Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137342e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3137342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: DmOimIy0gYSDIVJYX+PpKCZJ8FomwsIgTLzQQsK6bdk=
Subject key identifier: FF:29:46:F1:10:7F:77:48:C5:7D:BD:6B:CE:9A:19:45:27:0F:4C:27
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 70EA6EF1DEF5E9D766D6284A42686B50981ACC78
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137342e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 17:00:02 +0000
ROA not before: Thu 07 Apr 2022 16:55:02 +0000
ROA not after: Thu 06 Apr 2023 17:00:02 +0000
asID: 24203
IP address blocks: 112.215.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ea:6e:f1:de:f5:e9:d7:66:d6:28:4a:42:68:6b:50:98:1a:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:02 2022 GMT
Not After : Apr 6 17:00:02 2023 GMT
Subject: CN=FF2946F1107F7748C57DBD6BCE9A1945270F4C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:f3:32:f4:5a:28:63:4a:84:97:b2:9e:8c:
e7:e2:bd:e8:81:8d:ca:9c:1a:5e:30:ea:5b:9d:a3:
c3:55:e6:a7:98:7c:9e:26:3f:7e:ab:98:7a:9c:c5:
14:e2:30:97:cb:fc:05:97:25:9c:3f:b1:3b:9f:41:
b2:ad:89:2c:33:e5:8d:da:41:22:62:db:37:96:1e:
26:c9:e7:b2:43:bc:f8:2d:e1:36:47:7a:b2:b9:5f:
f0:f7:b2:c7:58:9e:3d:d4:33:25:1a:8f:98:49:3d:
8d:ca:c9:9c:b4:a2:7f:08:bb:09:59:f1:55:15:b4:
dd:41:3a:ea:dd:60:22:90:73:e9:01:48:c5:68:81:
37:c4:90:44:ef:11:0e:e7:c1:4d:13:4b:29:f2:cb:
24:43:c2:15:c7:c4:c1:61:7e:32:f5:9d:65:a9:74:
f8:69:f4:bb:84:56:af:fb:bd:ee:c2:1f:35:91:b6:
73:f1:d2:cb:63:56:9c:58:43:ff:b1:76:c3:68:6d:
f5:a5:72:93:c1:76:96:b1:85:8f:d4:30:20:44:64:
2f:2a:38:e1:a8:ee:be:14:5b:0a:dd:52:2f:30:34:
9b:d9:41:82:b0:49:b9:2c:d4:c0:65:bc:4d:55:85:
f9:95:38:e6:ef:15:c7:58:41:0f:bf:7c:5d:df:75:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:46:F1:10:7F:77:48:C5:7D:BD:6B:CE:9A:19:45:27:0F:4C:27
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a8:37:5e:e5:a8:8f:c9:0c:27:94:48:47:bf:87:40:61:42:
9e:07:84:e3:15:43:94:d1:0d:d5:a8:88:53:0e:49:f7:2c:8d:
98:ff:0b:a1:0c:97:ff:9d:cc:54:c4:41:73:5d:1d:8b:bf:19:
cb:15:7b:03:83:a0:22:e5:e8:e4:10:e1:45:3f:90:1e:8c:b6:
8a:78:32:48:d8:eb:6e:e9:ec:cc:16:08:d1:c1:79:bd:5f:3c:
43:21:5c:dc:61:7c:08:75:9b:24:f4:69:18:2a:72:c9:be:ee:
f8:81:d6:63:4a:77:aa:11:5c:a6:30:2c:48:64:10:1c:7b:d3:
31:4c:d4:8c:11:76:68:70:82:38:d8:b5:0c:c5:ee:19:e9:04:
d5:98:93:6e:de:a6:a9:78:14:97:45:b3:b3:4e:15:55:80:10:
7d:0e:18:72:4b:72:36:c6:d8:c2:79:ad:19:f0:dc:fe:b0:3d:
2b:2a:ee:9b:6c:dd:de:75:f0:b3:e1:0c:1e:28:ae:56:1e:13:
9d:03:cb:2d:cf:e6:5a:95:5d:c3:7f:97:ef:bd:5a:07:8d:e3:
4a:fc:65:7f:12:c9:99:c3:4e:35:57:bf:ba:f5:2d:3f:95:f9:
3b:3a:48:5d:a6:05:bc:12:a7:3b:2c:11:90:7f:c9:7c:1f:12:
92:f1:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net