Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
File: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (raw, json)
Hash identifier: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=
Subject key identifier: 30:B9:2E:2F:55:A2:29:30:68:18:E2:C8:6D:1B:2F:1E:AB:E9:CF:BB
Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Certificate serial: 032CC3F620EF76D49DB565698B28B6D849623363
Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
Signing time: Thu 01 May 2025 06:00:00 +0000
ROA not before: Thu 01 May 2025 05:55:00 +0000
ROA not after: Thu 30 Apr 2026 06:00:00 +0000
asID: 149897
IP address blocks: 103.187.164.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2c:c3:f6:20:ef:76:d4:9d:b5:65:69:8b:28:b6:d8:49:62:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Validity
Not Before: May 1 05:55:00 2025 GMT
Not After : Apr 30 06:00:00 2026 GMT
Subject: CN=30B92E2F55A229306818E2C86D1B2F1EABE9CFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:b8:2e:fb:ec:0d:03:f9:71:46:72:e6:fd:
bf:92:c6:78:b4:d0:48:65:44:87:c9:d9:07:a1:0d:
99:64:42:af:c7:f9:9f:6c:b7:71:14:29:fc:21:d2:
96:6d:32:28:49:ce:8f:fd:5e:ac:c8:72:65:dc:c8:
95:05:e6:36:09:30:bd:37:ff:77:aa:74:eb:57:e3:
13:8f:30:a7:a1:7a:32:72:2e:32:39:d6:25:86:c6:
57:0f:32:78:c6:2d:a3:59:d3:74:1f:1c:e3:a9:23:
00:33:c1:ef:76:85:b5:df:11:6c:1f:f6:be:10:83:
76:a1:2c:b3:a9:85:9c:1e:bc:1a:19:ea:b8:f9:4f:
4b:cc:3d:6c:ae:0f:70:e6:8a:38:50:4f:3f:a4:d8:
40:63:af:de:5d:b3:2c:fa:ee:df:f9:32:00:86:d6:
51:d8:27:35:e0:bb:9d:b4:c7:24:69:50:5c:47:20:
24:d4:dd:bb:2f:f8:33:e8:58:6e:c9:3c:6d:f2:3c:
dc:ac:42:d7:d8:09:03:dc:66:1a:c3:9c:bb:40:e3:
44:7f:74:28:bb:2e:9e:32:5e:75:dd:38:3a:24:24:
11:9c:53:bd:fe:4d:a5:72:71:74:a1:85:3e:a3:99:
89:cb:4a:27:14:ea:75:31:4a:77:85:36:ac:3b:57:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B9:2E:2F:55:A2:29:30:68:18:E2:C8:6D:1B:2F:1E:AB:E9:CF:BB
X509v3 Authority Key Identifier:
keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.164.0/23
Signature Algorithm: sha256WithRSAEncryption
88:d5:d8:3a:2f:05:df:fa:9b:e4:02:a4:cf:40:84:3a:89:7c:
a8:cd:3d:9d:dd:01:96:8a:ce:02:09:fb:f7:e6:cd:6b:4d:c5:
6e:03:e1:60:8a:49:9e:2a:5a:a9:10:d5:5e:5a:a3:31:ae:44:
1b:7c:32:c1:6c:7e:af:6f:02:53:be:14:9c:39:85:02:70:6b:
8d:65:7e:00:56:04:7f:57:fa:5d:7c:55:69:e6:1c:d6:d3:49:
ae:4f:a2:ce:60:3c:5b:56:52:05:7a:a8:bb:e5:b1:1a:2f:6f:
06:7e:33:cc:98:b8:4e:eb:db:57:5b:f0:3d:c8:67:79:32:2e:
07:be:66:0a:f3:49:bf:a0:80:92:6e:c6:d2:fe:fc:a3:af:0f:
66:71:5b:30:92:56:40:eb:8a:01:55:45:fd:80:9e:41:e8:9b:
18:79:69:88:09:e9:29:db:c0:4c:d4:df:14:24:12:6c:e6:22:
95:fd:05:f0:e0:da:e7:9c:37:8d:11:6d:c9:f4:17:fa:1b:88:
e9:7d:63:e1:2e:bb:58:38:ad:f3:82:04:78:08:fa:ee:24:30:
82:ba:44:44:59:2a:13:40:bf:4d:2d:9b:18:3e:f7:41:88:fc:
c9:e8:3a:1b:88:22:3b:24:69:b1:62:34:70:9f:00:2d:f3:41:
98:d2:e4:ae
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAyzD9iDvdtSdtWVpiyi22EliM2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5
MTYwMDg3RDAeFw0yNTA1MDEwNTU1MDBaFw0yNjA0MzAwNjAwMDBaMDMxMTAvBgNV
BAMTKDMwQjkyRTJGNTVBMjI5MzA2ODE4RTJDODZEMUIyRjFFQUJFOUNGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/7gu++wNA/lxRnLm/b+Sxni0
0EhlRIfJ2QehDZlkQq/H+Z9st3EUKfwh0pZtMihJzo/9XqzIcmXcyJUF5jYJML03
/3eqdOtX4xOPMKehejJyLjI51iWGxlcPMnjGLaNZ03QfHOOpIwAzwe92hbXfEWwf
9r4Qg3ahLLOphZwevBoZ6rj5T0vMPWyuD3DmijhQTz+k2EBjr95dsyz67t/5MgCG
1lHYJzXgu520xyRpUFxHICTU3bsv+DPoWG7JPG3yPNysQtfYCQPcZhrDnLtA40R/
dCi7Lp4yXnXdODokJBGcU73+TaVycXShhT6jmYnLSicU6nUxSneFNqw7VyovAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUMLkuL1WiKTBoGOLIbRsvHqvpz7swHwYDVR0j
BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy
NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw
MDg3RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNGJiNGM4LTZmY2YtNGZmZi1i
ZGNjLWZlMWZjY2VlMTA0NS8wLzMxMzAzMzJlMzEzODM3MmUzMTM2MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzODM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu6QwDQYJ
KoZIhvcNAQELBQADggEBAIjV2DovBd/6m+QCpM9AhDqJfKjNPZ3dAZaKzgIJ+/fm
zWtNxW4D4WCKSZ4qWqkQ1V5aozGuRBt8MsFsfq9vAlO+FJw5hQJwa41lfgBWBH9X
+l18VWnmHNbTSa5Pos5gPFtWUgV6qLvlsRovbwZ+M8yYuE7r21db8D3IZ3kyLge+
ZgrzSb+ggJJuxtL+/KOvD2ZxWzCSVkDrigFVRf2AnkHomxh5aYgJ6SnbwEzU3xQk
EmzmIpX9BfDg2uecN40Rbcn0F/obiOl9Y+Euu1g4rfOCBHgI+u4kMIK6RERZKhNA
v00tmxg+90GI/MnoOhuIIjskabFiNHCfAC3zQZjS5K4=
-----END CERTIFICATE-----
Generated at Wed May 7 10:19:23 2025 by rpki-client