Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3233203d3e20313339393531.roa
File: 3130332e37392e3132382e302f32332d3233203d3e20313339393531.roa (raw, json)
Hash identifier: R5Ctiw4O3ueVK7ne/rsblWeuxqd60P35HuXFyXxvNf0=
Subject key identifier: CA:05:FD:38:E2:71:E9:66:45:33:CD:48:78:ED:95:DC:8E:EF:F1:91
Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial: 5B30C927453DCA14B4F99C54E6F86707357DBF34
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3233203d3e20313339393531.roa
Signing time: Wed 31 May 2023 08:43:24 +0000
ROA not before: Wed 31 May 2023 08:38:24 +0000
ROA not after: Wed 29 May 2024 08:43:24 +0000
asID: 139951
IP address blocks: 103.79.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:30:c9:27:45:3d:ca:14:b4:f9:9c:54:e6:f8:67:07:35:7d:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Validity
Not Before: May 31 08:38:24 2023 GMT
Not After : May 29 08:43:24 2024 GMT
Subject: CN=CA05FD38E271E9664533CD4878ED95DC8EEFF191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:d7:4a:96:e3:3d:3b:6a:9c:25:ee:73:ac:
68:63:ac:30:9d:0b:04:1f:42:61:d2:99:55:37:b6:
62:12:e9:03:e3:9e:bd:85:30:e0:b8:36:1d:c9:bb:
bc:e8:be:5f:6b:de:a7:1c:83:a2:d9:d2:79:eb:57:
12:9c:08:01:5d:6a:41:4d:69:bc:a2:cc:6c:03:8c:
c2:a0:49:ce:fa:3d:27:7a:cc:2c:2e:0a:fc:66:66:
ed:4c:d5:79:49:17:a6:da:a8:4a:dc:c4:a6:de:09:
5d:fb:3c:10:20:2d:99:99:b4:5d:bb:1b:12:99:11:
95:83:12:9a:83:92:f9:b7:b3:b5:7b:06:e6:be:aa:
c3:18:61:d4:29:0a:fc:0b:0c:d2:42:4b:48:8e:11:
f7:fb:e6:ee:8c:ff:be:b7:81:2a:46:5e:f1:cf:63:
fd:ff:b0:12:1a:5c:2f:06:49:fe:25:89:22:35:ed:
91:23:99:a2:6e:f9:92:ab:c3:cf:38:34:6a:f3:b4:
1c:c3:0f:12:33:e7:85:0e:ad:13:e7:9d:fa:66:a7:
7a:f7:d3:30:9a:f8:08:04:a3:fb:40:a7:f1:34:01:
73:a9:36:f4:a4:96:02:e5:7b:44:73:d0:18:12:cd:
ca:81:ac:c4:55:cd:66:78:6d:88:cd:59:70:82:66:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:FD:38:E2:71:E9:66:45:33:CD:48:78:ED:95:DC:8E:EF:F1:91
X509v3 Authority Key Identifier:
keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3233203d3e20313339393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.128.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f7:71:ab:ac:6e:8a:9d:f4:82:23:0a:1f:3a:75:d9:ab:06:
b4:52:21:40:a3:60:10:dd:2a:63:38:d5:2b:86:f5:16:f0:cc:
f9:2b:62:61:ba:82:aa:a8:e9:85:0e:77:11:9a:22:57:e9:43:
18:a7:dc:d0:9c:39:46:c8:51:4f:a7:1d:f7:f9:1d:16:9f:9c:
e8:8e:c2:00:aa:2b:d3:02:14:4a:b2:7a:cb:f5:24:1c:a0:df:
5f:ba:c3:5b:06:92:af:5c:29:7b:ff:b1:07:89:e0:8f:45:60:
2a:ae:50:a4:0f:7c:c6:61:33:d8:fa:36:e7:a7:dd:46:91:63:
d7:e2:f8:de:f5:bb:a5:85:27:82:a2:05:72:50:96:17:92:2a:
3e:6a:37:82:c1:4e:e2:1d:a0:1b:b4:04:07:ba:3a:ea:e8:5c:
9b:5e:2f:7a:c4:78:c6:f4:01:ac:68:95:12:bb:07:22:51:fc:
79:6d:3f:6d:a0:d5:bb:de:2e:68:52:75:c8:14:0c:d8:c8:26:
ec:dd:2d:9b:73:ed:20:0b:6f:ab:ce:20:df:3c:03:85:38:1d:
1d:75:ac:41:20:2b:bb:d4:36:42:22:42:16:5c:46:56:d1:cf:
63:e2:cf:b7:11:e3:af:c7:b9:22:86:93:2d:04:39:e8:57:9d:
1e:83:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:39:07 2025 by rpki-client