Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32332d3233203d3e2039343232.roa
File: 3130332e3138342e31362e302f32332d3233203d3e2039343232.roa (raw, json)
Hash identifier: LJqN0lyaX/hK8TsKtf0QN4Awn6UJD1HAGpSAESelXlc=
Subject key identifier: 2D:13:A7:50:B4:88:98:EF:C4:9F:4B:86:93:25:15:92:C9:E6:C4:57
Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial: 0E278A0F899A5DAD333D1B9CE91225B2EBCF1681
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32332d3233203d3e2039343232.roa
Signing time: Wed 23 Mar 2022 13:39:06 +0000
ROA not before: Wed 23 Mar 2022 13:34:06 +0000
ROA not after: Wed 22 Mar 2023 13:39:06 +0000
asID: 9422
IP address blocks: 103.184.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:27:8a:0f:89:9a:5d:ad:33:3d:1b:9c:e9:12:25:b2:eb:cf:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Validity
Not Before: Mar 23 13:34:06 2022 GMT
Not After : Mar 22 13:39:06 2023 GMT
Subject: CN=2D13A750B48898EFC49F4B8693251592C9E6C457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:3d:3e:11:4b:b5:e4:d7:49:01:7a:d2:e8:
a8:61:1c:8e:1e:34:59:7e:fa:7c:3b:e2:50:2c:ec:
35:27:d9:00:f3:15:75:02:b3:4c:32:d5:20:21:2c:
89:af:2e:0d:8c:85:d4:3f:59:5a:30:5b:92:62:11:
f2:8a:44:be:9a:19:f6:07:8d:c2:fa:a6:3a:70:95:
ac:dd:ce:bc:cd:a9:77:a6:db:50:29:d0:12:4e:b0:
07:52:d8:ff:43:54:6b:df:42:92:36:16:16:15:4a:
2f:98:1c:d8:2f:4b:b4:41:e9:9a:b3:3a:8b:4b:b6:
6d:78:61:32:3d:88:26:b1:21:ea:12:de:a8:16:e8:
4e:26:01:0a:98:4e:cf:cf:41:cd:3b:74:6c:66:4a:
cb:56:b7:17:c4:88:5e:92:dd:e4:92:56:fc:78:c0:
05:0d:1a:91:e0:13:15:13:b7:64:28:b0:30:3d:2c:
1d:5d:42:66:98:1d:32:d5:8e:a8:7f:9a:32:7f:1f:
ea:17:96:cb:d6:e9:09:8e:b1:91:e2:71:c1:3a:f0:
bd:e0:71:dd:69:30:89:97:58:be:12:f2:6b:b2:5c:
cd:c2:c7:63:ac:92:ed:fe:cc:8f:0e:f7:f4:72:e7:
3d:9c:c0:75:70:7f:3a:ca:8b:22:87:05:24:82:93:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:A7:50:B4:88:98:EF:C4:9F:4B:86:93:25:15:92:C9:E6:C4:57
X509v3 Authority Key Identifier:
keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32332d3233203d3e2039343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.16.0/23
Signature Algorithm: sha256WithRSAEncryption
30:39:02:cd:dc:3e:2b:61:29:4d:32:ac:4a:ce:67:cb:89:77:
0b:14:56:c0:2c:14:f7:ba:aa:fc:b5:fe:34:e7:95:29:e7:6e:
d4:78:a0:8b:86:64:ee:40:cf:9e:30:03:86:11:1f:c6:01:8e:
56:ce:6b:6a:e6:1d:f2:f9:d8:35:3a:f1:f5:55:ce:ea:0d:8e:
4f:46:4d:97:94:30:b8:11:58:e3:ae:90:85:1d:d6:53:76:fd:
65:f5:df:f0:52:45:c1:33:e2:2f:f9:00:fe:5d:66:38:d7:89:
cd:96:46:ab:9a:23:80:51:c1:b6:f1:7d:7e:a2:60:2c:f2:cf:
6d:10:72:29:d4:dc:a8:fa:6b:4a:83:57:aa:44:25:48:b6:96:
17:bc:9d:4a:10:c9:c0:7c:ec:1b:e5:e8:c5:03:cd:dc:f5:61:
77:76:0c:db:e1:d0:90:c4:46:31:c5:c4:4c:14:6f:a0:08:e2:
ca:0b:37:d7:11:10:19:6d:60:eb:0a:77:fd:0a:64:20:40:46:
36:2e:63:94:e4:61:3a:cb:e8:4d:6e:6c:56:14:6b:3f:81:70:
e9:9d:1e:d6:78:a2:6a:c8:ae:b0:3d:4e:85:4b:c8:e6:2f:0a:
22:61:0c:97:3a:d9:ab:a6:98:93:7b:ce:29:00:ee:f0:1f:49:
33:e4:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:26:50 2025 by rpki-client