Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135392e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3135392e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: lj/NbPBMFvYosx+Ho1N3M9RS6jKp6d7VNrksZ7b47Xk=
Subject key identifier: 86:00:93:EF:B0:C1:27:5A:57:F0:F1:2F:6E:EE:D8:49:B3:C0:8D:E9
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 4542956512D11A8C1FC64F5E10F54F512FBF4EF5
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135392e302f32342d3234203d3e203137383835.roa
Signing time: Thu 07 Apr 2022 09:00:00 +0000
ROA not before: Thu 07 Apr 2022 08:55:00 +0000
ROA not after: Thu 06 Apr 2023 09:00:00 +0000
asID: 17885
IP address blocks: 112.215.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:42:95:65:12:d1:1a:8c:1f:c6:4f:5e:10:f5:4f:51:2f:bf:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 08:55:00 2022 GMT
Not After : Apr 6 09:00:00 2023 GMT
Subject: CN=860093EFB0C1275A57F0F12F6EEED849B3C08DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:ff:56:75:7e:55:d8:ac:51:96:4f:71:74:
fe:37:3a:e5:ce:1d:ac:c6:06:ce:6f:1b:f5:ef:f4:
c9:12:4e:d8:70:2a:3a:b3:81:ac:e9:9f:56:31:36:
b0:82:9e:0f:df:c0:eb:1a:c0:d4:08:25:ba:87:f8:
4c:c7:37:c7:a8:8f:b2:8c:35:df:95:0e:a4:8f:ed:
03:31:ee:4d:4c:b1:f1:37:de:63:19:ae:ec:9c:23:
52:56:96:ec:8c:21:d7:76:d0:67:12:da:45:bf:3f:
5a:df:99:62:d3:0f:53:f4:9e:6e:ea:42:b5:7c:d5:
27:26:78:82:92:19:c3:9a:69:21:fe:1b:96:84:bb:
bd:81:96:b6:ce:2a:d6:72:de:18:25:26:c2:33:96:
b2:c6:cc:b6:d6:73:9e:e0:88:c5:84:86:01:cb:78:
34:e0:ed:e7:c1:b2:3f:fa:86:2e:db:7e:61:b7:9c:
4e:49:d7:96:e6:84:06:1a:43:0f:2c:c9:2c:60:fb:
cb:bd:6e:20:b3:6a:c1:78:8d:b6:86:1b:10:1b:89:
5a:3b:b0:e7:ec:fa:26:c6:34:83:03:4f:42:d0:c5:
b2:2c:2d:4d:a2:48:8c:cf:b2:57:90:97:87:34:f8:
2d:18:60:c4:2d:6c:99:82:31:bb:06:49:0a:db:90:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:93:EF:B0:C1:27:5A:57:F0:F1:2F:6E:EE:D8:49:B3:C0:8D:E9
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3135392e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1d:c0:d9:cd:3a:4f:27:63:50:85:ea:ef:7a:12:7c:64:80:
f8:88:31:62:ac:cf:8a:6e:4c:40:fe:b9:84:b3:de:56:a1:b9:
d0:5c:0a:1d:d4:cb:91:05:8b:56:12:47:d7:0c:ee:d8:07:f6:
8d:74:c5:9e:ce:61:48:8e:58:61:51:69:a0:c9:b7:02:81:17:
08:2f:8d:15:1a:88:52:7d:4a:01:c3:d8:97:57:c0:84:00:b5:
6a:a5:15:00:5f:9b:2d:11:47:a2:f5:2c:59:b7:e6:4c:af:a1:
75:37:34:b0:75:aa:5a:20:00:04:0f:ae:6b:3b:bd:1f:7f:d3:
52:f8:2e:71:d5:c9:a3:1a:35:4a:a2:ea:58:82:e7:70:d6:63:
b6:70:60:a9:a7:28:2b:6a:18:8f:ab:b2:81:c0:69:3c:9f:25:
46:38:7f:73:0f:5f:36:f5:b9:fb:80:36:3c:89:7d:0b:e1:f7:
67:26:83:9f:eb:47:0a:9f:6f:c2:6a:7a:81:23:b5:54:e4:c9:
91:54:a1:38:f6:92:10:e2:ad:f7:f8:45:c0:05:12:40:dc:75:
3b:8d:30:06:f2:7c:7e:03:6c:67:33:2c:1f:b8:fb:61:4f:40:
73:23:bd:68:fb:3e:f5:fa:ce:70:54:87:8d:a9:bb:cf:85:ec:
dc:19:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net