Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134382e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3134382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: ZNWIlOA7OxQ9c8Pw1LruBm5wl7uQWjzWdOhUwFhx65g=
Subject key identifier: 1D:53:99:FC:4E:AB:DB:0B:45:0D:DF:B4:BA:1A:9A:18:B9:E6:E8:F1
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 53FF1006E6DD87A2627CD3377A13618DEA5E2C1E
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134382e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:01 +0000
ROA not before: Thu 07 Apr 2022 07:55:01 +0000
ROA not after: Thu 06 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 112.215.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ff:10:06:e6:dd:87:a2:62:7c:d3:37:7a:13:61:8d:ea:5e:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:01 2022 GMT
Not After : Apr 6 08:00:01 2023 GMT
Subject: CN=1D5399FC4EABDB0B450DDFB4BA1A9A18B9E6E8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:1a:b7:f4:fc:16:ae:df:8b:59:29:74:18:
90:c0:fa:5e:61:ad:3e:6e:a2:81:f5:e3:0e:9e:30:
34:9c:0d:5d:75:1e:6e:1d:07:41:56:b6:15:bb:e7:
b7:ad:32:c3:b6:fc:fc:16:64:5e:f8:97:63:82:aa:
1b:0a:5c:41:98:fa:db:9c:6c:b8:04:14:12:07:23:
c3:22:b4:bf:73:e7:cc:47:c0:f8:8a:33:e0:3e:f3:
a2:c6:e2:5a:7e:01:81:73:2c:93:5b:ae:84:c4:cd:
bf:94:4e:9d:42:cc:26:81:4a:27:87:c1:8d:79:9c:
39:8a:f9:e0:8e:4e:9a:37:8e:05:d5:72:e9:7b:0c:
57:22:b6:9e:3d:5e:a9:df:f9:d1:7c:a8:81:65:ee:
00:1f:df:d7:3c:64:71:45:cb:16:39:ae:e8:2d:a9:
ea:0c:54:c8:d1:3c:61:c2:dc:5b:0f:6d:8c:08:e1:
f8:58:6f:ff:10:16:40:35:c0:4c:c1:db:e2:e1:19:
ef:2f:7b:87:1b:e4:06:ee:98:68:17:15:bd:68:f3:
ae:67:8d:8a:dc:21:30:0e:66:3d:03:25:34:67:11:
24:5e:3b:ed:c7:61:6f:ba:e8:44:4b:36:51:6d:23:
66:8c:0c:49:4a:30:26:17:c3:d7:7d:f9:83:28:f0:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:99:FC:4E:AB:DB:0B:45:0D:DF:B4:BA:1A:9A:18:B9:E6:E8:F1
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3134382e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:13:f6:c7:17:40:ef:ac:fc:25:78:e8:13:f3:2d:fa:e1:92:
50:d6:2a:0c:6e:0a:d8:87:be:7d:d6:24:8d:69:99:9c:8e:4f:
d6:f3:b4:28:f4:fa:b1:f0:b1:6e:dc:03:19:82:a7:18:f5:fb:
91:f3:dd:3e:c4:01:66:0f:08:b9:8d:7d:34:32:e6:c7:d2:83:
9e:be:e3:25:f2:7f:bd:d3:95:c3:1b:03:e6:36:c1:da:68:6b:
6b:17:1c:f1:3f:e2:5f:e3:4c:14:66:9d:9b:a0:82:3a:96:51:
6d:99:24:bd:49:d5:23:c5:6d:be:26:6e:40:99:fb:4f:11:5e:
65:38:6d:0b:65:54:a9:50:6b:ba:b7:63:f6:a4:60:bf:00:f3:
56:a1:af:a0:a6:10:64:57:87:5d:8e:b6:52:a7:5d:2b:e4:2e:
6f:bd:f5:30:f2:96:09:f4:53:9c:f1:e2:b3:f7:59:d4:a3:a2:
6a:58:a9:59:ad:e6:c6:db:f1:c2:26:63:54:4c:13:c9:63:c1:
67:24:6e:cf:46:b4:a4:49:b5:0f:64:bb:71:fa:52:1e:b4:66:
3b:6b:cc:7d:da:c3:2b:66:8d:6a:5b:b7:f2:7a:bf:74:5b:89:
44:0e:04:d9:e0:1c:7d:11:cc:22:68:2f:f2:ad:cd:c3:65:6c:
2b:35:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net