Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132392e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3132392e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 5fXlefjlegDJEAvZeB4ue9NMt4/tyOz9lvE0g/twOjk=
Subject key identifier: 55:8F:D5:52:26:FC:8C:26:D5:C9:FE:47:DC:F0:7A:B3:07:58:56:99
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7F232AA3DB16E9A3DBF4DA66C3C72B9FA6405674
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132392e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:02 +0000
ROA not before: Tue 05 Apr 2022 11:55:02 +0000
ROA not after: Tue 04 Apr 2023 12:00:02 +0000
asID: 17885
IP address blocks: 112.215.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:23:2a:a3:db:16:e9:a3:db:f4:da:66:c3:c7:2b:9f:a6:40:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:02 2022 GMT
Not After : Apr 4 12:00:02 2023 GMT
Subject: CN=558FD55226FC8C26D5C9FE47DCF07AB307585699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:12:a8:a8:82:ae:c5:70:20:06:ed:45:f7:
93:38:49:c2:e7:ac:c7:94:b8:24:b4:c4:8c:3c:df:
17:81:d7:9c:1a:0b:6c:a4:8e:9c:47:06:b3:b3:d9:
bc:73:56:fa:d8:58:f3:99:9c:84:6e:91:c5:44:74:
94:54:27:84:36:00:cf:35:51:ce:a1:ac:8e:e5:4a:
f9:b2:58:68:c5:40:78:68:92:aa:cb:50:a3:68:0b:
f8:4c:f7:2b:55:7a:fc:3c:8d:38:13:63:66:d1:f9:
f8:c6:ea:37:16:e0:f5:17:14:65:60:2d:dc:6a:09:
57:cc:ad:43:58:a8:4f:d2:5b:25:18:a8:b7:a4:7c:
dd:f4:22:7e:49:a3:39:33:50:e3:2a:3d:9a:b7:a5:
f5:17:80:1c:5f:88:6c:f7:91:6f:ba:66:b5:ea:a0:
c1:c7:ae:27:92:fc:b6:1c:79:8e:6b:04:67:4d:63:
bb:da:89:bd:fd:44:75:a8:ee:93:9f:0e:fc:49:bb:
b2:e3:ce:63:51:19:42:cb:68:8c:36:45:6a:e7:42:
0a:f2:15:54:44:bb:52:f4:a9:47:6e:60:36:72:f2:
cc:1e:14:69:ab:6b:76:94:5b:75:e8:35:1c:c5:3e:
1a:4c:37:ee:a9:3f:6f:bd:a5:39:f3:a0:f0:8c:bf:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:D5:52:26:FC:8C:26:D5:C9:FE:47:DC:F0:7A:B3:07:58:56:99
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3132392e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.129.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e0:5e:a7:22:72:19:d9:39:fb:2b:0d:ec:0b:7e:35:14:6c:
77:2c:35:b8:ca:6b:fa:0d:49:b7:ab:f8:12:e6:ea:a6:fd:6d:
99:c5:e1:df:14:0e:c6:7e:bf:50:00:d6:8b:af:06:5a:d9:fb:
1b:5c:af:6f:31:ac:6d:19:e6:38:9a:b4:88:a7:8e:fb:50:83:
90:c9:7e:9e:ab:23:9f:67:e1:2b:ad:cc:94:92:8d:cb:4c:f8:
e8:e7:b1:dc:7e:59:0e:19:51:93:58:04:81:ad:d0:f3:f4:08:
17:9e:05:29:52:e1:3d:56:06:29:4e:15:b0:ee:17:18:fb:3d:
f3:ca:be:8f:1d:85:49:20:9f:79:9c:44:87:18:c2:cb:4b:aa:
d2:d7:6a:16:13:6e:ae:21:e3:43:25:20:a2:54:c0:4d:0d:89:
62:e0:fb:77:21:7d:98:d7:a8:16:24:19:5d:df:eb:3b:14:05:
55:96:26:3a:3d:a1:c0:f0:7b:83:2a:54:20:33:d8:08:31:47:
76:a1:3c:a0:a7:3d:96:03:0f:00:72:f9:67:24:97:d4:7b:7e:
61:e6:d0:c1:4c:0f:2d:ab:e6:78:ca:b3:cc:17:2d:93:a7:88:
e9:d7:c2:dc:bb:67:f6:85:4f:cc:50:b0:d6:3b:b3:5c:67:d0:
a7:a5:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net