Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131382e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3131382e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: qglBiWV92qZCVMOUuW657Tr3B0fCQ/XfaxByB4wKUCI=
Subject key identifier: 9A:58:E9:D6:26:5D:77:A7:FF:FB:DB:6A:81:6C:27:20:9E:55:D2:F8
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 4A969B226503EA5E83ED6C75F524C2B19DA884A2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131382e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:00 +0000
ROA not before: Tue 05 Apr 2022 11:55:00 +0000
ROA not after: Tue 04 Apr 2023 12:00:00 +0000
asID: 17885
IP address blocks: 112.215.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:96:9b:22:65:03:ea:5e:83:ed:6c:75:f5:24:c2:b1:9d:a8:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:00 2022 GMT
Not After : Apr 4 12:00:00 2023 GMT
Subject: CN=9A58E9D6265D77A7FFFBDB6A816C27209E55D2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:f4:23:d1:a9:7a:ba:7d:5b:b1:56:6e:5f:
a4:20:ae:dd:6e:0d:8d:fc:f4:c0:fa:5d:e5:83:ee:
90:a0:dc:e2:e1:6d:70:0c:02:6e:f4:98:5a:4f:9f:
65:a9:a9:16:2e:52:7f:a1:12:9a:e2:c7:c4:d6:10:
90:49:ea:69:6d:87:a0:46:fb:9e:c2:10:97:1f:ba:
42:fc:9c:f3:03:64:1f:42:bc:17:f7:14:c7:cc:da:
04:66:35:e5:99:96:db:74:b3:b8:1a:1d:45:7a:57:
3f:7a:62:1a:1b:ed:80:b9:7d:66:fa:3b:e4:9b:3c:
0a:0f:6e:5a:61:aa:96:0b:85:4d:55:91:a0:ec:5f:
36:3e:18:cf:73:d0:b3:b5:72:58:a2:b3:a7:14:80:
16:8c:7b:c5:35:c7:0f:3f:ee:c5:7b:8a:a8:53:11:
09:a6:5c:d3:c7:b4:4d:3d:aa:df:d5:e3:97:f0:6c:
22:d8:c1:10:c9:eb:09:4e:1d:8b:98:0f:b8:ea:aa:
a9:a1:dd:fa:e3:ac:c0:d4:10:ca:8f:9b:83:33:96:
8f:5a:09:b4:54:1b:df:0e:14:2e:42:a2:1a:11:05:
29:b6:31:9b:bf:83:dc:b6:ea:13:66:79:8f:bb:65:
2f:e6:c6:a0:4d:f3:84:d2:aa:2a:1b:9e:5a:db:df:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:E9:D6:26:5D:77:A7:FF:FB:DB:6A:81:6C:27:20:9E:55:D2:F8
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3131382e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.118.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:05:b2:c3:4f:fb:4a:02:b6:1c:97:8f:f4:ae:fb:78:0d:
00:81:51:c7:2b:80:ef:17:0b:ea:c2:49:39:ac:d0:c6:dc:f2:
a0:3c:c8:12:62:91:a7:4d:e3:55:8f:3b:d7:02:55:00:79:52:
02:c3:d5:9c:1b:ce:5d:58:a0:96:36:0c:d8:52:4b:82:3c:ed:
b9:36:2d:9f:20:91:ee:19:59:5b:42:bb:17:b7:18:41:61:df:
04:d8:96:0e:9f:86:a7:98:88:8e:6d:ce:31:99:0a:c1:e9:3b:
f7:da:c7:29:9b:ed:57:3d:c0:a9:1d:03:03:0b:de:60:1f:3b:
1b:23:79:a7:1b:22:d4:4f:76:e2:3b:b4:80:7e:1c:98:04:bc:
fe:a7:0b:af:b1:1d:f2:b5:a2:ce:87:81:0c:24:89:2a:61:57:
e4:92:f4:26:d5:41:74:20:73:67:d3:d6:19:4c:e7:7a:c9:19:
5e:c2:e5:0b:bc:54:83:9c:a5:e3:97:81:f6:83:58:f5:cd:30:
76:e6:6e:17:b7:e9:5c:bf:aa:8c:fa:8f:d6:e1:8a:f7:78:7a:
83:c0:6a:d0:6d:92:08:58:64:c2:45:55:49:51:65:f7:20:44:
6e:cb:e7:c7:fd:65:cc:c5:00:7b:ec:f9:66:64:c1:46:2e:b7:
aa:1c:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net