Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32342d3234203d3e20313338303634.roa
File: 3130332e3132322e36342e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier: LgdFe9CC7HhskXjsgts/4NgGboLMauegBailKwLbF1E=
Subject key identifier: E4:DC:EB:B8:10:CC:00:AB:ED:B4:EE:EB:B7:6F:EB:43:93:99:E8:CE
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 1F6965B3337B31C2E414339564AB00CD7F2D58AF
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32342d3234203d3e20313338303634.roa
Signing time: Wed 31 May 2023 21:50:43 +0000
ROA not before: Wed 31 May 2023 21:45:43 +0000
ROA not after: Wed 29 May 2024 21:50:43 +0000
asID: 138064
IP address blocks: 103.122.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:69:65:b3:33:7b:31:c2:e4:14:33:95:64:ab:00:cd:7f:2d:58:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: May 31 21:45:43 2023 GMT
Not After : May 29 21:50:43 2024 GMT
Subject: CN=E4DCEBB810CC00ABEDB4EEEBB76FEB439399E8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:8d:1f:2f:ef:f5:1e:af:cd:87:a5:05:42:
43:fe:62:c7:08:59:b8:bd:8f:64:59:b5:03:9e:99:
c5:86:a7:62:fa:f0:13:6a:b7:a9:83:3c:ab:13:df:
67:c0:15:5d:a0:d3:e5:05:47:f6:77:05:20:75:1d:
0e:6b:d7:b2:5a:4a:05:60:a9:a8:f1:00:fa:27:ee:
cc:9c:c3:7c:1d:e7:90:3b:6b:5b:07:6e:c6:a4:59:
e6:ac:56:59:91:da:0a:28:70:fd:09:fc:f2:3c:c4:
fc:04:9f:b6:44:b2:68:74:5a:72:2a:a9:45:43:18:
4f:c6:fb:94:16:fc:55:33:05:e6:0d:bf:e7:7b:75:
fa:58:18:1a:34:ca:68:fd:a7:05:61:33:c6:f1:6c:
e2:78:80:d1:13:43:bb:b3:10:5c:31:e1:16:07:6c:
07:d4:eb:36:53:47:d5:fb:71:c2:60:30:ef:4a:7a:
e3:6a:fc:62:a8:34:be:f7:8b:80:cd:ad:e8:1b:74:
c0:fc:b4:58:6f:cb:1c:1c:22:54:53:7f:e1:6f:48:
09:40:83:11:11:85:a8:f6:b5:40:a7:00:6a:71:14:
d5:e7:29:ff:90:4b:40:ba:c4:30:30:ac:86:1f:69:
a2:ab:7d:d7:b9:1c:77:2c:71:ff:bf:17:d9:24:bb:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:EB:B8:10:CC:00:AB:ED:B4:EE:EB:B7:6F:EB:43:93:99:E8:CE
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32342d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.64.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ff:12:fd:17:c6:bc:ea:e7:6b:6e:5c:15:e7:23:a7:e5:13:
fe:ae:ea:9d:1b:78:4b:3b:0d:1c:41:c3:15:59:90:87:ea:af:
65:b7:5f:b1:be:dc:ed:1b:86:9e:33:57:e0:9e:70:1c:0e:05:
d6:f4:86:ab:20:91:0d:9d:5e:5b:e0:1e:b3:b7:91:e0:e3:98:
a8:91:6a:01:f1:df:f0:1c:33:80:93:f9:18:06:4d:f1:81:f7:
74:d6:ce:8a:1a:5e:26:87:31:46:ce:bb:d8:45:12:1d:7e:b1:
a7:51:14:7e:71:d9:07:cc:67:1e:e6:56:4f:ed:8d:5d:0b:92:
c1:c6:ff:83:15:df:88:4d:72:f8:72:df:5c:0c:24:82:ad:67:
fd:4a:88:7d:11:18:cf:d0:a8:b3:e7:66:2d:62:9c:5a:cf:4f:
68:d8:15:44:4d:fc:19:23:b5:cc:d7:85:d7:14:9f:ef:63:3f:
2d:9d:c1:de:6f:85:a9:c9:30:66:40:c4:9a:05:8e:53:39:c2:
04:b5:b1:f3:69:91:15:87:f9:f6:5d:b6:51:5e:93:de:b9:c0:
ba:aa:69:53:5d:e8:a7:07:93:a1:0e:bd:3b:51:9d:94:9a:9b:
17:df:11:ce:70:59:95:69:04:5c:2c:c8:7a:7c:26:2f:14:22:
ee:a5:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:21:33 2025 by rpki-client