Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3234203d3e20313339333737.roa
File: 3130332e3134322e3139342e302f32332d3234203d3e20313339333737.roa (raw, json)
Hash identifier: TtssfQvKJoGfxvMH+a8BQTcxTEJkWsSvrGKnKGexFX8=
Subject key identifier: 27:A4:CC:10:23:10:19:2F:42:7D:92:E9:B0:71:0C:91:D4:D4:14:1A
Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Certificate serial: 02618B29004D67B8112758F97EDFEB100981D371
Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3234203d3e20313339333737.roa
Signing time: Tue 14 Feb 2023 19:17:00 +0000
ROA not before: Tue 14 Feb 2023 19:12:00 +0000
ROA not after: Tue 13 Feb 2024 19:17:00 +0000
asID: 139377
IP address blocks: 103.142.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:61:8b:29:00:4d:67:b8:11:27:58:f9:7e:df:eb:10:09:81:d3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Validity
Not Before: Feb 14 19:12:00 2023 GMT
Not After : Feb 13 19:17:00 2024 GMT
Subject: CN=27A4CC102310192F427D92E9B0710C91D4D4141A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:9d:9d:52:19:a0:d2:f9:e9:f2:ac:34:58:
fc:d9:17:42:2a:dc:cc:27:b6:45:d3:79:7e:0a:5b:
a4:b9:26:6c:e2:50:db:62:48:df:35:c8:f7:52:3d:
de:ca:20:5c:fe:46:a4:b7:f3:d8:e7:bd:3d:ad:6a:
e8:55:3d:b5:c1:e0:a4:e8:10:5f:92:e9:24:5f:79:
a3:a8:6a:aa:5a:39:ca:f6:ba:0b:8e:ef:76:bb:4f:
3c:0e:9b:74:0d:5c:fa:5c:cb:13:e9:1f:8e:ab:1a:
04:54:ad:e4:33:5c:f6:bb:00:8e:c2:67:50:75:8c:
cc:dc:1a:1b:dd:4c:aa:98:0b:6b:5c:dc:e3:7e:4f:
8e:57:46:f9:a7:d7:39:bc:16:3e:3a:be:51:25:55:
25:d5:80:8b:fd:82:54:5c:7c:2e:69:d7:94:01:02:
b4:c5:39:3c:bb:e3:2f:e1:ab:71:c0:45:83:f1:ec:
0d:9d:bd:c7:83:4f:ba:61:ca:aa:89:2d:c2:32:25:
96:2b:49:79:af:99:54:02:54:20:22:8c:ff:5e:85:
aa:b0:d2:7b:d0:4e:2c:03:44:9a:23:63:3d:8e:ef:
6b:df:55:83:18:fe:dd:83:ec:b3:5f:0b:80:43:8a:
da:85:82:14:ff:f9:0b:0c:ae:46:a0:f5:4b:7a:0b:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:CC:10:23:10:19:2F:42:7D:92:E9:B0:71:0C:91:D4:D4:14:1A
X509v3 Authority Key Identifier:
keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32332d3234203d3e20313339333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.194.0/23
Signature Algorithm: sha256WithRSAEncryption
06:cf:32:d2:2e:b4:be:45:7e:40:7f:7a:44:bb:b9:ca:5d:08:
22:ea:a5:20:7a:92:ad:97:7d:a6:da:48:6c:36:6b:fc:9b:15:
73:6e:aa:96:54:e7:bf:af:ec:ef:93:d3:45:95:9b:1a:4d:ba:
79:69:6c:d0:7d:9b:25:ef:27:33:5b:50:e2:17:b1:ed:a0:b9:
0d:2e:1a:c2:a9:51:7f:12:bb:4a:b1:19:68:4e:10:43:44:76:
1f:d5:86:2b:80:12:60:0d:4f:bc:62:39:e4:6f:e1:67:d0:99:
73:d4:4d:94:9f:91:ea:8f:1b:81:89:99:f3:b5:d7:5a:8c:df:
7e:9e:ea:a3:8e:6e:c4:fb:75:82:42:96:17:5a:a2:05:0d:cf:
47:1d:01:69:d5:a6:41:b8:51:30:35:02:6f:d8:b2:89:36:2e:
8a:7b:80:e3:77:07:cb:fb:f4:c4:e3:86:89:75:03:a1:c4:94:
79:5d:cf:ba:5b:f9:89:d6:a1:2e:64:6e:25:7d:43:65:66:b1:
59:e3:b8:99:d0:eb:19:58:80:9f:cc:18:06:d7:d2:8e:a4:c2:
01:f2:75:a9:7a:7c:96:06:04:de:db:50:a6:6e:2b:54:9a:6e:
25:9a:91:a8:6d:cf:5d:f8:49:a8:84:e5:68:0b:50:4c:53:8d:
86:20:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org