d4:1b:1b:c6:18:
ff:38:9b:dc:c6:2b:63:b1:aa:3c:dc:57:b4:94:e0:52:04:3c:
3e:ac:4d:55:a9:f6:c7:9b:b4:5c:d0:99:2b:f3:e7:0b:57:84:
b5:52:b3:42:1d:52:9f:de:ae:ab:d3:42:f9:ab:ea:78:98:bb:
d4:5e:c6:f4:e0:06:bd:4b:e3:f1:91:d0:c1:01:ea:61:e7:25:
cc:c0:b4:4c:e9:c7:a0:a8:d9:e6:ed:c4:29:f2:46:0e:10:78:
c9:fb:a3:ac:ec:17:b6:52:44:91:13:0e:6a:6e:55:40:33:39:
6d:a5:a0:ff:65:0a:bd:ff:5e:57:25:ee:08:01:35:ab:c6:ab:
6f:46:8d:27:50:d8:39:24:cc:25:78:d1:8b:56:19:04:a9:ea:
f1:5e:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org