Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135372e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3135372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: O2w5wl6nHCOPUA7eJ0K7QrnM85tG6J5A6TcxfRCWOsA=
Subject key identifier: F8:72:D7:B1:36:F8:54:93:DA:80:94:BC:24:C5:9D:87:EB:DF:67:32
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 188E4A87F6927E336928415251217312E66C6320
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135372e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:02 +0000
ROA not before: Thu 07 Apr 2022 07:55:02 +0000
ROA not after: Thu 06 Apr 2023 08:00:02 +0000
asID: 24203
IP address blocks: 112.215.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8e:4a:87:f6:92:7e:33:69:28:41:52:51:21:73:12:e6:6c:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:02 2022 GMT
Not After : Apr 6 08:00:02 2023 GMT
Subject: CN=F872D7B136F85493DA8094BC24C59D87EBDF6732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:ae:e5:f0:d6:5b:74:ca:be:3c:4e:e0:e7:
80:3b:68:a2:77:e4:03:9f:72:15:1b:58:38:70:5c:
ec:94:14:8d:09:a8:c4:c6:b1:81:58:5b:bf:ce:f9:
83:29:4b:09:0e:d2:ec:a0:8c:ff:f9:fe:95:13:98:
3d:0e:17:55:ea:02:e4:a7:65:5d:37:d1:dc:0d:9b:
5d:99:a4:ed:19:ac:77:ec:d5:d1:f4:42:12:82:82:
39:f7:da:15:30:13:ae:94:1c:f0:c5:ba:27:25:13:
57:05:b7:a1:2b:a2:c3:5f:58:f2:5f:06:eb:f1:02:
6d:cc:cf:ef:70:a2:a7:41:ef:be:79:16:23:27:09:
2b:54:76:e4:f9:52:3b:9a:b4:6a:a9:5b:2c:18:d4:
6f:99:54:72:eb:ba:bf:77:c4:38:6c:60:1e:f9:1c:
fc:da:23:b2:2a:e8:0d:d0:81:15:19:47:ef:50:82:
61:48:90:44:64:17:44:8b:89:6e:0b:a4:80:d6:06:
cb:46:85:59:35:21:fb:84:c9:44:95:52:8a:97:44:
e3:99:1c:18:9d:39:ba:2e:88:4d:fc:e8:cf:e2:59:
9d:b3:6c:61:e9:c6:2d:99:c4:84:aa:e8:e6:97:3f:
c0:eb:65:c3:ef:d5:b7:97:21:f5:14:49:ef:48:6a:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:D7:B1:36:F8:54:93:DA:80:94:BC:24:C5:9D:87:EB:DF:67:32
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.157.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cd:d3:47:2c:72:4d:b0:49:f0:17:12:c5:c9:fc:25:0e:1e:
91:1c:3e:05:52:68:36:76:f4:df:0e:d9:a7:dd:6d:0c:c3:c7:
8d:fa:0e:f5:4d:5d:8c:e7:58:4d:07:b5:c3:f5:2a:cc:66:c5:
fc:d2:83:77:84:f3:eb:55:d6:dc:c8:39:4a:ad:31:5a:84:bc:
86:80:dc:76:ae:82:63:b5:c0:ff:f0:0f:be:78:ad:f9:59:51:
ec:68:00:82:9b:d8:6a:6d:78:ba:d9:8e:10:7b:7d:71:2c:37:
df:2a:7b:f3:35:a5:a0:cf:ca:13:d6:c8:83:37:3a:a9:7d:2d:
ac:f7:f2:e7:f1:bc:01:de:2a:37:c3:4a:a1:03:fa:97:1c:d0:
96:7b:5c:36:9f:f8:94:52:55:82:d2:40:8c:a2:34:98:b0:02:
8d:3b:44:dc:c5:66:e8:c7:2b:1a:5f:29:f7:3f:5f:15:7d:4a:
6a:1f:e3:58:58:6b:ad:56:b6:74:2e:2e:ab:84:3a:fa:da:f9:
32:d8:6d:69:ca:7d:5b:0a:b0:13:ae:98:8b:70:8f:5f:cb:bb:
ed:e2:ac:3c:77:5f:77:f0:bd:5a:cc:42:c0:0d:53:03:66:d9:
6c:6f:3c:0d:73:99:3c:da:30:74:b2:39:f2:8a:b7:79:be:d0:
c3:e0:13:2b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGI5Kh/aSfjNpKEFSUSFzEuZsYyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDcwNzU1MDJaFw0yMzA0MDYwODAwMDJaMDMxMTAvBgNV
BAMTKEY4NzJEN0IxMzZGODU0OTNEQTgwOTRCQzI0QzU5RDg3RUJERjY3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMU67l8NZbdMq+PE7g54A7aKJ3
5AOfchUbWDhwXOyUFI0JqMTGsYFYW7/O+YMpSwkO0uygjP/5/pUTmD0OF1XqAuSn
ZV030dwNm12ZpO0ZrHfs1dH0QhKCgjn32hUwE66UHPDFuiclE1cFt6ErosNfWPJf
BuvxAm3Mz+9woqdB7755FiMnCStUduT5UjuatGqpWywY1G+ZVHLrur93xDhsYB75
HPzaI7Iq6A3QgRUZR+9QgmFIkERkF0SLiW4LpIDWBstGhVk1IfuEyUSVUoqXROOZ
HBidObouiE386M/iWZ2zbGHpxi2ZxISq6OaXP8DrZcPv1beXIfUUSe9IavM3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+HLXsTb4VJPagJS8JMWdh+vfZzIwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTM1MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNedMA0GCSqG
SIb3DQEBCwUAA4IBAQCDzdNHLHJNsEnwFxLFyfwlDh6RHD4FUmg2dvTfDtmn3W0M
w8eN+g71TV2M51hNB7XD9SrMZsX80oN3hPPrVdbcyDlKrTFahLyGgNx2roJjtcD/
8A++eK35WVHsaACCm9hqbXi62Y4Qe31xLDffKnvzNaWgz8oT1siDNzqpfS2s9/Ln
8bwB3io3w0qhA/qXHNCWe1w2n/iUUlWC0kCMojSYsAKNO0TcxWboxysaXyn3P18V
fUpqH+NYWGutVrZ0Li6rhDr62vky2G1pyn1bCrATrpiLcI9fy7vt4qw8d1938L1a
zELADVMDZtlsbzwNc5k82jB0sjnyird5vtDD4BMr
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net