Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135332e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3135332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: bKlDG5j7MHcQBcm9iO/OlWKuUbXGXALoU0I31atreSs=
Subject key identifier: F3:23:84:F3:BF:B5:4E:61:0C:53:3C:0D:2F:9F:C5:3D:6C:0E:9C:C4
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0BBE92A94B59B1E54E6D93EF3268F2634EFBECDD
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135332e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:00 +0000
ROA not before: Thu 07 Apr 2022 07:55:00 +0000
ROA not after: Thu 06 Apr 2023 08:00:00 +0000
asID: 24203
IP address blocks: 112.215.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:be:92:a9:4b:59:b1:e5:4e:6d:93:ef:32:68:f2:63:4e:fb:ec:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:00 2022 GMT
Not After : Apr 6 08:00:00 2023 GMT
Subject: CN=F32384F3BFB54E610C533C0D2F9FC53D6C0E9CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:c2:0e:e2:cf:ed:98:dc:01:01:bb:54:05:
39:62:1d:9c:c3:b6:66:70:65:96:d4:da:9a:da:d8:
83:6c:85:51:57:f3:56:15:a5:4e:98:08:57:ef:3b:
19:32:1c:2a:04:dc:b7:43:c0:c0:43:c2:f8:20:f8:
14:db:95:ae:e8:c1:99:6b:7e:ca:71:77:bb:1c:70:
71:40:d5:63:46:f3:ba:2a:d9:bb:df:9f:8d:41:5f:
d0:8e:a3:2c:7e:7d:ae:29:31:b3:25:a4:c8:81:dc:
27:a6:2c:e0:37:94:25:21:25:40:ef:84:70:58:73:
44:c6:5e:90:de:13:1a:b0:65:9c:28:ee:58:6c:a7:
33:06:c2:65:91:37:b1:93:05:92:53:85:38:c8:dd:
a3:cb:e2:31:7f:78:80:aa:a9:ff:e3:51:4c:44:8b:
82:17:c4:82:79:d5:3c:a7:f9:76:74:90:8f:8d:f9:
2e:eb:c8:5e:5c:31:a7:ea:a6:e8:60:02:a7:c9:26:
4d:47:84:ba:38:b5:15:e2:c4:8e:ff:75:34:e5:c4:
5f:56:07:c8:d9:2a:dd:60:bb:ca:55:67:f4:65:d2:
87:79:b8:87:a4:06:93:c8:55:a5:5e:18:a8:c3:48:
30:09:aa:c6:6d:18:e1:a5:78:81:0a:dd:eb:11:eb:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:84:F3:BF:B5:4E:61:0C:53:3C:0D:2F:9F:C5:3D:6C:0E:9C:C4
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.153.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:16:9f:1a:1a:e3:e6:a0:2b:e7:48:1f:ea:1c:37:6a:6f:
6a:f5:3d:2e:91:2c:71:64:8f:e8:b9:c5:31:73:79:ba:1f:00:
4b:2a:d7:8e:1e:c9:38:c4:2d:08:cd:fb:a0:53:49:84:3d:24:
fc:4a:50:9a:fb:7f:11:37:21:a2:2c:16:77:d4:07:b1:d5:68:
ba:b6:e9:a8:b7:21:25:d1:8a:e9:6c:9a:58:13:7d:39:a1:0f:
28:dd:72:ed:62:fa:a9:90:bb:3c:9d:2f:f7:b0:90:96:cb:e7:
8b:2c:66:62:b4:c3:43:44:2a:43:1f:37:1c:13:cd:1b:e6:7f:
62:f9:88:be:00:8d:55:62:de:33:ec:86:c8:1a:c0:bd:73:5f:
98:35:08:3a:56:04:b1:6c:f8:78:26:6b:50:46:2d:31:aa:d6:
af:b6:c9:e3:c7:df:07:f7:cb:67:83:83:fe:0a:f3:cc:a7:9b:
46:bf:c6:85:98:7d:c9:0c:52:c2:36:04:69:62:e1:af:db:86:
64:8e:18:ad:fc:b1:35:f2:dc:b2:07:06:a9:3e:ff:6f:4a:94:
50:0c:8a:4f:98:b4:12:a9:3e:eb:e6:31:e4:72:bc:4e:ee:e0:
90:b2:9f:35:63:c9:e1:14:70:05:b2:ee:2d:e2:f4:42:55:66:
bc:ce:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net