Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32332d3233203d3e20313531353832.roa
File: 3130332e38302e3233302e302f32332d3233203d3e20313531353832.roa (raw, json)
Hash identifier: xca9kKzxOVuDHtr6Fr4oUUQ4265ughiEfS1KGfWcDuc=
Subject key identifier: 4E:E8:C6:1D:85:5B:BF:06:92:E0:49:BF:03:99:A2:A5:BB:D3:1E:80
Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial: 1EE8A8811DFB71A57DE117AD55D02A48B1E05F57
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32332d3233203d3e20313531353832.roa
Signing time: Mon 22 Jan 2024 14:51:37 +0000
ROA not before: Mon 22 Jan 2024 14:46:37 +0000
ROA not after: Mon 20 Jan 2025 14:51:37 +0000
asID: 151582
IP address blocks: 103.80.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e8:a8:81:1d:fb:71:a5:7d:e1:17:ad:55:d0:2a:48:b1:e0:5f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Validity
Not Before: Jan 22 14:46:37 2024 GMT
Not After : Jan 20 14:51:37 2025 GMT
Subject: CN=4EE8C61D855BBF0692E049BF0399A2A5BBD31E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:ac:5b:4e:17:39:02:1a:e9:8f:93:da:05:
a1:f4:8a:4e:59:c9:0d:f6:6a:2f:fc:1e:ce:8f:53:
16:0f:0b:56:af:8a:c3:af:dd:58:44:8b:b4:d2:30:
70:25:8c:57:d1:6d:fd:25:9a:09:f7:bc:0f:c9:07:
bd:db:d4:93:52:74:1f:a4:e6:e9:2a:a6:21:6e:52:
17:0d:8a:cc:21:4c:0d:33:b0:ee:80:48:b9:a7:fd:
37:e3:c5:43:db:15:7d:93:1d:bc:30:50:96:fd:d1:
29:13:78:ea:7a:e9:70:2e:0f:78:8a:31:64:8b:c7:
e3:25:71:aa:be:43:66:1d:34:f9:74:83:64:18:38:
cf:d9:ab:7b:a8:17:c8:a0:43:2f:7f:b6:29:93:bb:
fd:c5:c3:ed:2a:b3:5a:00:33:71:a5:93:72:66:9e:
07:7f:e8:a1:b9:e8:54:a7:de:60:9e:05:c2:24:54:
4b:fe:fe:c4:83:e1:cf:7a:ed:96:bb:7f:18:d0:56:
44:7f:bc:f5:56:32:7c:1f:8a:b1:7e:dd:09:48:99:
0c:84:6e:79:a3:94:4c:b7:27:29:90:cb:2c:22:6e:
ae:14:6f:fc:1a:4d:43:30:ed:71:9d:50:23:98:4d:
ae:7f:7d:e5:6e:62:2e:a8:e5:a1:45:07:7e:a3:b0:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:C6:1D:85:5B:BF:06:92:E0:49:BF:03:99:A2:A5:BB:D3:1E:80
X509v3 Authority Key Identifier:
keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32332d3233203d3e20313531353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:68:6a:65:02:8a:af:45:33:00:ac:99:3a:dd:4f:66:c9:62:
a9:f4:0f:26:c3:f4:1e:6b:87:85:bc:90:6b:bb:37:fe:d1:69:
98:e4:12:92:10:2f:89:87:be:5c:9a:58:06:17:e6:ef:4d:d0:
2c:5e:79:ac:f7:2a:17:d0:d6:c0:a5:cc:d5:d0:37:fb:d1:5b:
bf:d7:e6:00:60:7b:cf:e0:04:9b:24:88:8b:ee:1c:d0:71:26:
9b:2a:69:03:73:a1:7c:8e:ab:71:a8:ce:d5:13:f1:98:d0:62:
cd:b7:38:6c:e5:42:41:9a:05:93:6f:fd:0a:f7:c4:c6:7a:aa:
48:57:ff:bf:89:c6:ec:f4:47:d4:ea:f1:62:5a:01:cd:69:cd:
13:dd:8e:cd:6a:e3:6c:21:31:ea:75:fe:2f:43:20:5d:70:aa:
3e:ce:7a:54:71:ef:bc:61:3d:50:2b:27:0e:15:95:1b:ca:4e:
6e:c4:3a:00:ee:33:5c:55:de:dd:71:c1:02:92:5b:0c:58:40:
34:1f:29:52:2c:c5:07:5c:3c:91:c5:88:8a:f1:bf:b2:9c:58:
a8:6b:13:69:8a:f0:b6:48:74:d2:48:ec:90:85:63:12:73:c4:
4e:69:6a:92:0a:63:1f:af:0e:4f:4d:b9:83:21:7d:e1:40:b7:
01:fe:f0:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHuiogR37caV94RetVdAqSLHgX1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC
MzZGM0FENjAeFw0yNDAxMjIxNDQ2MzdaFw0yNTAxMjAxNDUxMzdaMDMxMTAvBgNV
BAMTKDRFRThDNjFEODU1QkJGMDY5MkUwNDlCRjAzOTlBMkE1QkJEMzFFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0q6xbThc5Ahrpj5PaBaH0ik5Z
yQ32ai/8Hs6PUxYPC1avisOv3VhEi7TSMHAljFfRbf0lmgn3vA/JB73b1JNSdB+k
5ukqpiFuUhcNiswhTA0zsO6ASLmn/TfjxUPbFX2THbwwUJb90SkTeOp66XAuD3iK
MWSLx+Mlcaq+Q2YdNPl0g2QYOM/Zq3uoF8igQy9/timTu/3Fw+0qs1oAM3Glk3Jm
ngd/6KG56FSn3mCeBcIkVEv+/sSD4c967Za7fxjQVkR/vPVWMnwfirF+3QlImQyE
bnmjlEy3JymQyywibq4Ub/waTUMw7XGdUCOYTa5/feVuYi6o5aFFB36jsLKPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTujGHYVbvwaS4Em/A5mipbvTHoAwHwYDVR0j
BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz
NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG
M0FENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i
NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1DmMA0GCSqG
SIb3DQEBCwUAA4IBAQAtaGplAoqvRTMArJk63U9myWKp9A8mw/Qea4eFvJBruzf+
0WmY5BKSEC+Jh75cmlgGF+bvTdAsXnms9yoX0NbApczV0Df70Vu/1+YAYHvP4ASb
JIiL7hzQcSabKmkDc6F8jqtxqM7VE/GY0GLNtzhs5UJBmgWTb/0K98TGeqpIV/+/
icbs9EfU6vFiWgHNac0T3Y7NauNsITHqdf4vQyBdcKo+znpUce+8YT1QKycOFZUb
yk5uxDoA7jNcVd7dccECklsMWEA0HylSLMUHXDyRxYiK8b+ynFioaxNpivC2SHTS
SOyQhWMSc8ROaWqSCmMfrw5PTbmDIX3hQLcB/vAv
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:38:38 2025 by rpki-client