Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3137372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: CNBBO9uASe2oEa4AH347vErTREE8aq+/2pGQaOIUPeI=
Subject key identifier: E8:7E:01:B3:EB:87:98:32:D0:0C:00:EE:88:DD:4D:F9:89:CF:56:7F
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 564231327D77732FFE3B1C14816882B5CCE6FB13
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137372e302f32342d3234203d3e203137383835.roa
Signing time: Thu 07 Apr 2022 17:00:01 +0000
ROA not before: Thu 07 Apr 2022 16:55:01 +0000
ROA not after: Thu 06 Apr 2023 17:00:01 +0000
asID: 17885
IP address blocks: 112.215.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:42:31:32:7d:77:73:2f:fe:3b:1c:14:81:68:82:b5:cc:e6:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:01 2022 GMT
Not After : Apr 6 17:00:01 2023 GMT
Subject: CN=E87E01B3EB879832D00C00EE88DD4DF989CF567F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:c0:78:d0:a5:5c:b5:5d:05:05:48:24:04:
2f:03:f0:a1:22:7e:8d:6e:2d:df:9c:b4:fa:50:f6:
36:32:66:cc:d3:f6:24:29:8c:2b:b7:24:cf:2e:2c:
4c:8f:ac:a0:a8:a2:09:7c:a7:9b:0d:0f:31:59:62:
93:9f:2c:a7:56:db:75:25:0b:ad:ee:e8:02:1b:c4:
0d:a7:c9:80:e5:4b:58:c6:73:3f:06:6c:e7:d8:11:
59:f7:f3:a1:e4:af:ac:0b:ad:38:fd:f2:91:28:95:
7d:3a:66:95:38:bd:73:09:c2:2e:7b:cb:f9:95:bb:
54:0a:cc:95:49:fe:f2:cd:cf:95:3b:23:ed:d9:cc:
af:7b:5f:59:f8:ce:ce:5e:bb:f4:34:4f:ca:6c:cb:
3f:74:14:8d:e6:eb:d1:bb:bc:b3:46:d0:22:40:1e:
a5:8b:fb:5f:21:ee:7a:72:5e:fc:1d:f1:27:76:ac:
c4:41:e2:e1:35:3f:17:5d:ff:5e:be:10:ed:c4:9a:
79:ba:e6:40:3d:2f:3b:91:b6:6c:1e:8e:3e:d9:a8:
f4:23:3c:ea:65:8f:e4:72:73:ac:c4:90:7f:90:2b:
45:04:d4:60:ec:8a:bb:f6:d2:18:05:fb:5f:cd:3b:
e6:9d:bb:54:58:0d:4d:21:a6:7a:fe:56:54:ec:34:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7E:01:B3:EB:87:98:32:D0:0C:00:EE:88:DD:4D:F9:89:CF:56:7F
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.177.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cd:8e:b8:6e:6c:f5:2b:b8:f6:81:e4:0a:3b:b9:f5:80:c3:
b1:33:4f:ae:3a:03:03:a3:55:77:22:52:3b:57:08:60:5c:1b:
eb:89:fa:b3:df:e1:22:b6:80:14:df:79:cf:79:c7:d3:0c:b0:
00:c5:ae:d4:a9:02:7b:e5:4b:52:6b:de:91:f1:85:47:db:51:
13:bd:67:bd:58:a8:c7:2c:bf:5d:75:7f:5f:10:7a:01:c7:4e:
50:f1:5b:6a:6a:55:aa:42:b7:a6:df:bc:ad:04:3f:02:cd:fb:
17:69:45:70:92:44:09:91:db:15:cb:1f:c4:ce:b4:77:d2:cd:
d9:25:1b:6e:69:89:c2:61:6c:49:6c:8e:a8:7f:26:5b:25:06:
f0:0c:02:df:c2:7a:58:5a:0d:16:00:fb:92:78:90:32:3f:be:
85:07:f1:f5:10:a3:ab:61:e2:39:87:32:a2:3a:a7:7b:0e:25:
3e:1a:ce:bd:1d:4c:5c:84:aa:42:24:a1:21:09:36:dd:41:74:
41:66:93:d6:16:ac:31:4b:3f:65:8a:01:8c:22:86:c1:3e:1b:
9c:c5:d5:32:fa:ae:86:a4:57:59:67:41:13:2d:b1:bc:5e:51:
15:cd:83:2e:ff:c4:3e:0d:98:87:65:c1:21:d6:31:73:d5:ce:
7c:b0:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net