Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232322e302f32342d3234203d3e203137383835.roa
File: 3130332e332e3232322e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: xvM45eQT4oo2vZf023FqoEjNewWgi0/NK4pV/OMkSiQ=
Subject key identifier: 94:97:53:A7:19:39:F4:55:7D:55:57:AC:B8:CD:9F:2E:73:BF:09:5C
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6586047E9DD4D0994CEE6512AFEDDE1B84F84EE2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232322e302f32342d3234203d3e203137383835.roa
Signing time: Fri 25 Mar 2022 06:00:00 +0000
ROA not before: Fri 25 Mar 2022 05:55:00 +0000
ROA not after: Fri 24 Mar 2023 06:00:00 +0000
asID: 17885
IP address blocks: 103.3.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:86:04:7e:9d:d4:d0:99:4c:ee:65:12:af:ed:de:1b:84:f8:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 25 05:55:00 2022 GMT
Not After : Mar 24 06:00:00 2023 GMT
Subject: CN=949753A71939F4557D5557ACB8CD9F2E73BF095C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:67:3e:82:7b:54:d6:a9:63:8f:0d:29:af:
c2:9c:b2:ff:7c:32:66:b9:a5:dd:21:7d:78:f1:8b:
32:fa:4a:e1:b1:c8:b1:ba:23:52:0e:6f:1a:c6:ad:
ae:88:c0:e6:9c:69:cb:ec:ab:05:10:fb:32:b2:fe:
16:bb:ea:5c:fc:e8:c6:9c:aa:9e:8b:9a:63:ee:c7:
01:e2:db:02:8d:ce:e0:b6:ed:e0:3d:d2:5b:af:1a:
8a:ea:46:1d:df:3a:98:a5:c8:6f:dd:0d:5b:fd:66:
5f:20:08:09:cc:4d:a9:d0:d7:b8:0f:8e:d3:c0:6f:
c8:46:3d:35:8a:47:36:94:64:90:42:c1:63:95:ae:
fb:3c:fe:57:09:49:e6:42:8f:60:5b:b4:5a:c8:f8:
b2:7c:c8:fc:9f:4b:74:41:f4:7f:5b:20:90:5c:8c:
96:30:21:73:85:a7:cf:02:36:b3:45:1a:c7:bb:28:
54:61:7e:2c:2d:62:3b:90:4b:b7:ce:5c:ff:7e:f4:
6f:b3:ff:79:db:e7:a2:c4:a1:ca:b7:db:96:0c:76:
fc:3f:8c:42:c2:11:e6:35:09:dd:53:ae:39:82:4c:
f8:58:77:98:4d:dd:c4:8a:d4:93:97:25:96:30:78:
45:92:59:1d:44:c6:22:2c:b6:6f:32:36:de:ea:5e:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:53:A7:19:39:F4:55:7D:55:57:AC:B8:CD:9F:2E:73:BF:09:5C
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232322e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:75:27:59:be:a8:07:9a:43:83:87:dd:c7:c3:93:14:a0:85:
44:05:05:a0:f6:6f:f6:e9:b4:ab:86:7c:93:80:bd:26:51:4b:
eb:24:ae:e8:37:73:77:e1:b7:98:83:02:3e:7e:be:f9:fa:6b:
f7:8e:bf:a0:be:98:95:5f:22:81:69:49:8d:27:37:75:2f:da:
5f:95:08:56:1f:94:91:8d:04:4a:7d:08:55:77:04:d0:80:fe:
d6:c9:71:b1:fb:5a:cb:68:0c:9e:3e:0d:a8:dc:eb:90:b7:96:
dd:6c:13:ae:da:27:0c:96:2c:4a:63:69:f4:bd:f9:a8:92:5c:
76:12:e3:c6:da:75:7f:07:3b:9e:d2:04:a3:dd:85:d0:74:c6:
45:c0:42:ce:c1:4d:3b:63:5d:0b:35:0e:6d:05:1a:26:7b:29:
19:54:1d:ee:aa:fe:dc:23:53:f5:40:9e:49:44:fb:58:35:17:
3c:a1:52:5e:1a:f1:9e:68:1e:68:3a:03:0c:f6:af:e3:d1:69:
f7:9b:51:48:33:b0:0f:79:7a:b6:37:da:d9:af:30:e4:b4:52:
9b:59:c0:bb:25:e5:9d:43:bc:cd:1f:9c:fb:50:b3:24:35:a4:
b0:fb:6a:86:03:45:1b:1c:33:84:0e:86:9d:2d:c4:1b:c2:73:
6f:6f:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net