Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134372e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3134372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: n35jJmg8BYxtP2/dOJM1SUHQ31OSoPww6qrKX3zcqmM=
Subject key identifier: 8E:E7:F0:7F:C9:04:1E:E9:DA:1A:BD:C2:C0:C3:B9:67:CC:53:E1:F7
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 28EB9251647C7D86341907850C97FB651C7A70F8
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134372e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:00 +0000
ROA not before: Thu 07 Apr 2022 07:55:00 +0000
ROA not after: Thu 06 Apr 2023 08:00:00 +0000
asID: 24203
IP address blocks: 112.215.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:eb:92:51:64:7c:7d:86:34:19:07:85:0c:97:fb:65:1c:7a:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:00 2022 GMT
Not After : Apr 6 08:00:00 2023 GMT
Subject: CN=8EE7F07FC9041EE9DA1ABDC2C0C3B967CC53E1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:1a:cd:32:18:21:6c:99:0e:54:1c:17:de:
ed:db:65:ac:01:70:d0:5d:1d:69:66:f4:05:63:57:
67:89:a0:d9:74:50:18:0f:be:f5:a0:8c:b6:86:29:
ba:0a:89:1a:eb:12:d9:18:cd:f7:b5:66:3c:f8:b3:
6d:a9:e6:49:72:dd:3c:de:1c:a5:fb:fd:09:3f:b8:
72:71:11:73:9b:93:69:f2:90:48:ed:ec:f9:cf:8a:
0b:85:2c:50:4b:50:a1:8a:dd:50:b7:7c:54:67:61:
26:d5:c5:3c:84:d9:23:27:c1:8f:61:67:d2:76:58:
8e:e5:12:11:4e:00:07:f9:fa:dc:5b:8d:a0:b6:8d:
b1:10:14:d9:65:20:f6:6b:6d:54:e3:18:2f:ae:69:
31:7e:f0:5c:29:96:6a:25:56:47:7d:0a:66:18:86:
9c:e5:ca:98:b2:24:45:10:c7:d7:ce:ce:f8:d9:07:
8e:dc:7b:2c:2e:37:de:07:f6:5b:30:53:0f:d4:83:
79:36:f4:33:64:12:60:8e:f2:37:ba:ca:52:32:24:
c2:72:9d:f6:89:8a:74:20:04:75:df:7d:7a:fe:44:
93:38:60:13:2e:43:c5:a9:7e:1f:a4:07:f0:6a:07:
9d:39:5e:40:7c:13:d1:b4:81:bf:51:90:92:d9:6a:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:F0:7F:C9:04:1E:E9:DA:1A:BD:C2:C0:C3:B9:67:CC:53:E1:F7
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:dd:c8:38:bf:93:69:af:82:ec:1e:8b:9f:15:49:c8:05:46:
e5:78:5c:c0:6e:0e:f4:8f:05:ed:af:a4:b6:12:a1:60:7a:d2:
3b:c6:61:84:78:d1:44:fd:3e:ee:06:c1:0a:cc:56:68:1d:78:
28:4c:3b:66:49:b8:25:0f:86:2e:32:2a:08:e1:c1:bc:e0:52:
55:15:db:70:89:f1:33:f4:60:b6:de:85:eb:a5:95:02:4d:f2:
0b:aa:43:1e:41:80:7d:8a:3d:03:cc:96:4b:31:4d:d7:90:f8:
ae:05:cc:99:57:7d:0c:0c:b7:f6:34:d4:57:08:d3:60:3f:c3:
79:62:8e:6b:ad:fa:c9:7c:fb:ab:1b:2a:9b:93:b6:66:2a:34:
e7:f2:c5:3e:26:65:2d:ab:36:e7:0b:27:ea:aa:78:11:85:12:
94:2a:09:1c:50:c5:5b:e6:24:d8:71:f0:06:0a:e8:58:51:2d:
0d:96:07:15:bd:00:6b:0e:d9:1a:e0:9b:0a:e7:fe:b1:9f:73:
ba:aa:75:cb:32:71:c2:81:e2:ab:c8:d4:69:c2:fe:e4:a3:67:
d2:b1:6c:eb:3f:7f:75:f1:70:8a:d0:48:34:eb:d5:32:4f:4f:
19:29:cf:f0:45:86:0a:f5:81:b0:cb:6e:d8:bd:17:4c:b3:bd:
33:03:2c:f0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKOuSUWR8fYY0GQeFDJf7ZRx6cPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDcwNzU1MDBaFw0yMzA0MDYwODAwMDBaMDMxMTAvBgNV
BAMTKDhFRTdGMDdGQzkwNDFFRTlEQTFBQkRDMkMwQzNCOTY3Q0M1M0UxRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAhrNMhghbJkOVBwX3u3bZawB
cNBdHWlm9AVjV2eJoNl0UBgPvvWgjLaGKboKiRrrEtkYzfe1Zjz4s22p5kly3Tze
HKX7/Qk/uHJxEXObk2nykEjt7PnPiguFLFBLUKGK3VC3fFRnYSbVxTyE2SMnwY9h
Z9J2WI7lEhFOAAf5+txbjaC2jbEQFNllIPZrbVTjGC+uaTF+8FwplmolVkd9CmYY
hpzlypiyJEUQx9fOzvjZB47ceywuN94H9lswUw/Ug3k29DNkEmCO8je6ylIyJMJy
nfaJinQgBHXffXr+RJM4YBMuQ8Wpfh+kB/BqB505XkB8E9G0gb9RkJLZavFtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjufwf8kEHunaGr3CwMO5Z8xT4fcwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNeTMA0GCSqG
SIb3DQEBCwUAA4IBAQBs3cg4v5Npr4LsHoufFUnIBUbleFzAbg70jwXtr6S2EqFg
etI7xmGEeNFE/T7uBsEKzFZoHXgoTDtmSbglD4YuMioI4cG84FJVFdtwifEz9GC2
3oXrpZUCTfILqkMeQYB9ij0DzJZLMU3XkPiuBcyZV30MDLf2NNRXCNNgP8N5Yo5r
rfrJfPurGyqbk7ZmKjTn8sU+JmUtqzbnCyfqqngRhRKUKgkcUMVb5iTYcfAGCuhY
US0NlgcVvQBrDtka4JsK5/6xn3O6qnXLMnHCgeKryNRpwv7ko2fSsWzrP3918XCK
0Eg069UyT08ZKc/wRYYK9YGwy27YvRdMs70zAyzw
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net