Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3233203d3e20313336303532.roa
File: 3130332e38322e39322e302f32332d3233203d3e20313336303532.roa (raw, json)
Hash identifier: POHTNDPPNQUjMAXPbmGUABMmTgBFLOfYQF91Nw3N1Iw=
Subject key identifier: 3F:32:D5:F8:36:C3:C1:CA:35:84:01:C4:60:CB:DC:49:C7:B0:DC:BE
Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial: 5AE0B90BBE3D600E2ACE232FE3E3FBD2BED4C4DA
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3233203d3e20313336303532.roa
Signing time: Mon 06 Feb 2023 05:43:35 +0000
ROA not before: Mon 06 Feb 2023 05:38:35 +0000
ROA not after: Mon 05 Feb 2024 05:43:35 +0000
asID: 136052
IP address blocks: 103.82.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e0:b9:0b:be:3d:60:0e:2a:ce:23:2f:e3:e3:fb:d2:be:d4:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
Validity
Not Before: Feb 6 05:38:35 2023 GMT
Not After : Feb 5 05:43:35 2024 GMT
Subject: CN=3F32D5F836C3C1CA358401C460CBDC49C7B0DCBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:11:e6:e0:31:6e:c3:b2:29:20:22:2a:3b:
9b:94:54:ff:70:3f:97:91:cc:1c:f1:8c:18:fe:dc:
24:93:4a:5f:32:77:b4:61:0d:f3:1a:b8:3e:a6:7b:
d8:24:04:9f:3e:64:46:b4:8e:a4:c2:29:9c:c8:df:
0c:e2:bd:85:81:44:8b:a9:54:0a:86:02:f2:1d:21:
32:0c:05:ba:b4:68:90:47:6b:34:5e:d4:32:f2:af:
12:50:d9:68:f7:09:c8:80:22:d6:04:f7:f2:6b:b9:
c5:58:34:a0:20:a7:a5:68:50:0a:e4:c9:ce:fe:f5:
3b:e0:d0:03:8a:b9:27:40:e8:7d:ba:29:a2:41:25:
e1:cc:23:9d:a0:54:a8:fa:d8:0c:e4:59:c5:c5:8f:
c6:db:ea:09:4a:0e:5e:7a:b9:48:8f:3d:e8:cd:1b:
f1:01:ea:d4:be:d6:4b:4b:aa:f9:68:2d:42:ac:4f:
58:6f:80:80:b8:44:d5:6e:fc:9c:fd:b5:f4:36:6f:
dd:9a:86:09:6c:82:f2:d6:ce:5b:ec:a3:55:07:40:
96:fd:80:94:30:89:02:c7:14:34:85:29:f7:48:8e:
97:5e:86:b4:04:a6:41:8b:de:87:96:b4:a7:5d:60:
74:fc:1e:a1:e5:16:67:20:0d:be:01:a0:70:f0:1e:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:D5:F8:36:C3:C1:CA:35:84:01:C4:60:CB:DC:49:C7:B0:DC:BE
X509v3 Authority Key Identifier:
keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3233203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:fe:4c:d3:32:94:93:7d:88:b9:0f:d3:bb:07:57:fc:ac:24:
e7:cc:8e:b0:d6:43:77:ae:0b:d4:fe:74:d3:f3:96:22:f7:cc:
c9:b3:af:e0:2e:9d:b7:5a:2a:26:d2:7d:08:9b:91:b1:63:d3:
e4:a3:f8:c2:26:bc:00:21:e7:fd:a9:96:c8:30:9f:04:ba:93:
23:d0:a9:5c:7f:6c:9c:c1:34:b0:3b:33:0e:5f:75:48:75:c0:
53:8c:30:0b:8d:98:c4:fa:00:97:23:08:87:c7:6f:4a:81:e7:
77:80:3b:94:45:3a:20:1c:08:7e:41:7c:0b:d1:75:e2:02:f1:
dd:5f:d1:fb:a3:08:3a:3c:a8:0a:ff:03:8a:41:68:6a:f5:9a:
d7:4d:26:44:28:28:95:7f:ea:b7:a2:ae:da:10:be:18:26:6f:
ee:c9:d1:29:4d:57:1e:ec:42:2a:ea:cd:11:8a:46:b0:15:3c:
11:eb:73:90:4e:21:6f:de:9f:c6:6c:25:37:1e:31:8c:8e:06:
0e:66:6d:86:4f:13:79:97:31:de:60:16:a9:45:0d:75:15:76:
18:97:34:19:e3:28:55:9b:fd:2e:f1:8b:ad:3d:c2:70:c4:46:
d0:d2:50:36:f2:f9:0d:28:7d:63:f5:ed:e1:27:15:cc:05:05:
32:f2:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org