Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3233203d3e20313339333737.roa
File: 3130332e3134322e3139342e302f32332d3233203d3e20313339333737.roa (raw, json)
Hash identifier: YXmGusI0ZaTyMxbpWpAXFRz2jLJ9p2X/E6AFiZEouf0=
Subject key identifier: AC:B0:96:E4:4E:62:82:8A:F5:B2:DB:7C:76:A3:96:07:55:F3:55:84
Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Certificate serial: 5010898CA647AFCB6A15A456BB654594DAE583E1
Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3233203d3e20313339333737.roa
Signing time: Thu 16 Jun 2022 03:15:23 +0000
ROA not before: Thu 16 Jun 2022 03:10:23 +0000
ROA not after: Thu 15 Jun 2023 03:15:23 +0000
asID: 139377
IP address blocks: 103.142.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:10:89:8c:a6:47:af:cb:6a:15:a4:56:bb:65:45:94:da:e5:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Validity
Not Before: Jun 16 03:10:23 2022 GMT
Not After : Jun 15 03:15:23 2023 GMT
Subject: CN=ACB096E44E62828AF5B2DB7C76A3960755F35584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:04:db:e7:ad:64:97:bb:02:e0:73:ba:32:
08:f3:8f:18:17:82:94:d0:da:dd:93:b0:90:74:d7:
20:ce:c2:10:01:90:fe:d8:02:65:88:4b:43:ec:99:
22:46:c6:1e:04:1e:87:a7:44:e1:35:17:12:f5:1d:
f4:17:c7:21:f4:46:c2:6e:85:b6:72:35:01:d7:c8:
6d:50:35:4d:3a:e7:a9:ce:dc:53:55:c2:93:0b:ad:
12:8e:e1:66:cc:37:3f:c5:95:c6:10:8f:24:26:ac:
20:af:da:e7:81:08:f1:6b:9b:27:39:cb:a3:eb:7b:
3f:f2:9f:a9:0f:2c:47:a2:f8:74:e1:37:22:8d:aa:
39:f8:9f:a2:95:b6:1c:9a:a0:01:ed:1b:ca:c2:41:
a9:93:78:ac:87:33:ce:97:61:9a:e7:04:c1:de:dc:
34:da:48:21:d4:ef:ce:66:b4:31:83:00:76:76:d5:
e5:ad:9c:38:78:d6:51:1b:81:5c:e8:8f:b1:0b:09:
11:89:6e:76:45:bf:57:15:44:40:f2:3d:25:4e:fc:
a8:af:b3:08:b0:8a:2c:25:df:4d:cf:04:63:14:19:
b4:bd:8a:02:4c:40:65:c3:57:52:5f:68:6c:b7:e8:
bb:47:14:f9:59:4e:18:65:98:d3:41:94:30:93:71:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:96:E4:4E:62:82:8A:F5:B2:DB:7C:76:A3:96:07:55:F3:55:84
X509v3 Authority Key Identifier:
keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3233203d3e20313339333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.194.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:77:d4:a4:1e:90:46:04:af:35:94:e1:8d:fb:ec:2c:2c:c1:
07:ef:0f:1b:e4:cc:a9:d1:b4:dc:29:aa:60:87:a9:c3:25:e2:
84:a9:fa:b2:1d:af:dc:40:47:4d:e7:f3:db:75:76:4b:91:c1:
db:f0:b9:d6:8e:98:2f:fa:c9:a9:a6:70:03:bc:e0:f2:df:50:
82:e8:a9:bd:fe:12:20:4a:75:0f:b0:ee:88:8c:46:26:7a:1f:
7e:89:c9:fe:36:e3:ba:2f:c4:d4:82:b3:25:a3:8b:f8:cc:5d:
e0:23:6d:a7:40:cd:29:de:d1:ae:60:ce:a6:a7:14:6e:06:12:
50:4c:96:7c:92:23:f4:de:b7:01:5a:a0:30:83:4d:64:57:78:
6b:e1:7e:0b:06:29:74:0a:e0:fa:e7:f9:72:e8:9d:cb:9b:52:
c8:88:7d:75:27:61:e8:d9:33:e3:0b:4d:60:13:55:51:c5:53:
d6:cf:9a:bc:aa:9a:70:c5:ac:77:26:d0:6f:b9:bd:10:81:70:
47:15:d0:3f:2b:ba:7f:85:69:a9:b1:7d:6f:c4:a2:85:22:be:
3d:f1:a4:e3:42:b0:60:c5:c4:65:72:0f:bf:ab:83:2e:63:c5:
40:03:cd:7d:c9:95:98:56:8d:14:2b:37:fa:85:30:b2:be:66:
c7:ab:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org