Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3133372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 3RB48cAvXPVo9fqC9z4qCDKeOwH1dkuicQr8cc7E0aE=
Subject key identifier: 56:D9:3E:34:92:0F:C4:CF:A4:E0:70:EC:BB:70:0C:D6:4E:1B:A8:1D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1E9AC581CFDCD9E1590074C0FDA79F91DF8AF689
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133372e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 12:00:00 +0000
ROA not before: Tue 05 Apr 2022 11:55:00 +0000
ROA not after: Tue 04 Apr 2023 12:00:00 +0000
asID: 17885
IP address blocks: 112.215.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9a:c5:81:cf:dc:d9:e1:59:00:74:c0:fd:a7:9f:91:df:8a:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 11:55:00 2022 GMT
Not After : Apr 4 12:00:00 2023 GMT
Subject: CN=56D93E34920FC4CFA4E070ECBB700CD64E1BA81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:e8:ae:69:7e:1a:79:03:d9:f4:ac:9b:99:
57:c7:7b:b8:da:66:37:41:4f:99:01:69:27:24:3a:
d2:6c:db:29:48:4e:97:f4:3c:d3:93:e8:d9:d9:f5:
4c:81:6a:9e:f2:a0:77:f0:72:35:28:bb:01:64:ce:
bc:8d:d0:89:9b:19:3d:a0:a6:7f:8d:9d:bc:3d:c6:
e0:12:2c:28:d8:cf:55:49:e2:14:ac:bc:41:e7:ef:
c0:92:d1:34:5f:00:a1:60:62:ba:79:66:6b:42:2e:
51:68:43:56:81:fd:5c:1a:d4:fb:ed:10:91:ac:17:
73:78:65:b3:d1:37:be:90:8b:b7:ef:3b:bc:cd:33:
e7:9e:ff:c4:98:59:7c:74:d2:ec:9b:dd:e2:25:33:
c9:8d:9d:94:58:38:ce:14:d2:88:70:0f:3a:e5:39:
f5:50:33:5d:65:2a:7e:47:a7:25:7c:c9:86:60:5b:
78:8b:1b:2c:19:45:cd:d4:ea:f6:f5:28:38:48:ab:
31:49:f3:dd:83:71:4e:04:0d:9c:a5:3e:ae:87:d6:
5c:54:ce:74:63:b8:3d:26:84:83:c6:d7:2b:a3:b0:
ec:1f:86:9e:0e:74:e5:2e:24:a7:cd:7b:e3:11:fc:
d6:8b:08:1c:45:3f:e7:8d:41:88:0c:35:da:8a:34:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:3E:34:92:0F:C4:CF:A4:E0:70:EC:BB:70:0C:D6:4E:1B:A8:1D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3133372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ff:09:c9:14:16:50:0f:e2:3b:d7:52:4e:2d:13:2c:e4:2f:
0d:4f:aa:bb:e8:29:27:d8:20:85:3d:78:73:51:27:c0:85:f5:
0d:fa:90:f5:2e:e5:0e:1c:41:82:e8:a5:32:e7:0c:19:e1:76:
76:5a:29:85:54:c2:7e:76:bc:ca:07:b9:fe:14:f4:0e:2f:a9:
10:1a:13:53:57:1d:ed:69:ff:61:c2:7a:fd:f8:45:f2:d3:b2:
66:67:6c:d8:3b:72:c7:c7:b7:63:0e:30:3e:57:4c:c9:cd:9e:
63:df:35:32:3f:87:3b:ef:01:ae:6e:ec:b5:e2:7b:50:2a:98:
77:96:35:f5:15:68:e6:ea:03:e8:df:7f:51:cd:0b:b1:3d:e5:
f9:de:e1:bb:ce:fd:51:a3:03:e7:30:e8:d2:73:27:0e:cd:f8:
c5:04:44:cb:11:4f:5c:00:db:6f:5b:bc:b3:37:8b:95:c3:70:
4e:c8:eb:73:b3:8f:de:50:a8:2c:ca:f7:bd:c1:0e:11:25:64:
e3:bb:ed:c9:ff:ca:26:63:9f:c3:8a:1d:0c:94:44:3a:0f:cb:
90:cd:6f:17:dd:e2:96:c2:32:ca:a5:53:6e:1e:91:e3:c2:b5:
36:88:11:bd:66:d0:ed:0e:05:83:53:23:62:a9:6c:d7:a8:69:
3f:fc:20:3e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHprFgc/c2eFZAHTA/aefkd+K9okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDUxMTU1MDBaFw0yMzA0MDQxMjAwMDBaMDMxMTAvBgNV
BAMTKDU2RDkzRTM0OTIwRkM0Q0ZBNEUwNzBFQ0JCNzAwQ0Q2NEUxQkE4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDih+iuaX4aeQPZ9KybmVfHe7ja
ZjdBT5kBaSckOtJs2ylITpf0PNOT6NnZ9UyBap7yoHfwcjUouwFkzryN0ImbGT2g
pn+Nnbw9xuASLCjYz1VJ4hSsvEHn78CS0TRfAKFgYrp5ZmtCLlFoQ1aB/Vwa1Pvt
EJGsF3N4ZbPRN76Qi7fvO7zNM+ee/8SYWXx00uyb3eIlM8mNnZRYOM4U0ohwDzrl
OfVQM11lKn5HpyV8yYZgW3iLGywZRc3U6vb1KDhIqzFJ892DcU4EDZylPq6H1lxU
znRjuD0mhIPG1yujsOwfhp4OdOUuJKfNe+MR/NaLCBxFP+eNQYgMNdqKNIvLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVtk+NJIPxM+k4HDsu3AM1k4bqB0wHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTMzMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNeJMA0GCSqG
SIb3DQEBCwUAA4IBAQB9/wnJFBZQD+I711JOLRMs5C8NT6q76Ckn2CCFPXhzUSfA
hfUN+pD1LuUOHEGC6KUy5wwZ4XZ2WimFVMJ+drzKB7n+FPQOL6kQGhNTVx3taf9h
wnr9+EXy07JmZ2zYO3LHx7djDjA+V0zJzZ5j3zUyP4c77wGubuy14ntQKph3ljX1
FWjm6gPo339RzQuxPeX53uG7zv1RowPnMOjScycOzfjFBETLEU9cANtvW7yzN4uV
w3BOyOtzs4/eUKgsyve9wQ4RJWTju+3J/8omY5/Dih0MlEQ6D8uQzW8X3eKWwjLK
pVNuHpHjwrU2iBG9ZtDtDgWDUyNiqWzXqGk//CA+
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net