Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3234203d3e20313338383836.roa
File: 3130332e37332e3135382e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier: Z0MxmAjw6YIceUwWEE2wx5DTQNpbMHJHRYUqC3oXGsM=
Subject key identifier: A9:F9:03:53:FD:7F:78:2F:B5:8B:6D:0A:86:D9:8F:CC:8E:08:CA:69
Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial: 2CCE3B54F1B322744FDA699FEE8DC37D14111917
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3234203d3e20313338383836.roa
Signing time: Fri 05 Jan 2024 03:00:01 +0000
ROA not before: Fri 05 Jan 2024 02:55:01 +0000
ROA not after: Fri 03 Jan 2025 03:00:01 +0000
asID: 138886
IP address blocks: 103.73.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ce:3b:54:f1:b3:22:74:4f:da:69:9f:ee:8d:c3:7d:14:11:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
Validity
Not Before: Jan 5 02:55:01 2024 GMT
Not After : Jan 3 03:00:01 2025 GMT
Subject: CN=A9F90353FD7F782FB58B6D0A86D98FCC8E08CA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:44:61:1d:00:a5:d2:98:ff:c5:d4:72:6e:
d9:8e:93:75:65:4a:76:a6:d8:a2:86:63:27:78:b2:
09:3e:8d:79:f3:92:22:6a:66:eb:10:91:b4:32:93:
b9:8a:d0:0f:2f:8f:df:b5:59:13:e7:a6:ee:c9:97:
09:f5:b4:2e:98:e3:d6:e1:50:a0:ed:34:94:9f:06:
ef:6c:19:8b:3d:12:e9:0c:10:5f:75:a2:50:36:97:
2f:ce:ec:80:cf:dd:6a:ed:06:9c:1d:47:f5:72:b9:
e2:8e:ea:a7:ee:64:09:46:31:81:24:6e:e6:12:06:
5d:b7:3a:dd:b2:14:6b:97:67:88:d3:47:6a:6b:ae:
13:a8:aa:24:d6:ee:2c:bf:78:0b:a8:c4:26:5a:4d:
31:01:db:27:03:9d:7f:89:c0:c8:67:04:66:c5:1f:
54:20:bd:76:28:c6:ea:18:73:05:bc:18:35:08:7c:
25:af:c2:94:82:b8:54:b9:9f:a4:2d:23:e4:b9:76:
80:9f:aa:16:c4:8d:71:ed:0e:ed:ec:bc:d1:ce:5c:
bc:2e:b4:4c:fb:e2:c1:64:01:08:1f:ca:77:07:ed:
b3:b8:30:35:1b:b2:39:a0:de:fa:8e:31:7c:53:5f:
d2:8d:d2:81:a1:08:c9:01:61:f9:11:4d:a4:bb:cd:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:03:53:FD:7F:78:2F:B5:8B:6D:0A:86:D9:8F:CC:8E:08:CA:69
X509v3 Authority Key Identifier:
keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32332d3234203d3e20313338383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.158.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:dc:d9:93:e0:94:69:94:2a:9b:b4:70:89:26:31:04:f9:de:
eb:1e:73:01:70:e7:28:f1:50:5d:a7:10:0a:60:ec:42:d2:59:
8d:35:23:a7:3e:63:99:58:9f:fc:69:d9:e8:42:30:d8:ab:84:
31:20:2e:29:26:5d:b3:86:f7:41:b0:b5:22:3b:8c:7a:d1:fc:
8e:93:be:d1:97:1f:95:10:d1:26:ab:8d:8d:98:d4:6c:69:b3:
82:3e:84:35:9d:b9:51:7e:b8:a9:65:55:43:ec:1c:bd:32:46:
1e:b4:93:7f:26:7d:c8:f7:7c:ee:d3:e2:6a:78:93:fb:85:11:
28:fd:38:c1:2a:52:4a:6a:a2:2d:ba:67:f4:df:f0:0c:97:ad:
2a:25:49:0e:22:ba:cd:49:94:05:4e:64:f2:96:66:e6:8a:3a:
b8:67:8b:da:51:7c:41:40:cb:1c:10:4f:4b:d1:e9:84:41:85:
aa:da:bf:bc:47:02:7d:0a:35:02:da:c1:e4:b2:5e:7e:31:f7:
39:01:69:07:44:b7:c3:80:84:af:b2:eb:c9:fe:7a:f2:35:5f:
7a:ef:5e:d4:f3:30:5f:6b:0b:34:50:ff:5f:f9:26:21:ca:aa:
a5:f9:56:66:9d:3a:fd:a7:54:cd:09:50:e6:10:e3:5c:4a:a6:
a4:5f:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:32:28 2025 by rpki-client