Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132352e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3132352e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: xX0tdEIA9T0523F0nUIh2g5ZROra1lxBSRcxHrasrko=
Subject key identifier: 96:9B:0D:E9:D6:B3:F0:73:D9:68:9A:36:D6:A3:ED:0A:BB:AC:6D:CF
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5D802EADDA143522819FEE683D87447365A359B7
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132352e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:01 +0000
ROA not before: Tue 05 Apr 2022 11:55:01 +0000
ROA not after: Tue 04 Apr 2023 12:00:01 +0000
asID: 17885
IP address blocks: 112.215.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:80:2e:ad:da:14:35:22:81:9f:ee:68:3d:87:44:73:65:a3:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:01 2022 GMT
Not After : Apr 4 12:00:01 2023 GMT
Subject: CN=969B0DE9D6B3F073D9689A36D6A3ED0ABBAC6DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:a9:3d:ec:01:a0:56:4d:3c:14:f9:5d:d2:
6e:0c:da:b0:aa:fe:77:ef:7e:18:91:07:4c:dd:f8:
de:d1:27:57:7f:20:00:85:8e:a4:fd:c2:cf:ca:7d:
db:c7:87:b0:cf:0d:40:aa:8a:72:a7:d0:17:d3:0b:
be:82:7f:78:b9:48:03:7c:a4:b8:ae:50:7a:ae:17:
11:69:4f:42:e4:7a:0e:91:ec:18:54:6e:e3:74:cd:
be:f0:c3:30:c8:d8:8f:c1:42:1b:b6:73:ba:e1:b3:
e5:86:e1:88:86:6c:b4:cd:0f:cf:50:c2:17:e8:cf:
36:1c:2a:31:9c:ff:b3:5a:78:02:4b:e0:29:d2:ce:
ec:8c:98:27:ce:4b:b1:61:6b:68:0b:0b:c4:30:6a:
08:e2:d1:47:69:ba:e4:db:bc:bf:49:aa:54:bb:8b:
4b:cf:fa:6a:08:d7:f4:56:ac:ef:79:d6:54:ed:5e:
00:70:1f:0a:08:74:47:37:34:b4:f9:e7:77:35:cf:
0f:e8:3f:e0:e3:5f:f6:19:7b:b9:a8:48:4f:12:84:
af:54:42:67:89:4f:d5:28:8b:10:5a:f1:bd:45:a7:
04:a8:d1:cf:64:94:2e:df:e1:ac:e6:90:f8:13:5f:
07:69:b5:37:b6:29:31:ee:6f:42:6d:64:97:3b:f3:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:0D:E9:D6:B3:F0:73:D9:68:9A:36:D6:A3:ED:0A:BB:AC:6D:CF
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132352e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.125.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f1:80:fa:c2:e4:15:5c:c0:a3:f2:d0:87:b6:70:b5:ea:09:
d2:98:ba:5f:ad:8d:10:ff:b8:2f:74:63:d9:08:5d:53:83:ef:
84:75:84:32:6e:29:cc:76:21:9d:80:91:3a:d4:2f:23:c9:1c:
32:a3:ed:8d:f4:0a:fd:41:62:bf:df:7c:19:38:12:e0:21:d2:
ca:93:93:86:32:93:b8:cb:eb:7d:f6:cb:37:e4:e1:b4:ac:3a:
64:8e:ad:7e:38:53:ce:bb:80:5d:ae:12:2e:92:a9:98:0c:49:
ca:3f:da:82:19:0b:65:21:4a:e1:b3:de:2e:d0:db:e9:fe:85:
aa:c3:f7:1d:b0:f5:1d:e6:95:d5:45:ca:af:b8:64:ff:32:ea:
6c:f8:8a:69:21:a4:e8:30:f5:48:86:f6:6a:91:4a:44:0c:43:
14:aa:0d:f1:1c:3e:68:76:df:46:f9:7f:ee:cf:6c:31:27:4f:
3b:86:2a:f5:26:4b:29:47:cd:c5:f3:f7:8e:c4:89:87:ad:1d:
35:49:b6:56:ad:ee:f2:4f:51:fb:7a:39:eb:c8:3f:45:6a:5e:
00:20:c0:db:fc:d0:3d:07:d6:e5:5b:f7:fb:c7:90:2e:6b:4a:
8e:5f:f2:50:83:c5:88:c0:b5:fb:68:3f:f4:f8:58:bf:7d:17:
18:dd:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net