Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130322e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3130322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: wB1Gpu71P2IWtO+riJ67cI3VkMu3FRLoXnIwFTtDGwA=
Subject key identifier: 99:4E:45:C3:48:B9:0D:1D:63:9A:59:D2:4F:7B:C9:96:10:C4:6A:4C
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 25C5B7113E15EB2A4F285101C91763D1BEB09890
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130322e302f32342d3234203d3e203234323033.roa
Signing time: Wed 30 Mar 2022 05:00:00 +0000
ROA not before: Wed 30 Mar 2022 04:55:00 +0000
ROA not after: Wed 29 Mar 2023 05:00:00 +0000
asID: 24203
IP address blocks: 112.215.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c5:b7:11:3e:15:eb:2a:4f:28:51:01:c9:17:63:d1:be:b0:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 30 04:55:00 2022 GMT
Not After : Mar 29 05:00:00 2023 GMT
Subject: CN=994E45C348B90D1D639A59D24F7BC99610C46A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:50:46:38:bc:e6:eb:ef:b1:50:65:a1:06:
19:59:37:b8:7d:c6:3b:7a:b0:9d:5f:50:e7:87:2e:
f2:55:b0:d8:73:01:71:91:8e:7a:1b:5e:5a:f2:45:
37:47:14:ab:03:1c:a6:a4:41:f6:df:1c:2b:6a:50:
62:f5:85:c1:87:9f:85:42:72:89:8a:26:97:a9:83:
97:62:b7:fa:3e:ab:75:4b:bb:35:10:3b:6d:8a:2d:
75:33:e0:4f:79:7b:21:29:76:cc:4a:f2:12:5f:21:
b6:b6:bc:ff:16:fe:8a:a4:bf:5e:e1:7a:a8:69:da:
5d:9d:0f:ad:88:05:e3:2d:9b:74:e7:ad:57:0c:43:
f9:fc:83:50:ee:0f:e7:4d:62:c9:33:6c:b5:37:ed:
2a:f4:fe:4d:17:ca:4a:db:9e:6a:9c:45:09:be:1e:
12:f0:a3:c3:b4:e8:c2:30:dd:42:45:98:de:af:c5:
28:b6:a1:a6:36:4f:26:94:60:51:7e:3a:6b:a3:e2:
fb:d1:af:ea:c4:91:bb:73:43:23:14:ae:aa:f5:f1:
02:36:eb:71:a4:1e:72:c2:94:cf:f7:be:a5:16:47:
8a:8e:2b:0a:be:38:fe:65:5b:25:72:23:ae:d7:8d:
27:a4:33:c8:05:e0:5d:93:5e:3a:9f:77:b7:19:1c:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:45:C3:48:B9:0D:1D:63:9A:59:D2:4F:7B:C9:96:10:C4:6A:4C
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130322e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.102.0/24
Signature Algorithm: sha256WithRSAEncryption
53:84:c0:43:ab:b1:77:7e:79:8a:56:1d:70:2e:5c:e5:91:03:
b1:0c:15:e5:b2:89:d5:dc:04:95:5f:64:46:e2:ae:1c:9b:4a:
0b:cc:a9:7a:a6:b0:76:16:54:40:89:20:e3:8f:5b:d7:fa:61:
65:41:c2:a2:88:dd:75:0a:d8:a2:2b:39:57:d1:a0:c2:e3:69:
bd:00:3b:3c:25:d9:e9:42:65:07:65:dd:97:46:27:a7:c0:36:
a1:08:51:04:f7:0c:9f:8b:5b:08:8a:f7:fc:d0:2c:03:0a:d0:
55:30:b9:5f:43:50:c1:a4:da:29:f9:c0:23:27:89:19:0a:cb:
88:7c:3c:c2:30:1c:40:30:f8:c6:eb:a4:7a:5c:cb:4d:00:cd:
b0:80:ef:b5:88:51:47:f4:f5:ab:3b:e8:ae:9a:be:80:ef:d1:
f2:d4:d1:f4:9e:37:58:f0:42:39:1f:24:27:90:f0:87:c7:df:
81:de:c4:da:5c:23:82:7a:09:b9:2d:c3:ef:88:6e:a6:fa:e3:
6b:8f:cf:dc:56:df:af:08:13:fb:8b:fe:0b:15:e7:2e:82:56:
9f:84:8f:3f:84:78:e5:81:08:ef:12:0d:98:fe:bc:10:95:35:
f5:3c:31:bd:a6:16:3d:f0:de:a1:4d:19:c9:b2:b2:71:61:55:
52:07:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net