Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130382e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3130382e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: R0Pcdn+seAv5shsfsBtmz3Im8zw1MtS9190gtH1mLU0=
Subject key identifier: 58:EF:52:4E:89:9D:35:48:92:6E:3E:DC:BF:77:7B:DE:11:C0:B7:9F
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0F23499F15D1E0684DDA8D0865F4E72D2FD518B1
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130382e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:00 +0000
ROA not before: Tue 05 Apr 2022 11:55:00 +0000
ROA not after: Tue 04 Apr 2023 12:00:00 +0000
asID: 17885
IP address blocks: 112.215.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:23:49:9f:15:d1:e0:68:4d:da:8d:08:65:f4:e7:2d:2f:d5:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:00 2022 GMT
Not After : Apr 4 12:00:00 2023 GMT
Subject: CN=58EF524E899D3548926E3EDCBF777BDE11C0B79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:48:4a:46:a7:34:a2:d7:84:75:a5:81:50:
bc:fe:af:35:df:c7:d1:c5:41:0e:35:75:ab:76:bb:
95:25:76:cf:bb:5a:91:2d:18:49:08:8e:ce:37:8c:
75:55:9e:c7:44:29:5d:ab:32:49:80:67:da:03:2e:
c8:5f:ad:e3:f5:cf:5a:74:31:fb:c2:6e:55:bc:f7:
4f:b5:e4:0d:3c:33:61:e9:14:f1:12:64:42:10:69:
0b:3e:7d:c0:46:ea:60:9f:a1:87:67:de:e7:38:3a:
93:92:5e:a6:0c:ad:70:81:06:eb:ba:c7:9d:8f:c4:
1b:8d:6e:8e:b9:66:ff:ca:0b:00:e3:b7:6b:82:10:
34:ee:8a:9e:e8:ff:a9:de:76:e0:8f:0a:03:ad:f1:
b4:c5:b5:71:0a:2f:90:54:7b:17:90:b2:ae:4f:43:
91:63:c6:87:e0:e0:e9:58:d4:44:5e:68:3e:8a:43:
f0:2d:ed:04:e4:06:8a:ba:5f:28:07:7b:6c:ab:a1:
a4:9e:0e:39:cf:e8:49:94:db:d3:9e:93:24:d8:3d:
1b:ee:06:cf:af:f0:76:98:6b:f7:db:ca:19:e6:ab:
16:08:59:d4:a1:e8:f7:ac:00:34:99:d9:97:80:7c:
6b:39:ed:51:5c:5e:d5:9d:9f:2a:fd:fb:09:09:81:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:52:4E:89:9D:35:48:92:6E:3E:DC:BF:77:7B:DE:11:C0:B7:9F
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3130382e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bf:1e:0c:5f:23:01:15:b4:dc:df:12:c8:56:f4:98:4e:00:
71:00:83:3a:90:a9:46:26:8a:79:3f:be:3e:f9:67:12:07:aa:
fd:e4:5a:3c:96:01:73:55:e2:6c:ec:83:19:00:17:d1:97:3a:
25:1f:fb:45:ba:9a:50:21:bb:ea:27:b4:70:19:de:38:e8:75:
29:f6:31:d7:22:de:98:e7:fc:07:ab:eb:ee:95:57:54:11:af:
72:a0:4b:81:73:3e:b8:0f:a0:9f:d2:44:a4:1e:e5:3a:8d:7b:
4c:e2:2f:64:fd:35:83:52:79:47:56:ac:70:46:7f:c5:d1:00:
ff:f2:c5:9a:8c:26:6f:c6:82:e0:c4:38:2f:f0:e8:72:06:ff:
fe:fd:f2:56:3a:54:2d:42:e1:f0:87:85:6a:1f:f6:f6:7e:ba:
c9:b4:3c:8b:bb:29:81:21:fa:c7:bb:3f:6f:08:b8:31:ad:2a:
82:66:88:0c:cf:e8:19:0f:75:a1:7d:59:0f:93:4c:f3:84:9a:
6f:43:7a:36:b9:0b:db:05:2f:01:a2:a9:7b:40:35:ee:ce:de:
b0:d1:79:13:85:c2:dc:ce:c1:06:3f:d3:bb:d3:49:14:46:8b:
07:74:41:10:61:0f:6f:d0:2e:3c:63:bf:6b:7b:21:55:6f:37:
85:9d:be:84
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDyNJnxXR4GhN2o0IZfTnLS/VGLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDUxMTU1MDBaFw0yMzA0MDQxMjAwMDBaMDMxMTAvBgNV
BAMTKDU4RUY1MjRFODk5RDM1NDg5MjZFM0VEQ0JGNzc3QkRFMTFDMEI3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJUhKRqc0oteEdaWBULz+rzXf
x9HFQQ41dat2u5Ulds+7WpEtGEkIjs43jHVVnsdEKV2rMkmAZ9oDLshfreP1z1p0
MfvCblW890+15A08M2HpFPESZEIQaQs+fcBG6mCfoYdn3uc4OpOSXqYMrXCBBuu6
x52PxBuNbo65Zv/KCwDjt2uCEDTuip7o/6neduCPCgOt8bTFtXEKL5BUexeQsq5P
Q5Fjxofg4OlY1EReaD6KQ/At7QTkBoq6XygHe2yroaSeDjnP6EmU29OekyTYPRvu
Bs+v8HaYa/fbyhnmqxYIWdSh6PesADSZ2ZeAfGs57VFcXtWdnyr9+wkJgSU9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWO9STomdNUiSbj7cv3d73hHAt58wHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTMwMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNdsMA0GCSqG
SIb3DQEBCwUAA4IBAQCjvx4MXyMBFbTc3xLIVvSYTgBxAIM6kKlGJop5P74++WcS
B6r95Fo8lgFzVeJs7IMZABfRlzolH/tFuppQIbvqJ7RwGd446HUp9jHXIt6Y5/wH
q+vulVdUEa9yoEuBcz64D6Cf0kSkHuU6jXtM4i9k/TWDUnlHVqxwRn/F0QD/8sWa
jCZvxoLgxDgv8OhyBv/+/fJWOlQtQuHwh4VqH/b2frrJtDyLuymBIfrHuz9vCLgx
rSqCZogMz+gZD3WhfVkPk0zzhJpvQ3o2uQvbBS8Boql7QDXuzt6w0XkThcLczsEG
P9O700kURosHdEEQYQ9v0C48Y79reyFVbzeFnb6E
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net