Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130302e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3130302e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: gwqdBWWXtcn7clDogge2+y1L4Rz9w44DLshHjMcF7Q8=
Subject key identifier: 44:B6:0A:36:10:A4:5E:AB:E2:99:A6:74:EA:CF:AB:4B:9B:25:28:84
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 3FAB3A56F5CFBFDA163F8DAA6BDE0B0A8DF89C27
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130302e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:01 +0000
ROA not before: Tue 05 Apr 2022 11:55:01 +0000
ROA not after: Tue 04 Apr 2023 12:00:01 +0000
asID: 17885
IP address blocks: 112.215.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ab:3a:56:f5:cf:bf:da:16:3f:8d:aa:6b:de:0b:0a:8d:f8:9c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:01 2022 GMT
Not After : Apr 4 12:00:01 2023 GMT
Subject: CN=44B60A3610A45EABE299A674EACFAB4B9B252884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:dd:3e:a1:04:02:02:fc:f1:a3:3e:8a:e5:
09:e3:7b:82:06:16:12:f9:ed:c6:bc:35:50:e3:c2:
24:1f:1a:5e:02:c9:95:40:a5:ab:43:79:cd:84:5b:
bb:92:3d:3a:5b:0d:39:06:c7:b1:97:10:1d:cf:23:
fd:e8:80:ae:5f:3b:37:89:6d:2d:be:c0:bb:38:de:
78:68:b5:6d:85:db:a2:a9:dd:6c:f3:8f:dd:a4:d4:
1c:ad:cd:9b:85:88:f8:29:bd:ea:c8:7c:c6:98:43:
f8:ba:3c:b0:1c:66:de:9b:a1:d4:dd:f5:0b:aa:8f:
6e:7f:c9:be:51:9d:65:d7:df:85:fc:9b:e0:7a:3b:
57:57:6e:3e:77:06:ee:10:bc:7e:fd:34:9f:e7:be:
bd:81:49:d7:7a:db:95:84:97:3e:88:0b:67:0e:d8:
08:6c:8e:38:12:e8:e0:7b:d5:76:9a:59:ea:05:f7:
cf:76:7f:e0:2a:75:73:f8:8b:bf:7d:98:f9:6d:a9:
37:93:d5:73:fc:b9:5b:3a:b0:e5:4c:9f:4d:bd:c4:
82:a8:61:84:4d:1c:7f:a2:b7:3b:65:d1:a2:b6:01:
7c:0a:cd:6d:90:47:d5:63:1a:f0:fd:3c:6c:2f:11:
50:cd:b0:0d:47:ac:f5:5d:6b:0e:e6:5c:83:5b:9b:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:0A:36:10:A4:5E:AB:E2:99:A6:74:EA:CF:AB:4B:9B:25:28:84
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130302e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:af:66:4a:ed:40:6f:4c:fd:a1:05:f0:ef:77:c2:89:3c:a2:
18:33:80:43:35:53:e6:91:ef:d3:70:80:be:57:b3:9e:83:2d:
c8:cc:04:4a:71:56:46:30:53:f4:e3:7a:21:a6:9d:c4:07:42:
d6:6b:83:a1:aa:ac:ab:58:b7:13:43:db:43:61:25:bf:50:2e:
b7:60:9e:1f:ba:7d:f6:04:85:68:69:06:aa:65:1d:aa:dd:46:
ef:5d:fe:05:9e:d0:7c:29:a8:e2:3f:03:62:98:6c:d9:e6:51:
28:78:a0:b2:3e:f3:ef:38:66:0c:c4:f5:90:f4:25:b2:9a:60:
78:ff:6a:90:1e:f3:2e:c5:4d:a0:8a:c5:b4:90:8b:71:85:e4:
d5:2c:43:d8:bc:7e:b7:7f:13:f9:d5:22:d0:64:ba:78:61:1e:
4f:3b:e3:b0:06:90:43:76:ee:bc:1f:a9:d6:51:91:91:7a:8a:
45:a7:a2:a3:aa:a9:d8:2c:db:c3:1f:78:61:dd:b5:e9:63:63:
c7:b5:1f:f2:90:a6:cd:d6:8f:7a:4b:ac:84:3e:7a:fc:a2:1d:
35:99:3a:af:11:9e:cc:3c:83:2c:9b:ed:37:54:62:54:6b:ba:
cc:41:cd:58:81:ab:50:28:7b:a3:05:f1:c8:f5:f1:58:61:ba:
e6:c8:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net