Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232332e302f32342d3234203d3e203137383835.roa
File: 3130332e332e3232332e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: L+daQcV7cvHsxyCyME4d9dTN2JRfQSk2gOcvHR2zOHs=
Subject key identifier: 41:F7:00:8E:5F:C0:6C:27:A3:27:F2:6B:22:84:49:67:A5:DE:1C:9A
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1AC7BC571B8807ACB8A54370205D0F1693A118C6
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232332e302f32342d3234203d3e203137383835.roa
Signing time: Fri 25 Mar 2022 06:00:00 +0000
ROA not before: Fri 25 Mar 2022 05:55:00 +0000
ROA not after: Fri 24 Mar 2023 06:00:00 +0000
asID: 17885
IP address blocks: 103.3.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c7:bc:57:1b:88:07:ac:b8:a5:43:70:20:5d:0f:16:93:a1:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 25 05:55:00 2022 GMT
Not After : Mar 24 06:00:00 2023 GMT
Subject: CN=41F7008E5FC06C27A327F26B22844967A5DE1C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:48:28:6a:e5:36:11:20:65:f3:2b:53:7d:
e8:0c:7a:cf:04:13:bd:c9:cd:17:07:38:6c:5b:d3:
43:54:f4:4e:c7:82:27:53:e7:9e:41:f9:2b:36:82:
24:e5:ef:d0:e2:07:be:c8:74:de:7b:ab:25:a0:72:
b6:38:32:c2:dc:9d:70:62:3c:96:6b:6e:19:43:4e:
03:3a:71:22:5e:30:cd:b6:3d:50:af:5a:00:bd:3c:
5f:ac:bc:e8:f5:31:2a:84:1f:d7:a6:8a:2f:69:a3:
7f:5e:8b:6f:df:a9:00:42:f3:6d:32:dd:2d:8d:2c:
80:13:ed:18:a5:17:f6:15:1c:27:06:49:1f:56:98:
dc:a8:5c:32:0d:f8:ea:0e:f9:3a:61:82:f2:5b:4f:
6a:d9:f0:5b:14:67:a7:10:35:11:ce:e1:bf:eb:bc:
ee:e1:94:01:89:21:d0:97:e0:77:cc:60:b3:5e:2d:
4a:7d:48:8e:72:ea:46:05:68:7d:16:ec:c8:ce:26:
ed:31:44:24:69:fc:1c:f1:79:5a:ee:23:7f:e3:92:
61:50:d9:c5:1f:c3:32:43:6c:c5:0c:34:1d:e3:f7:
8a:09:b3:15:60:ef:fb:4a:6c:84:82:96:2b:2f:87:
b2:ed:30:2d:e0:b9:ae:b0:4e:08:67:d4:d6:94:47:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:00:8E:5F:C0:6C:27:A3:27:F2:6B:22:84:49:67:A5:DE:1C:9A
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3130332e332e3232332e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cc:17:96:dc:d3:77:fd:bf:93:96:a3:90:ca:45:d2:e2:41:
9d:44:43:7c:05:50:c9:c0:38:28:b9:56:c8:e7:83:7f:00:1f:
08:19:f3:4c:47:3b:74:94:d7:a2:be:90:d2:2f:51:d8:35:e4:
dd:79:be:13:54:aa:de:c1:fc:6f:0e:fd:20:11:93:24:66:98:
96:8a:f6:9e:ed:cd:17:de:8c:36:16:e6:0e:c0:37:b0:e8:51:
00:c2:f1:a0:5e:59:74:be:b2:a3:93:67:a8:ca:8f:3e:c6:39:
8f:a3:dc:1b:66:bc:2c:03:d2:ad:b4:60:c3:4c:ea:c9:f3:56:
5c:01:02:5c:f2:e0:ca:d3:be:48:8a:c1:c7:88:a9:89:3f:d1:
9c:67:74:da:b5:31:e5:71:5d:cc:09:f6:f6:ba:71:8b:0d:ab:
c8:fd:f9:20:65:8d:79:79:d7:c4:e6:a5:33:0e:ab:1a:12:cd:
de:30:4f:3b:01:33:27:02:06:09:89:e2:6a:8a:80:e4:07:9b:
77:27:40:2c:bb:fa:be:9e:03:21:84:0e:8f:79:ce:6e:0b:5a:
85:3f:a5:f8:7d:2e:71:61:a4:56:8b:ed:ab:3b:5d:38:0f:27:
0a:7f:f6:47:2c:78:28:88:20:b2:2f:59:5b:07:99:37:40:9d:
37:bb:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net