Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137302e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3137302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: BWR/a6Pm55NSVaqLfO4JKgDJqdszimFk26SN/GCzOkI=
Subject key identifier: 63:D4:6C:86:00:50:D4:89:4F:4C:BA:ED:76:17:30:D8:FD:A2:4C:09
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6EA8AE19CFAAB8BB2221231D87CC82F9446AA80B
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137302e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 16:00:00 +0000
ROA not before: Thu 07 Apr 2022 15:55:00 +0000
ROA not after: Thu 06 Apr 2023 16:00:00 +0000
asID: 24203
IP address blocks: 112.215.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a8:ae:19:cf:aa:b8:bb:22:21:23:1d:87:cc:82:f9:44:6a:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 15:55:00 2022 GMT
Not After : Apr 6 16:00:00 2023 GMT
Subject: CN=63D46C860050D4894F4CBAED761730D8FDA24C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:d5:23:b6:6f:65:dc:27:e1:ce:59:3f:54:
62:41:72:e8:6b:e7:f0:ce:9b:93:9f:26:93:8d:48:
63:40:cb:b2:18:f7:ef:93:7d:0b:82:04:ce:1e:6e:
b8:b5:cf:0d:fd:80:75:3b:77:3a:da:56:48:8f:fc:
48:11:44:81:a6:b2:43:b5:31:c2:e6:70:8d:eb:fe:
d4:e4:79:ca:08:50:48:c4:f2:25:e4:0d:c0:9b:69:
9e:7c:00:4f:77:04:72:8f:1c:5f:c1:77:7e:5c:f4:
b9:a4:54:da:bf:f4:63:19:8f:54:6b:67:b5:31:df:
0e:d5:59:06:76:3b:d2:44:d1:c2:7a:2b:36:c5:44:
69:4e:92:be:a0:41:06:d7:f0:e9:12:ce:c2:31:24:
f3:fd:74:19:27:28:14:24:6a:5e:ee:b9:e8:fa:76:
73:ad:46:82:25:a9:4e:63:e2:18:e1:d8:de:11:f1:
a6:21:06:89:2f:cf:c6:b9:fc:3b:40:7d:98:22:49:
ca:ec:a9:a8:27:c8:7c:82:36:bf:ae:1c:26:88:c8:
c5:2e:d8:ff:a0:12:3d:7f:02:f6:fa:a4:15:e6:89:
ef:3f:6b:df:51:bd:9e:56:81:67:cc:78:f7:20:c9:
58:fe:8e:a1:37:ce:2f:b0:15:c8:74:f0:af:91:73:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:6C:86:00:50:D4:89:4F:4C:BA:ED:76:17:30:D8:FD:A2:4C:09
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.170.0/24
Signature Algorithm: sha256WithRSAEncryption
42:89:39:86:1d:d9:db:2c:cb:e5:dd:b8:b7:81:d6:cb:3a:d4:
5a:3e:5e:99:f8:ba:dc:c9:ae:ab:0c:51:8c:63:b0:f1:14:22:
1a:e0:ca:27:88:05:de:f8:c4:e7:d4:91:b8:98:cc:a6:b2:17:
b9:c0:cc:68:44:fa:fe:e8:c8:60:7f:67:cd:59:21:62:14:a9:
95:78:62:d4:72:29:5d:5b:13:f4:3e:22:95:7e:47:12:7d:61:
9b:7a:2f:1e:5a:da:22:5e:06:a5:24:78:8e:57:51:64:21:c5:
e0:de:17:53:c9:22:64:08:fb:15:6f:b1:57:74:b4:e0:d1:a3:
c5:96:bf:a0:d2:a4:97:31:f1:f1:67:12:ed:d8:f6:14:cf:13:
7b:69:55:ca:0b:09:0f:d6:31:89:da:e4:6b:0f:19:93:c3:95:
88:ea:47:bc:12:c8:e6:77:a9:b6:91:0d:3f:bf:0b:62:db:75:
6f:de:df:55:5b:ef:84:c0:10:fc:63:42:44:22:78:fa:35:c6:
44:d6:29:3d:10:b1:fc:7e:c5:f2:49:59:c2:ab:4c:0f:3b:98:
0b:b6:36:54:49:ef:a6:9a:1a:fa:b0:43:5f:b1:31:11:81:f5:
f7:5d:12:80:44:2e:2e:67:99:17:e0:5f:77:66:a0:e7:2c:2c:
b7:a6:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net