Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131332e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3131332e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 1aYCAV9o7+oueG7gvjitjBwOWsSSVduzSAO36zHsWDE=
Subject key identifier: 3F:29:CF:19:83:59:6C:B7:AE:E5:68:C2:53:1C:7A:86:33:4C:2C:80
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 59AC7B439F757BB674DA68CF3FE9E0B4D9D47146
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131332e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:01 +0000
ROA not before: Tue 05 Apr 2022 11:55:01 +0000
ROA not after: Tue 04 Apr 2023 12:00:01 +0000
asID: 17885
IP address blocks: 112.215.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ac:7b:43:9f:75:7b:b6:74:da:68:cf:3f:e9:e0:b4:d9:d4:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:01 2022 GMT
Not After : Apr 4 12:00:01 2023 GMT
Subject: CN=3F29CF1983596CB7AEE568C2531C7A86334C2C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:94:12:6a:4b:61:7c:06:e2:a4:41:e2:6b:
fa:a8:ed:45:17:79:7a:2e:5c:1d:63:ff:d0:db:7d:
aa:f3:cc:71:44:05:21:fd:e9:3d:78:cc:74:9e:85:
7a:a1:e5:31:9b:65:02:02:3d:be:11:9f:75:2f:d9:
88:e7:4a:94:95:53:b9:4d:68:37:36:f1:8f:7f:e5:
50:7d:17:d1:9e:aa:69:c1:3a:8b:72:a3:e0:53:48:
53:77:ef:74:25:9c:27:88:c7:16:65:f4:79:5a:bc:
65:1b:75:ca:a2:43:29:f3:e9:0e:2c:a8:0c:46:c5:
cb:a1:e8:98:24:3d:37:05:27:b5:54:1d:79:9e:84:
6c:7d:d0:5a:64:9f:be:c4:7b:3c:af:d1:6e:fc:db:
f1:e4:5d:fb:29:20:4d:e0:c3:c0:07:dd:d9:aa:2b:
6a:f2:9a:b8:28:d1:b6:d0:ab:4a:ba:7d:a4:e0:2a:
11:cb:8f:8f:8f:22:91:93:ca:21:39:e8:31:c5:47:
55:ff:b0:29:b7:3a:8d:0b:f4:53:fb:48:70:03:6a:
fc:94:74:0d:15:b6:68:db:dd:47:35:5c:56:d7:08:
71:a4:4e:6b:3b:59:cd:f9:fe:92:c4:b0:1b:41:97:
40:44:7a:ee:be:d5:84:35:6b:b5:e1:98:41:78:28:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:CF:19:83:59:6C:B7:AE:E5:68:C2:53:1C:7A:86:33:4C:2C:80
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131332e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4b:bb:1d:76:4e:bc:d9:15:6f:b0:e8:d1:ac:22:43:0e:e7:
1e:b0:dd:4b:ed:85:37:56:03:9e:73:1d:bc:77:e7:a1:e5:ca:
2b:69:ff:c6:0a:46:cf:d3:da:a7:75:27:04:48:7c:2e:98:e5:
9c:e8:a4:eb:06:05:77:42:d1:85:9b:07:52:4e:b6:1c:50:44:
9d:88:2d:f5:82:57:6e:e0:ae:2b:70:40:45:a7:04:b3:04:e5:
8c:bc:ac:ba:e9:47:7a:e5:5f:5f:c9:65:52:51:28:d7:96:96:
6f:cb:8a:10:c4:ab:f5:af:c0:f9:9a:b9:58:32:62:be:ef:78:
5c:7d:49:2c:07:82:b2:4c:7a:0b:8d:14:6f:cc:67:bc:1f:dd:
4b:f6:4d:db:9a:14:52:5d:a1:b2:cf:4b:0b:0d:c4:7e:b6:3b:
3c:fa:a3:30:85:32:85:2b:0d:c4:1a:7b:45:90:11:a9:8c:9c:
b8:49:a1:23:eb:7d:85:a6:80:86:d2:09:7a:7d:38:ad:d5:f6:
97:4a:1c:94:37:6f:a3:e9:ce:36:ed:68:ce:e0:d0:7f:8b:89:
6a:13:01:9b:c5:34:27:9d:2e:2c:73:50:70:0d:ab:31:37:56:
b0:68:2b:72:52:ee:c1:25:35:6a:75:55:e9:b0:2a:06:d5:76:
75:39:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net