Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa
File: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (raw, json)
Hash identifier: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=
Subject key identifier: 83:B8:35:01:D9:C4:2B:1D:09:54:C9:DA:4A:96:5E:66:B6:44:E1:DE
Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Certificate serial: 21EE904AA7909B8D2B16AADFCB0E9FF540F1118F
Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa
Signing time: Thu 01 May 2025 06:00:00 +0000
ROA not before: Thu 01 May 2025 05:55:00 +0000
ROA not after: Thu 30 Apr 2026 06:00:00 +0000
asID: 149897
IP address blocks: 103.187.165.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:90:4a:a7:90:9b:8d:2b:16:aa:df:cb:0e:9f:f5:40:f1:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Validity
Not Before: May 1 05:55:00 2025 GMT
Not After : Apr 30 06:00:00 2026 GMT
Subject: CN=83B83501D9C42B1D0954C9DA4A965E66B644E1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:5a:7e:58:43:15:66:05:f6:a0:e9:25:38:
06:c7:34:c2:08:40:17:15:f3:da:ed:8e:1b:3a:19:
14:18:0f:a3:77:1e:a7:ff:61:01:fc:89:10:23:56:
26:4b:1e:1f:b0:54:30:64:1f:3d:5b:72:06:eb:b0:
30:12:34:c9:e4:05:db:51:21:c9:34:65:57:af:6c:
15:0a:fd:03:17:e6:4d:e0:1e:51:af:8b:d0:8d:2b:
2c:81:1d:bb:2d:45:3e:91:ce:c3:9f:2b:eb:37:05:
36:f6:59:1c:e4:af:3e:55:29:8e:a9:ae:93:89:78:
0b:b4:2a:2e:2c:f8:67:dd:50:b0:19:03:de:c4:fe:
15:4d:6d:98:7d:49:4e:f6:4f:2a:a6:07:9a:6c:53:
6f:7d:6b:ee:d8:7e:2f:25:21:08:3a:dc:03:2a:38:
d9:97:87:91:ae:42:00:9a:b1:c0:b7:51:e7:80:40:
47:98:79:6d:fe:17:13:04:44:f4:62:f7:4f:ce:25:
df:a7:cd:99:60:a8:7e:ae:f8:ec:e1:0b:85:df:a6:
84:6e:a2:db:3c:b4:88:87:55:5e:cb:86:bf:ef:04:
a8:40:a4:08:0f:43:7a:b8:a5:72:ff:fe:ef:55:ef:
3b:c2:a6:5d:c6:4b:d7:b2:48:cd:a8:30:93:b2:4f:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:35:01:D9:C4:2B:1D:09:54:C9:DA:4A:96:5E:66:B6:44:E1:DE
X509v3 Authority Key Identifier:
keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.165.0/24
Signature Algorithm: sha256WithRSAEncryption
50:65:69:0f:5c:e2:11:d8:10:bf:b7:fa:fd:fb:a6:d4:c3:9f:
00:2e:6e:97:1b:62:b2:a6:18:80:f5:28:a5:e6:2d:61:1d:8d:
6e:89:15:69:e7:bc:66:1e:f4:af:d1:64:90:ea:bd:e7:a6:6a:
c3:33:e7:c8:b7:5c:33:59:15:93:2b:9c:95:ec:70:7d:80:c9:
73:87:d4:15:1f:93:65:79:92:2b:bd:e9:a4:27:1e:84:29:b6:
90:d5:c9:48:ee:2a:29:d6:d2:47:59:78:59:d3:f0:49:5b:db:
a9:07:4e:9c:56:da:dd:bd:ea:32:35:fd:08:69:60:0b:08:f1:
1e:15:a0:b6:fa:68:e8:9b:46:05:41:14:af:c3:9b:8e:2b:59:
7a:54:9c:f8:c7:83:0c:9a:11:74:9e:6a:03:e1:c0:7d:88:da:
7a:3c:27:d2:44:45:28:3a:2d:e8:c1:79:c9:42:ed:1d:66:11:
7d:99:33:cd:9a:50:09:c6:d8:7f:ff:fd:6f:14:26:d5:88:49:
37:6a:74:79:d4:d2:c5:03:38:78:4f:8f:fb:34:5e:ca:ee:26:
d4:66:9f:33:d4:b9:30:75:c7:f0:4e:5a:eb:dd:29:17:c8:e2:
b6:55:72:cc:29:37:c0:b9:c8:38:63:92:7e:26:da:21:54:04:
40:d4:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:03:03 2025 by rpki-client