Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133322e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3133322e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: BrRbJM7nNJtBzpEbpYHvZDqeemtavJi7sgpBASr32G8=
Subject key identifier: 58:34:59:FB:75:2F:8A:CD:57:0F:EB:63:11:A1:34:AC:95:4E:24:EC
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 3B56C5EE63D398DD727C21546E2CED52AA192C89
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133322e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:00 +0000
ROA not before: Tue 05 Apr 2022 11:55:00 +0000
ROA not after: Tue 04 Apr 2023 12:00:00 +0000
asID: 17885
IP address blocks: 112.215.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:56:c5:ee:63:d3:98:dd:72:7c:21:54:6e:2c:ed:52:aa:19:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:00 2022 GMT
Not After : Apr 4 12:00:00 2023 GMT
Subject: CN=583459FB752F8ACD570FEB6311A134AC954E24EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:b9:88:25:f5:33:32:f0:99:ed:14:37:c3:
95:00:5d:05:a6:41:ac:fc:22:92:24:f2:aa:6e:63:
30:86:a7:92:f0:8b:65:8e:53:6e:9a:25:0d:41:e8:
ea:90:49:28:37:b4:72:e6:54:5e:55:df:b3:16:8f:
44:44:e1:a2:bb:86:60:c8:4d:26:18:39:f9:d7:b3:
2f:2a:7b:4a:89:19:2b:3b:5a:7e:6a:5b:0c:8d:c3:
bf:e1:c9:c8:4d:75:92:73:bd:58:3f:f5:89:98:57:
1f:30:07:c8:7c:1a:0d:a7:b6:e2:ca:50:70:69:d8:
03:57:b0:36:06:b2:4a:67:98:3a:be:96:f7:cf:51:
2c:c7:02:46:ae:73:01:e5:eb:b2:1b:2d:e1:81:8e:
b5:33:0b:95:01:84:1e:a0:4c:b0:4f:99:c3:8e:2b:
fb:1c:08:36:de:7a:3a:e1:b8:da:df:bf:ca:72:a5:
1d:4a:76:bd:91:63:b6:57:77:c2:fa:91:64:a5:ff:
8e:e4:b0:92:b7:c3:e3:e1:8f:2f:ab:a9:34:d2:14:
3b:f7:55:df:4a:84:22:40:42:d5:52:34:d1:c2:63:
65:7b:e3:41:37:87:2f:97:ee:5e:00:5f:27:04:88:
bd:b5:8c:ee:4b:a0:06:a2:e9:2f:de:66:be:8a:3e:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:59:FB:75:2F:8A:CD:57:0F:EB:63:11:A1:34:AC:95:4E:24:EC
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133322e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.132.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d9:5e:34:5d:18:19:a7:e7:01:f1:85:b9:2e:4b:53:7f:88:
ce:f9:c7:ac:d4:a7:98:ae:ba:82:4e:1d:61:fb:1f:ea:c0:88:
6e:69:33:ac:02:3c:47:7d:9d:29:db:7d:74:7a:d9:e9:47:f3:
c4:8b:12:52:5b:8a:f5:e1:cc:87:05:23:2a:dd:a2:57:94:28:
bd:ba:e2:dc:c1:94:c5:07:d3:b2:5d:30:c7:22:87:8e:c7:0a:
59:81:bd:1c:f5:fa:ff:cc:75:6f:a6:9a:39:25:4c:bd:0c:5a:
52:e5:71:7b:fe:d7:c6:07:5b:8b:58:07:a3:3e:b0:25:5b:76:
82:11:bc:6c:b3:93:0c:47:25:a5:f5:c1:90:b8:09:c9:fc:28:
2f:06:52:4a:0a:4b:9f:8a:26:ca:5f:0c:95:1e:15:a5:ff:cc:
56:c2:aa:a1:67:61:66:0d:bc:b4:61:6c:2b:7d:5d:ed:09:2e:
50:a2:d4:5e:39:8d:75:cf:3c:08:a2:83:54:25:bd:2a:a8:79:
49:e3:7a:56:fd:2b:fb:93:b2:03:a9:7f:85:d7:e9:3f:5d:c6:
ff:88:a8:b4:ba:4d:0a:4a:27:4a:dc:bd:2f:90:65:76:54:12:
ca:bc:87:cd:c0:d9:b5:14:ab:7e:e9:62:9b:00:bf:b6:bc:71:
11:26:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net