Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3233203d3e20313338383836.roa
File: 3130332e37332e3135382e302f32332d3233203d3e20313338383836.roa (raw, json)
Hash identifier: 4L4JMiYbVOQ2+XG0knRl3wgaCDyOrDsFMAp7c2n25H8=
Subject key identifier: 86:86:BE:6A:6D:03:E3:89:DA:A7:3E:C5:A9:F2:E1:E2:C6:82:09:3D
Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial: 7C45B69CB793878646470F268C0221B248BBC203
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3233203d3e20313338383836.roa
Signing time: Sun 29 Jan 2023 10:48:48 +0000
ROA not before: Sun 29 Jan 2023 10:43:48 +0000
ROA not after: Sun 28 Jan 2024 10:48:48 +0000
asID: 138886
IP address blocks: 103.73.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:45:b6:9c:b7:93:87:86:46:47:0f:26:8c:02:21:b2:48:bb:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
Validity
Not Before: Jan 29 10:43:48 2023 GMT
Not After : Jan 28 10:48:48 2024 GMT
Subject: CN=8686BE6A6D03E389DAA73EC5A9F2E1E2C682093D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:01:34:5c:ca:02:0f:a7:30:a8:cb:9c:59:
b1:d0:5f:9f:35:ec:de:a8:9b:42:69:86:fb:68:8a:
56:a8:d0:b5:e4:ab:ae:a5:2d:56:48:4c:70:17:b5:
60:82:44:f5:f1:f1:79:77:ff:14:55:64:f6:13:44:
a1:43:52:c5:5e:7a:19:8a:97:d0:b0:06:59:67:43:
a4:8f:9b:f1:df:d3:6f:f4:6a:48:cc:e9:30:1a:95:
3e:3a:99:3f:2d:0b:22:02:03:de:d7:cd:e7:2f:f7:
e5:0e:68:77:68:cd:3e:39:57:eb:92:df:f3:92:2b:
00:af:c7:c2:32:9b:fd:92:7e:98:dc:e7:7f:bd:bf:
b1:77:d0:42:2f:e7:78:c2:dc:27:d2:31:32:49:2a:
aa:c0:f6:b0:58:4a:46:5d:95:1d:45:d8:b6:a0:d5:
e3:fd:10:ac:14:d4:85:c5:20:b8:4a:88:09:70:35:
02:4c:9f:b4:aa:44:af:95:e3:7e:eb:db:42:64:8f:
a2:dc:aa:47:1a:2f:10:ed:51:68:8b:3d:c8:3d:8e:
91:fc:98:6d:2a:b2:1d:56:5f:d5:6c:cf:a1:fb:00:
d1:8b:5f:5d:bc:3c:ae:73:8f:41:fb:2f:be:48:7e:
81:04:61:95:a3:fe:7e:4f:96:94:cf:9e:df:17:40:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:BE:6A:6D:03:E3:89:DA:A7:3E:C5:A9:F2:E1:E2:C6:82:09:3D
X509v3 Authority Key Identifier:
keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3233203d3e20313338383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.158.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a9:db:c4:54:72:84:17:ca:b6:7c:e2:26:f3:63:50:2d:e1:
65:c5:92:bc:0b:f7:44:d4:7e:c1:9b:ce:fe:c9:05:d1:36:c8:
e0:de:47:27:80:05:6f:41:93:ee:e4:2c:a2:78:2f:c5:db:ec:
9b:35:94:60:ed:87:58:af:86:56:8c:c1:12:11:fa:02:f7:a1:
c1:37:51:2d:86:61:d3:2b:93:24:31:cd:f2:b1:03:e2:65:a0:
bd:f7:d4:0e:15:f6:24:71:92:1a:f6:66:f6:69:12:e3:7c:92:
6f:ff:09:5c:0e:3f:e9:2c:bc:8a:73:4f:7c:c0:f6:b7:e4:a9:
97:5e:23:dd:3b:ae:6e:15:b0:cc:8b:dd:b0:4c:79:39:c2:e5:
ef:c7:49:ca:69:4e:20:8f:8c:94:14:0f:8f:79:7e:e8:8c:a1:
5e:86:70:7b:62:dc:fa:36:3f:c9:c5:d0:c6:2e:91:e8:73:28:
c9:8b:e4:fb:f6:46:ae:ec:73:7c:b1:b6:1a:87:f0:f2:4d:30:
2f:92:d4:12:10:06:bf:16:31:20:62:cf:39:9a:e9:32:ac:68:
08:6f:46:05:c2:3a:0e:7d:bc:c3:8d:de:3f:6d:cf:d7:e2:40:
4f:43:5b:69:42:0b:a3:16:94:89:ac:b0:bb:2d:bc:cf:f0:03:
96:f3:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:25 2025 by rpki-client