Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137332e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3137332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 4O9Rae+IivLB1hGLlP5OJQ3z6oQHyV6Zo9N4n58DZgM=
Subject key identifier: 15:06:37:C5:3B:27:8E:32:97:CE:4E:16:F1:57:65:D1:3E:F6:C5:1E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6BC5416613880F17C264D19A530A21F303285053
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137332e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 17:00:00 +0000
ROA not before: Thu 07 Apr 2022 16:55:00 +0000
ROA not after: Thu 06 Apr 2023 17:00:00 +0000
asID: 24203
IP address blocks: 112.215.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c5:41:66:13:88:0f:17:c2:64:d1:9a:53:0a:21:f3:03:28:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:00 2022 GMT
Not After : Apr 6 17:00:00 2023 GMT
Subject: CN=150637C53B278E3297CE4E16F15765D13EF6C51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:00:54:d5:0b:72:57:99:66:c0:79:b2:11:
77:89:0c:6a:39:e1:41:de:c5:fc:80:20:53:56:c0:
e1:fa:b8:3b:a6:8b:f2:ad:82:d0:98:19:a4:fa:e8:
d3:17:d5:70:00:fc:4c:fe:76:8a:b2:da:1e:4e:a9:
7a:81:c8:42:e5:80:d2:4c:0e:64:bb:c0:aa:27:54:
3e:57:04:6d:be:4b:db:83:bd:5b:cd:88:16:19:86:
0d:3e:08:49:59:76:c4:c6:c6:9e:b9:67:75:eb:ea:
3e:cb:06:f0:2f:39:f8:08:89:48:e9:6c:ca:f4:ac:
e2:54:4a:fd:2a:23:c8:a0:a3:9d:ca:02:be:83:06:
f4:de:22:6e:0e:94:96:7f:a3:88:04:43:55:e3:f8:
7a:88:00:cb:85:cf:6b:96:cd:fd:f7:19:eb:3b:f0:
a5:b1:3b:6c:a2:d3:dc:50:69:88:fd:55:8a:b5:ba:
8d:d4:da:51:24:06:ca:4e:a9:bb:ed:d9:3b:f3:92:
e3:99:da:6d:b5:46:c7:a4:29:ef:55:52:70:11:74:
da:1e:f5:d1:b5:c2:2d:10:09:28:c1:39:b0:af:2e:
5f:aa:99:ff:a0:2c:08:b0:38:d9:f3:9b:d3:1a:d4:
80:71:66:89:c9:17:1a:d2:c0:15:ee:66:81:19:2e:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:37:C5:3B:27:8E:32:97:CE:4E:16:F1:57:65:D1:3E:F6:C5:1E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9a:38:3e:fa:2a:30:b7:ad:1d:1c:82:d6:4a:40:9d:4f:34:
df:d7:4a:90:67:58:6c:c0:04:1b:5f:ee:e0:5e:51:48:89:1a:
7c:24:96:26:a0:42:48:35:7d:53:1a:8b:79:21:36:77:89:e3:
0c:ee:9d:a9:1b:8c:ca:5f:2b:26:63:db:ad:2d:e3:96:ac:3d:
3c:49:5e:b1:27:7e:7e:0c:b1:a0:eb:d5:40:f0:8e:f8:d9:25:
8a:ca:c5:11:de:8f:d9:97:bf:3c:bf:5a:53:3d:33:16:46:5f:
87:1e:6f:8f:3b:a0:45:90:02:f2:18:a0:f2:27:4d:8b:c9:22:
e7:80:28:b1:66:f6:71:6c:d5:15:5b:3d:ef:eb:5c:e0:f2:e5:
35:06:42:2d:20:23:67:2c:aa:3b:37:68:9a:a8:f6:bc:e5:c5:
e4:93:bc:38:46:5b:9a:4e:d2:5c:c9:8a:df:94:71:9d:26:6e:
42:52:7d:85:4c:d5:dc:5b:4c:65:47:85:e1:f1:ff:a6:cb:5c:
b7:da:99:43:04:ba:7b:aa:75:40:b0:22:40:8e:1b:e4:1d:3d:
a3:2b:f8:d9:ec:e4:03:81:0d:2f:06:c8:aa:4d:2e:44:08:b4:
11:7d:68:1d:6e:0f:ff:f7:96:70:df:9b:ba:ac:e5:46:ec:33:
d3:90:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net