Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135342e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3135342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: qUB/muBdy9y1TwLn8pUfkRp0qk8NXWTxmdQqx/4SMyg=
Subject key identifier: 58:0B:35:0C:11:22:1C:05:83:BC:8D:38:2B:B7:A2:DB:A7:3A:42:69
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 600DAA866149F3278ECB6616F97C2E068EF7DD5A
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135342e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:03 +0000
ROA not before: Thu 07 Apr 2022 07:55:03 +0000
ROA not after: Thu 06 Apr 2023 08:00:03 +0000
asID: 24203
IP address blocks: 112.215.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0d:aa:86:61:49:f3:27:8e:cb:66:16:f9:7c:2e:06:8e:f7:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:03 2022 GMT
Not After : Apr 6 08:00:03 2023 GMT
Subject: CN=580B350C11221C0583BC8D382BB7A2DBA73A4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:6b:f7:ca:97:16:92:96:33:ce:ea:12:16:
b9:54:33:c8:7e:98:cf:de:da:f2:a5:69:59:da:cb:
3b:40:fc:0d:52:bb:ed:c3:0f:2b:e6:5b:1f:f3:cc:
ef:40:d8:48:8a:49:1a:3e:db:b1:51:37:b7:11:84:
ac:28:45:15:84:05:a6:62:78:58:90:b6:be:a5:4a:
8e:ff:dc:91:e1:a8:48:b4:76:07:9e:66:d4:6f:93:
5d:fc:b9:7d:31:d1:6d:06:29:fb:fd:92:51:62:61:
f0:ba:92:9a:7f:98:8a:9f:83:5c:5a:48:05:f6:f3:
c8:da:0f:76:d0:e2:65:8c:88:05:f5:a4:10:72:8c:
e8:b6:20:b9:58:aa:e1:c5:d2:e5:59:84:c8:8b:88:
4a:fa:3d:be:f7:2d:8b:11:7a:35:0c:79:e1:02:9b:
3d:ae:aa:f2:a3:36:7f:ba:07:1d:b0:1d:e2:99:10:
1b:b7:86:67:1e:ab:7b:4e:fc:af:d8:1b:d5:28:e4:
13:2a:8d:fa:cb:6f:3b:9b:74:e2:ba:26:57:40:d6:
bc:18:79:3e:07:77:e9:1b:ca:59:b8:34:5f:01:f1:
cf:bf:0f:12:46:1c:04:90:12:2a:16:14:a9:79:0a:
65:e7:24:88:11:89:be:35:92:00:45:60:f6:13:ac:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:35:0C:11:22:1C:05:83:BC:8D:38:2B:B7:A2:DB:A7:3A:42:69
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.154.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1f:8a:d8:94:82:00:91:10:c5:f6:5d:f0:ad:39:d1:31:33:
1e:5d:b0:cb:11:fd:08:c1:f9:b5:a6:f9:7a:d0:09:47:5e:50:
14:9b:02:b9:1d:47:26:cf:95:e2:c0:8d:ba:6a:85:19:0c:aa:
73:1c:31:5f:6a:cf:93:32:12:a0:16:7b:ab:8d:d2:36:1d:22:
76:d0:bd:ae:70:55:2b:4d:69:37:c4:04:70:9b:b6:7b:46:07:
52:0b:43:c4:0d:19:a7:5b:55:d7:5f:ad:ca:7f:eb:61:e1:09:
7c:8e:55:b7:cc:4c:b5:e3:01:4b:be:ab:2d:2d:35:62:16:41:
c9:37:d0:88:2c:20:34:c3:9c:2c:fa:61:a7:bd:d7:1c:33:88:
ca:43:68:86:a0:93:5e:85:63:61:89:84:49:e6:95:0e:10:e1:
e7:77:ba:cb:58:f4:d3:b1:c4:03:9f:db:b0:29:a3:b4:43:fa:
5f:98:00:fa:8c:7a:9c:98:6b:e5:62:32:ac:77:5f:b1:3b:f7:
d7:d6:24:51:0d:de:c9:47:03:2c:69:47:21:7e:14:b0:fa:50:
a9:e8:80:27:15:cc:07:4b:80:7e:c5:d0:fa:2b:67:fb:cd:55:
ec:7c:ae:bf:6f:af:a3:57:c2:83:87:da:2a:aa:d6:53:20:80:
29:26:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net