Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31312e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e31312e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: /0UyqWWmnnktv1Qfi/9gi1ZIbmqwU6F+yTzEjLTUoT4=
Subject key identifier: 33:99:C1:48:99:50:D1:44:7D:91:61:46:44:C2:C5:DC:3F:B9:1B:4B
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 3A07BE3A7A7B44B16DF21826B21583B4C5FE18C9
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31312e302f32342d3234203d3e203137383835.roa
Signing time: Fri 01 Apr 2022 21:00:00 +0000
ROA not before: Fri 01 Apr 2022 20:55:00 +0000
ROA not after: Fri 31 Mar 2023 21:00:00 +0000
asID: 17885
IP address blocks: 112.215.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:07:be:3a:7a:7b:44:b1:6d:f2:18:26:b2:15:83:b4:c5:fe:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 1 20:55:00 2022 GMT
Not After : Mar 31 21:00:00 2023 GMT
Subject: CN=3399C1489950D1447D91614644C2C5DC3FB91B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:08:f2:fa:a7:78:a0:ba:2d:2c:bb:75:ae:
ab:c1:8e:d8:3f:37:bd:62:ce:e2:ad:d3:09:0a:7c:
89:4f:fc:9c:99:f2:6f:73:56:69:6e:cf:c3:68:c0:
5c:d4:e0:e9:f4:9b:3e:c1:5d:bb:08:35:36:87:81:
50:78:56:11:30:64:4c:9c:1d:39:25:55:3c:96:44:
ba:61:be:29:dc:f9:25:88:e6:e3:5d:76:fb:9a:32:
ad:62:ad:04:c8:0d:f1:12:97:cf:fc:30:ec:87:cc:
c6:19:92:13:25:e3:8b:5b:8a:e8:22:c4:ba:1e:4e:
9b:99:76:1f:42:f0:f2:7e:2d:3d:f3:b5:07:6d:f7:
c1:f9:f0:cd:a3:2a:6b:15:5b:59:2e:24:2a:d4:8b:
1d:8e:e7:21:2f:b6:f5:74:85:d0:aa:5e:e9:9d:dc:
fc:e6:8c:17:b4:8a:74:f5:cd:20:fa:03:92:5b:8c:
3c:1f:4a:71:b2:f2:8e:a3:10:9c:c1:30:b7:b4:42:
3c:71:bc:4e:6a:6f:55:15:68:29:a6:b9:bc:5e:df:
08:a4:78:eb:53:8e:15:c1:97:ea:ed:c5:e4:59:bf:
2f:3b:e7:29:07:e7:1a:a2:ff:c8:72:23:a1:64:08:
44:07:69:ad:79:71:93:2e:69:7f:53:1a:6a:ca:26:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:C1:48:99:50:D1:44:7D:91:61:46:44:C2:C5:DC:3F:B9:1B:4B
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31312e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.11.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c7:ae:62:9e:69:a6:1f:ca:1f:70:47:7f:13:13:f3:c4:8c:
0b:08:b6:73:11:59:0d:f6:f6:0a:0c:f8:57:cd:df:25:b4:16:
9d:04:74:6c:2f:f2:c2:7e:52:be:dd:95:51:44:dd:1c:55:c0:
03:fd:88:89:a6:20:ba:f8:df:99:2d:e3:de:a4:ec:ec:e6:30:
23:20:18:d5:4c:90:f6:cc:00:23:d4:16:af:7d:0e:e2:4c:21:
5a:f2:6c:b6:d6:d9:d3:ec:00:d9:4c:4b:bf:4f:4f:27:29:be:
58:0c:0c:5c:18:33:c0:ef:e5:3f:21:ac:83:3e:a3:e3:5d:26:
5d:01:e2:10:68:ff:3c:89:a6:54:0b:7b:d1:9e:b7:c7:d6:30:
73:0b:a5:d8:3b:32:6f:e2:95:cb:91:3c:d1:fb:c0:50:17:f0:
f6:82:a9:ba:c3:a5:cd:80:a6:5c:f6:a0:a6:63:90:03:8b:59:
15:96:37:10:38:0d:49:e0:b6:13:52:13:cb:e8:32:e0:6e:6f:
97:d9:cd:32:e4:a8:50:5a:3c:d8:2c:7e:d2:9c:a4:7c:0c:4a:
ff:30:7b:cc:bd:30:bd:81:d1:a9:e6:64:ce:8f:4b:88:b0:00:
93:98:af:82:bf:2f:1a:2a:80:9c:ea:55:1f:24:8e:b4:94:fc:
81:b3:7f:f0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOge+Onp7RLFt8hgmshWDtMX+GMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDEyMDU1MDBaFw0yMzAzMzEyMTAwMDBaMDMxMTAvBgNV
BAMTKDMzOTlDMTQ4OTk1MEQxNDQ3RDkxNjE0NjQ0QzJDNURDM0ZCOTFCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmQjy+qd4oLotLLt1rqvBjtg/
N71izuKt0wkKfIlP/JyZ8m9zVmluz8NowFzU4On0mz7BXbsINTaHgVB4VhEwZEyc
HTklVTyWRLphvinc+SWI5uNddvuaMq1irQTIDfESl8/8MOyHzMYZkhMl44tbiugi
xLoeTpuZdh9C8PJ+LT3ztQdt98H58M2jKmsVW1kuJCrUix2O5yEvtvV0hdCqXumd
3PzmjBe0inT1zSD6A5JbjDwfSnGy8o6jEJzBMLe0QjxxvE5qb1UVaCmmubxe3wik
eOtTjhXBl+rtxeRZvy875ykH5xqi/8hyI6FkCEQHaa15cZMuaX9TGmrKJuBbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUM5nBSJlQ0UR9kWFGRMLF3D+5G0swHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHDXCzANBgkqhkiG
9w0BAQsFAAOCAQEAkseuYp5pph/KH3BHfxMT88SMCwi2cxFZDfb2Cgz4V83fJbQW
nQR0bC/ywn5Svt2VUUTdHFXAA/2IiaYguvjfmS3j3qTs7OYwIyAY1UyQ9swAI9QW
r30O4kwhWvJsttbZ0+wA2UxLv09PJym+WAwMXBgzwO/lPyGsgz6j410mXQHiEGj/
PImmVAt70Z63x9Ywcwul2Dsyb+KVy5E80fvAUBfw9oKpusOlzYCmXPagpmOQA4tZ
FZY3EDgNSeC2E1ITy+gy4G5vl9nNMuSoUFo82Cx+0pykfAxK/zB7zL0wvYHRqeZk
zo9LiLAAk5ivgr8vGiqAnOpVHySOtJT8gbN/8A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net