Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36362e302f32342d3234203d3e20313338303634.roa
File: 3130332e3132322e36362e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier: TtKfFpb0pUv4cP8O1VO+pJb0aSylDsJZ18qpcbaUn8c=
Subject key identifier: DC:85:24:62:17:A4:9F:32:2F:AA:79:57:65:FC:9F:70:50:6E:20:B2
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 013A81F9AD85FEA95BDEDF78A6F26F5634008D6C
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36362e302f32342d3234203d3e20313338303634.roa
Signing time: Wed 31 May 2023 21:51:58 +0000
ROA not before: Wed 31 May 2023 21:46:58 +0000
ROA not after: Wed 29 May 2024 21:51:58 +0000
asID: 138064
IP address blocks: 103.122.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3a:81:f9:ad:85:fe:a9:5b:de:df:78:a6:f2:6f:56:34:00:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: May 31 21:46:58 2023 GMT
Not After : May 29 21:51:58 2024 GMT
Subject: CN=DC85246217A49F322FAA795765FC9F70506E20B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:25:63:73:cc:6e:f9:4f:b1:e9:68:d7:91:
57:95:fa:1f:36:23:b0:01:f2:e5:4d:2e:40:55:42:
77:ac:f1:7a:16:89:91:9f:c5:a9:72:06:53:fa:4b:
95:44:20:93:49:de:6e:38:65:f7:8d:c8:02:eb:1d:
12:8a:11:fb:62:88:92:f4:29:ee:f1:6c:b6:0f:44:
2c:4b:2f:5f:1f:b1:d1:22:db:2f:8d:95:34:3e:9c:
37:6b:1e:04:e2:f0:7c:71:4f:0a:42:bb:58:53:e8:
b8:09:89:37:ea:3e:39:b7:b4:c0:6d:84:1a:73:ef:
cb:00:a2:7d:cb:07:77:13:78:56:39:1b:6f:9a:ad:
03:fa:cc:03:45:b9:16:c5:d3:0a:89:b4:79:1c:32:
b2:ae:e1:82:98:ec:04:96:c4:47:6a:5b:8f:ae:87:
62:d8:d0:73:a1:e2:db:2a:be:3d:3b:bc:bb:d2:c0:
a6:d3:21:28:dd:e9:d2:7f:0a:bc:8d:ff:28:be:42:
e2:a8:86:32:ac:50:ea:4a:67:8f:26:a5:14:e4:31:
29:49:ef:76:30:64:ef:91:61:83:5f:fd:d2:c0:0f:
6b:1c:7d:17:94:14:94:ba:3e:cc:a4:2f:4d:e7:5f:
d7:54:0a:d6:5d:b9:35:3a:0f:b9:de:71:5a:04:f0:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:24:62:17:A4:9F:32:2F:AA:79:57:65:FC:9F:70:50:6E:20:B2
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36362e302f32342d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.66.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7a:7e:73:1f:01:5e:33:be:de:e5:c4:d2:1d:99:fc:fa:64:
83:8e:53:e3:61:11:35:c7:15:b0:3c:4c:f0:6f:90:6c:5d:35:
93:c5:f5:ef:3a:05:4f:e7:2e:09:a1:91:5d:f1:f8:9a:8f:a3:
24:0d:5d:03:68:34:65:d7:14:4a:56:d8:d2:1b:7c:f2:8e:31:
a5:98:17:4a:6e:db:00:a0:00:53:91:22:8a:e4:72:db:25:74:
43:28:50:c7:38:33:e9:c7:7f:4f:5f:8a:54:49:d3:a3:cd:7e:
61:98:64:27:4a:36:55:d2:a7:09:40:51:65:62:bd:52:70:f2:
cd:56:0a:d9:00:3f:97:e9:fc:93:28:41:a3:95:7c:ad:d8:e3:
c8:af:e9:e0:9c:a9:56:10:7a:0a:4b:c1:96:c6:bf:a8:a2:35:
cd:56:32:da:eb:c9:0c:95:bc:a4:5b:b9:bc:d8:94:28:99:44:
3c:49:6d:a1:34:81:1b:39:cd:28:13:94:1e:95:48:e6:02:e7:
db:b6:10:f3:d4:e1:90:e2:27:40:2b:b3:ad:73:71:67:41:6b:
f6:15:79:06:0c:31:92:6a:1e:1e:f9:6a:45:d1:f9:3f:a3:b3:
d8:83:6a:d0:db:31:d1:1e:36:cb:ab:c4:20:7b:14:59:09:4a:
cd:e1:d9:91
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUATqB+a2F/qlb3t94pvJvVjQAjWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB
Qjg5Q0M3NTAeFw0yMzA1MzEyMTQ2NThaFw0yNDA1MjkyMTUxNThaMDMxMTAvBgNV
BAMTKERDODUyNDYyMTdBNDlGMzIyRkFBNzk1NzY1RkM5RjcwNTA2RTIwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//SVjc8xu+U+x6WjXkVeV+h82
I7AB8uVNLkBVQnes8XoWiZGfxalyBlP6S5VEIJNJ3m44ZfeNyALrHRKKEftiiJL0
Ke7xbLYPRCxLL18fsdEi2y+NlTQ+nDdrHgTi8HxxTwpCu1hT6LgJiTfqPjm3tMBt
hBpz78sAon3LB3cTeFY5G2+arQP6zANFuRbF0wqJtHkcMrKu4YKY7ASWxEdqW4+u
h2LY0HOh4tsqvj07vLvSwKbTISjd6dJ/CryN/yi+QuKohjKsUOpKZ48mpRTkMSlJ
73YwZO+RYYNf/dLAD2scfReUFJS6PsykL03nX9dUCtZduTU6D7necVoE8Da1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3IUkYheknzIvqnlXZfyfcFBuILIwHwYDVR0j
BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx
MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5
Q0M3NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwZDlhMjk2LTgyMjgtNDM4Ni04
ZmU5LTk3YWEzMDkxZGUwZC8wLzMxMzAzMzJlMzEzMjMyMmUzNjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3pCMA0GCSqG
SIb3DQEBCwUAA4IBAQAken5zHwFeM77e5cTSHZn8+mSDjlPjYRE1xxWwPEzwb5Bs
XTWTxfXvOgVP5y4JoZFd8fiaj6MkDV0DaDRl1xRKVtjSG3zyjjGlmBdKbtsAoABT
kSKK5HLbJXRDKFDHODPpx39PX4pUSdOjzX5hmGQnSjZV0qcJQFFlYr1ScPLNVgrZ
AD+X6fyTKEGjlXyt2OPIr+ngnKlWEHoKS8GWxr+oojXNVjLa68kMlbykW7m82JQo
mUQ8SW2hNIEbOc0oE5QelUjmAufbthDz1OGQ4idAK7Otc3FnQWv2FXkGDDGSah4e
+WpF0fk/o7PYg2rQ2zHRHjbLq8QgexRZCUrN4dmR
-----END CERTIFICATE-----
Generated at Sun May 4 05:48:05 2025 by rpki-client