Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3130372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: qbqronlpt/Y1mIx118vb4CGYJY39zgxTMC/40eIkjwc=
Subject key identifier: A7:D5:1E:9F:D1:4E:71:F4:B6:EA:BD:E6:FD:97:54:FE:ED:F2:D4:86
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 03D11BE9025C0DE5113C6DE2B14827233431B0C1
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130372e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:01 +0000
ROA not before: Tue 05 Apr 2022 11:55:01 +0000
ROA not after: Tue 04 Apr 2023 12:00:01 +0000
asID: 17885
IP address blocks: 112.215.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d1:1b:e9:02:5c:0d:e5:11:3c:6d:e2:b1:48:27:23:34:31:b0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:01 2022 GMT
Not After : Apr 4 12:00:01 2023 GMT
Subject: CN=A7D51E9FD14E71F4B6EABDE6FD9754FEEDF2D486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:34:e0:d7:13:3f:77:a0:44:d4:45:35:0c:
08:a3:a5:77:45:77:ef:9d:9b:d1:15:37:47:ee:57:
0b:fa:98:22:97:ab:1a:07:52:cd:50:1a:1c:f0:ad:
c2:1e:15:b1:08:13:91:77:20:21:08:33:f4:72:61:
17:65:bd:d1:0e:b9:08:94:fb:9c:39:59:3a:b1:37:
98:1c:2e:79:82:65:09:93:3b:71:40:35:59:05:c2:
dc:a1:a2:ff:96:73:c4:36:6b:89:79:42:54:7c:3b:
12:fb:b3:ee:d8:06:13:78:57:41:02:28:58:76:25:
2e:a8:0f:ac:8e:89:71:19:26:f2:d1:14:c7:51:d9:
d5:cd:79:fb:25:22:aa:51:ba:18:ed:f7:28:55:e4:
2d:5c:42:ca:3b:37:d7:63:a7:ab:59:f6:0e:9a:e8:
ed:b9:bf:41:6e:a2:91:8e:1a:15:c9:10:e3:1a:23:
e3:1d:da:c2:b7:ee:5f:34:b6:7e:41:fe:d4:86:a6:
60:68:de:36:84:f0:98:e5:61:a7:d7:b2:f4:35:1d:
cc:67:87:da:24:74:fe:b8:cd:4c:15:e5:69:67:ee:
dc:8f:35:40:d8:51:d0:d1:fa:e6:3e:4a:af:f3:5d:
71:57:20:30:5c:2a:7d:79:ce:3e:5f:0a:64:48:50:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:1E:9F:D1:4E:71:F4:B6:EA:BD:E6:FD:97:54:FE:ED:F2:D4:86
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.107.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c2:26:fb:63:ab:34:e6:1c:2c:ec:3d:24:73:ae:dc:e7:83:
7c:ac:6f:00:7f:d9:4e:87:e8:be:73:7c:7c:fc:a1:4b:6b:30:
6f:3d:9f:ee:90:a4:11:56:70:89:67:25:7a:a5:34:52:40:d3:
93:40:f5:74:b8:88:23:83:9b:29:f6:4c:f5:04:9b:a9:26:ee:
c8:f8:d3:6c:ec:25:8b:a1:94:67:6f:21:9e:64:71:50:ee:01:
bb:36:ad:be:35:1b:d9:bd:80:68:42:70:57:62:49:1a:33:aa:
df:1f:a9:4d:83:67:01:2a:a4:18:bc:d4:5c:ec:60:25:cc:65:
cf:1b:6b:28:08:da:1b:93:13:f4:1d:5c:87:53:3c:25:26:08:
c6:36:18:27:85:5a:1d:8d:dc:b6:28:0f:ae:70:ad:e9:c1:a0:
3a:66:64:d9:ef:4a:28:51:9c:c1:e1:01:37:f4:01:e9:4f:67:
df:1c:b6:dd:32:5d:8a:f9:74:ca:32:e1:75:76:34:5a:1b:c3:
ae:42:86:cd:08:42:18:b7:b4:69:53:68:64:35:5b:c8:8a:ea:
05:a4:96:ae:1e:a0:5b:f6:79:90:ca:a9:c2:b6:db:0e:b0:39:
0d:da:28:06:d2:3e:56:b6:cd:2a:31:ee:cf:ce:a7:af:4c:85:
53:99:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net