Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130332e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3130332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: KHiOGif3U6zg3QE92EV/rXfJczv6QO4Z8Y6NSSbU//Q=
Subject key identifier: C9:2A:82:96:F0:94:87:44:86:E8:9F:23:15:52:28:FC:2C:8C:0B:56
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 208B444BBC5D4609722DA4435BA23D452975836E
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130332e302f32342d3234203d3e203234323033.roa
Signing time: Wed 30 Mar 2022 05:00:00 +0000
ROA not before: Wed 30 Mar 2022 04:55:00 +0000
ROA not after: Wed 29 Mar 2023 05:00:00 +0000
asID: 24203
IP address blocks: 112.215.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8b:44:4b:bc:5d:46:09:72:2d:a4:43:5b:a2:3d:45:29:75:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 30 04:55:00 2022 GMT
Not After : Mar 29 05:00:00 2023 GMT
Subject: CN=C92A8296F094874486E89F23155228FC2C8C0B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:27:a0:71:27:21:4f:7e:a1:3d:0a:28:4f:
12:80:bc:e6:0f:a5:e9:68:a5:3d:ed:9c:23:8e:26:
24:59:68:86:cf:14:73:48:e4:d9:7e:0e:bd:a3:f0:
ed:47:1c:64:08:f3:75:26:54:8e:d1:80:23:93:04:
3e:37:7f:b2:b9:7e:da:5e:b7:e0:3a:01:74:e9:d7:
9f:28:4e:35:10:31:df:6f:b7:43:13:4b:1d:6a:61:
de:ae:07:62:b5:ca:5c:6d:44:fb:46:c9:f7:e8:4f:
a5:f8:6c:8c:db:66:99:68:3e:b2:3f:98:ef:fe:c6:
81:62:5c:03:5f:18:50:28:1e:32:9e:65:f9:62:67:
38:bb:db:b0:70:5e:3a:54:42:67:48:6f:0b:ee:96:
fd:24:4a:aa:be:27:11:eb:1c:ef:8a:51:fa:f2:a8:
1e:13:5e:e4:a0:3d:8b:a5:33:dd:6b:49:68:20:52:
20:2c:84:8f:4c:5b:c5:75:67:41:4a:5f:a3:ea:8c:
5a:1d:8f:79:e2:b6:f7:fc:96:11:4f:0e:7b:1f:55:
09:dd:14:18:93:71:3a:70:06:4a:e9:2f:5a:d5:fb:
c6:53:39:0a:84:1d:29:83:ab:a8:cd:d4:56:f6:48:
be:14:74:a9:8b:ac:36:ad:6c:07:ac:62:d3:b0:1b:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:82:96:F0:94:87:44:86:E8:9F:23:15:52:28:FC:2C:8C:0B:56
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f1:dd:f1:11:f5:3f:41:36:68:a9:a2:ad:9b:40:47:64:60:
5c:93:62:da:47:72:a0:75:18:a8:7c:16:88:80:f4:a4:7b:ce:
25:a6:aa:5f:d5:9e:49:9f:8e:ca:e6:63:9b:46:98:29:40:41:
4f:99:e1:e6:b8:b7:04:57:14:f1:84:fa:12:5e:10:4c:4e:4f:
2f:db:0d:b3:b7:da:6e:c0:2e:01:2f:46:b3:b5:d0:29:55:ad:
be:9d:fe:3c:a6:a1:70:2b:2d:0f:0d:e7:b4:a3:16:f9:4f:12:
66:04:f3:74:69:36:7e:c8:77:74:34:9b:44:1f:ff:ba:ed:b1:
c6:d4:e5:f3:87:34:ff:c3:c4:3a:ab:20:99:57:f6:1b:b3:d3:
2c:dc:23:86:e4:ac:e3:b3:25:5d:98:03:1e:41:38:b7:4e:3c:
b2:c2:ff:82:2d:51:fd:c4:4a:bd:a4:41:95:da:04:7b:38:78:
93:40:c1:8f:83:eb:ad:f8:90:ff:1c:1e:62:07:b7:49:ac:97:
dc:06:b4:5d:2f:e7:e0:cf:25:02:79:95:ff:51:90:3e:79:13:
15:7d:a1:bb:b7:fd:94:7e:00:9e:77:0d:9f:dd:10:14:9b:71:
c8:55:9c:2d:82:0d:71:5f:8f:97:bc:bf:b8:27:17:38:08:7f:
46:b8:81:44
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIItES7xdRglyLaRDW6I9RSl1g24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjAzMzAwNDU1MDBaFw0yMzAzMjkwNTAwMDBaMDMxMTAvBgNV
BAMTKEM5MkE4Mjk2RjA5NDg3NDQ4NkU4OUYyMzE1NTIyOEZDMkM4QzBCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1iegcSchT36hPQooTxKAvOYP
pelopT3tnCOOJiRZaIbPFHNI5Nl+Dr2j8O1HHGQI83UmVI7RgCOTBD43f7K5ftpe
t+A6AXTp158oTjUQMd9vt0MTSx1qYd6uB2K1ylxtRPtGyffoT6X4bIzbZploPrI/
mO/+xoFiXANfGFAoHjKeZfliZzi727BwXjpUQmdIbwvulv0kSqq+JxHrHO+KUfry
qB4TXuSgPYulM91rSWggUiAshI9MW8V1Z0FKX6PqjFodj3nitvf8lhFPDnsfVQnd
FBiTcTpwBkrpL1rV+8ZTOQqEHSmDq6jN1Fb2SL4UdKmLrDatbAesYtOwG8JrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUySqClvCUh0SG6J8jFVIo/CyMC1YwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTMwMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNdnMA0GCSqG
SIb3DQEBCwUAA4IBAQB18d3xEfU/QTZoqaKtm0BHZGBck2LaR3KgdRiofBaIgPSk
e84lpqpf1Z5Jn47K5mObRpgpQEFPmeHmuLcEVxTxhPoSXhBMTk8v2w2zt9puwC4B
L0aztdApVa2+nf48pqFwKy0PDee0oxb5TxJmBPN0aTZ+yHd0NJtEH/+67bHG1OXz
hzT/w8Q6qyCZV/Ybs9Ms3COG5KzjsyVdmAMeQTi3Tjyywv+CLVH9xEq9pEGV2gR7
OHiTQMGPg+ut+JD/HB5iB7dJrJfcBrRdL+fgzyUCeZX/UZA+eRMVfaG7t/2UfgCe
dw2f3RAUm3HIVZwtgg1xX4+XvL+4Jxc4CH9GuIFE
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net