Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
File: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (raw, json)
Hash identifier: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=
Subject key identifier: D6:99:53:63:5E:65:43:67:B8:8D:0E:39:4A:43:BC:E6:E3:EE:E3:C1
Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial: 46E1D5007AAEDDDA4AB4C81116C0A85DD6D3A93B
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
Signing time: Tue 11 Feb 2025 09:00:58 +0000
ROA not before: Tue 11 Feb 2025 08:55:58 +0000
ROA not after: Tue 10 Feb 2026 09:00:58 +0000
asID: 59278
IP address blocks: 103.184.64.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e1:d5:00:7a:ae:dd:da:4a:b4:c8:11:16:c0:a8:5d:d6:d3:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
Validity
Not Before: Feb 11 08:55:58 2025 GMT
Not After : Feb 10 09:00:58 2026 GMT
Subject: CN=D69953635E654367B88D0E394A43BCE6E3EEE3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:20:97:a2:81:d9:66:db:97:22:fe:06:5b:
51:68:b1:8a:d3:3e:f5:09:c8:4d:20:ed:dd:da:d4:
65:bd:50:8a:79:d9:ec:1e:ab:14:92:4b:dc:9f:74:
8c:7a:d9:5f:df:1f:17:ba:c0:83:01:5e:df:40:f3:
88:b8:10:dd:3c:c2:17:74:6d:1f:c4:94:ab:5b:db:
0b:57:ab:1f:b4:85:ea:34:61:1b:25:04:45:d2:83:
33:2d:f4:32:9f:e3:ac:97:68:73:b5:8d:06:35:51:
95:fa:b5:32:c4:8b:99:db:ec:16:e4:c2:5a:e5:1c:
ee:09:6a:63:eb:36:de:7a:92:d1:1d:3d:59:a3:4b:
14:9a:94:7e:95:25:13:5b:12:19:af:88:e0:91:f9:
04:01:89:b8:28:db:6f:c6:7d:70:d1:db:65:3e:35:
3e:c4:3a:4d:43:af:7f:2a:a9:ca:ac:08:b7:d4:52:
d1:35:42:57:f4:07:c0:77:1e:16:54:6f:8a:33:ac:
d3:85:e8:2a:35:43:b2:51:68:6a:1b:98:9a:bc:9b:
a2:c7:3c:53:29:59:37:15:d7:40:c1:9f:da:fc:6a:
14:39:79:07:e2:b8:28:55:9e:34:e9:a5:17:ba:cd:
5a:5d:c0:6e:14:be:42:b4:69:bc:e4:2b:07:3d:95:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:53:63:5E:65:43:67:B8:8D:0E:39:4A:43:BC:E6:E3:EE:E3:C1
X509v3 Authority Key Identifier:
keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.64.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:bb:2e:04:21:6b:75:a6:c3:9c:e9:c5:38:37:4a:00:a8:64:
bd:26:e5:24:90:d6:fe:82:48:43:30:ad:11:a1:4d:53:d1:28:
da:c2:4d:2a:eb:20:b3:d3:fb:82:f9:5b:70:f9:16:d2:96:3c:
4b:2d:af:8f:79:67:eb:22:ee:c1:c9:41:1c:44:5d:f2:92:76:
26:ca:06:92:b3:26:62:8e:2e:ab:2f:b9:fd:06:30:5a:24:54:
0e:ed:65:b3:2d:16:5e:ac:68:25:d8:6d:82:3e:c2:f3:14:15:
44:a5:90:31:bb:89:35:93:d4:7d:ed:32:4f:6f:7c:04:3b:ae:
b7:88:b8:7c:6f:c6:db:57:66:81:7c:76:1f:1d:32:99:57:74:
6a:79:39:af:cd:c6:f0:7c:5a:a4:69:1b:7f:75:e4:30:56:54:
2d:bb:e1:30:30:1c:52:57:45:6f:03:7c:30:9b:a5:8a:d5:9a:
cb:5b:cb:09:22:6e:3a:86:f1:21:58:28:5d:bf:9c:24:64:a3:
e7:26:24:15:32:22:6d:65:1f:d5:d1:2e:06:11:2d:8b:b1:42:
3e:1d:5e:0e:49:8c:fa:1e:47:13:90:63:92:6e:68:ef:a0:2a:
7c:49:da:c6:be:4b:1b:df:60:a3:a7:c6:35:75:c4:43:85:0f:
b1:30:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:14:01 2025 by rpki-client