Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38332e302f32342d3234203d3e20313338303634.roa
File: 3130332e3137352e38332e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier: HXEjVMpZ+LXFk36DbRqzOw2sIievA7qa+tqhk/aeftc=
Subject key identifier: 49:12:5F:81:0E:24:A6:A4:3D:C7:12:39:5E:78:5D:6A:D1:FC:8C:61
Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Certificate serial: 3D11967BD4D704F19E4C940BB10DA5657AFC995A
Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38332e302f32342d3234203d3e20313338303634.roa
Signing time: Wed 31 May 2023 21:37:26 +0000
ROA not before: Wed 31 May 2023 21:32:26 +0000
ROA not after: Wed 29 May 2024 21:37:26 +0000
asID: 138064
IP address blocks: 103.175.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:11:96:7b:d4:d7:04:f1:9e:4c:94:0b:b1:0d:a5:65:7a:fc:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Validity
Not Before: May 31 21:32:26 2023 GMT
Not After : May 29 21:37:26 2024 GMT
Subject: CN=49125F810E24A6A43DC712395E785D6AD1FC8C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:39:7b:dd:e1:1f:8d:fa:e4:28:51:f9:92:
7d:47:bb:09:e6:78:2e:10:29:84:14:35:cb:45:f8:
ff:dd:a6:05:bc:7c:57:bc:b7:60:bc:33:a4:e2:b9:
40:40:10:ec:c4:c4:1b:be:a2:6e:b0:7d:55:ee:8b:
da:b3:85:cf:db:3b:0b:b5:52:f7:cb:7b:d2:ec:d4:
93:c9:6c:d1:d5:f8:9e:de:e7:7e:6a:d2:ab:7d:f3:
c5:bc:82:f6:1c:03:86:29:02:79:09:2c:b9:bf:36:
17:a3:2f:10:55:84:0f:7d:1b:d0:51:3e:99:68:db:
7d:60:58:03:3c:b3:e6:d4:54:7e:e0:2f:87:62:96:
6e:d8:63:b3:70:af:d1:44:49:2a:c9:6f:8f:b9:9c:
33:7d:a5:be:eb:47:11:21:14:54:6e:b5:d7:96:91:
17:e4:73:24:df:60:a3:bc:8d:d6:cb:b5:19:36:0c:
a5:4f:56:e9:63:a1:7d:12:cc:39:a8:f6:16:d5:fd:
c3:15:8a:46:98:2b:5f:95:54:4d:dc:2f:62:7b:59:
45:aa:b1:ce:85:c9:01:c9:a8:04:9e:b8:d4:41:9a:
db:d6:ce:62:48:59:f2:7a:24:a7:cd:12:12:97:34:
31:4c:01:9e:18:61:5a:55:cd:04:b2:1b:2d:96:95:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:5F:81:0E:24:A6:A4:3D:C7:12:39:5E:78:5D:6A:D1:FC:8C:61
X509v3 Authority Key Identifier:
keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38332e302f32342d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.83.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e7:46:6c:ac:9e:ca:bc:c4:f1:e7:1c:13:98:3f:97:68:59:
41:cc:b5:8c:83:13:b7:f6:6f:8c:ac:89:ed:e5:de:02:d9:3a:
29:f2:b0:c3:78:ad:2d:64:a1:83:22:72:5c:28:b3:dd:ec:9f:
fa:24:e5:14:c1:ca:b1:0d:c0:41:42:fc:68:15:77:f4:d4:9a:
fd:e8:90:66:4c:6b:4c:f1:35:51:85:f5:99:2b:96:ba:4a:2b:
af:b3:5a:6d:42:22:b1:e1:f1:ca:1c:a5:66:70:d8:fd:7e:da:
d4:d8:3e:90:b6:11:c9:21:e3:96:98:79:af:c5:bb:59:c0:97:
e7:af:bb:f5:c0:91:7c:b9:03:4f:68:57:19:8d:fd:1e:67:12:
3b:85:71:b5:d8:7e:7f:ee:3c:30:8b:23:5b:be:85:bb:6a:b3:
f7:a0:c9:be:4a:3f:77:68:a1:e7:2c:6a:e5:8a:9c:c8:0d:a5:
4a:ad:4e:6a:d0:b4:fe:1d:4d:d9:a2:15:7b:81:3d:49:75:39:
fa:82:05:65:45:94:c6:83:08:7f:a2:b6:fd:54:b7:7f:20:5f:
1b:9e:2f:ee:67:35:bc:24:9e:5d:a5:9c:aa:f5:94:e9:9e:31:
01:0e:a4:cc:8d:c7:46:ed:2d:69:1a:4f:33:96:40:20:8d:63:
72:b9:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org