Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31382e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e31382e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: lAy2HAdyeFOwBK5MBV8Ofl5DnExl5vTWNrfxL98NEv8=
Subject key identifier: C1:77:06:1F:86:9B:57:19:4F:3E:C8:14:06:2B:E0:E8:09:AF:FA:05
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 16A240C867361EE77F156DD39EE4BBE5C0B5FBFA
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31382e302f32342d3234203d3e203137383835.roa
Signing time: Fri 01 Apr 2022 21:00:00 +0000
ROA not before: Fri 01 Apr 2022 20:55:00 +0000
ROA not after: Fri 31 Mar 2023 21:00:00 +0000
asID: 17885
IP address blocks: 112.215.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a2:40:c8:67:36:1e:e7:7f:15:6d:d3:9e:e4:bb:e5:c0:b5:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 1 20:55:00 2022 GMT
Not After : Mar 31 21:00:00 2023 GMT
Subject: CN=C177061F869B57194F3EC814062BE0E809AFFA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:74:aa:de:4d:41:a5:73:05:4d:52:4e:49:
8c:c1:cc:7b:0f:82:34:1e:a5:e8:d6:8e:cc:25:a2:
28:51:d8:65:41:ff:7c:f9:e8:af:e3:9f:26:f9:2e:
14:c8:09:06:97:31:51:13:d7:e3:5d:1d:a5:dc:cb:
c9:c0:42:c6:2a:c8:de:90:bc:60:37:18:81:7f:6e:
82:47:df:cb:ca:14:99:ba:a1:0a:3f:91:56:74:84:
d7:a2:53:df:97:7d:ae:7d:51:aa:c5:da:2c:94:9e:
e6:fe:9b:a2:ab:d8:57:08:7c:6d:ea:fa:66:47:80:
56:78:3b:22:77:e8:0f:f6:74:c2:6c:5f:a8:65:a7:
60:46:46:98:a6:9a:86:75:bb:93:25:1a:71:82:e8:
00:33:96:15:ce:42:39:f7:19:05:1c:1e:1e:9c:78:
02:6c:28:68:b9:a6:7a:d1:a7:c7:57:af:82:96:9c:
b5:9c:04:e2:35:74:7c:ef:b1:88:f2:dd:7e:1b:f2:
b7:82:47:3e:0e:a2:f2:0e:6f:eb:83:26:e1:57:44:
49:48:76:e0:3d:ae:bd:86:46:ea:34:2d:ca:e9:ab:
59:07:5a:86:72:ef:fa:9a:8a:81:66:b1:17:e0:0e:
0c:63:51:aa:33:77:1a:08:6a:b9:f4:0d:95:22:19:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:06:1F:86:9B:57:19:4F:3E:C8:14:06:2B:E0:E8:09:AF:FA:05
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e31382e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.18.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e5:9d:27:94:86:2a:db:72:63:c9:c1:2b:a7:d2:20:d7:22:
d1:2f:44:84:2f:20:d1:c9:ac:09:f0:cf:6c:b5:bf:9e:1a:68:
51:04:5a:71:02:76:9c:fd:4d:d7:e5:74:e0:94:a9:e4:1f:5e:
e7:e9:40:b9:97:0d:24:d3:ab:88:a2:05:3f:94:9b:92:a5:a9:
94:5a:ea:f4:91:3d:f1:54:6a:9f:c6:33:ca:72:53:2a:f8:29:
da:5a:33:e5:2f:ed:8f:c1:60:a1:80:7c:df:9b:a4:20:e8:a5:
2f:d7:a7:a3:81:48:c3:22:b6:9a:ce:0c:51:c5:00:1c:84:c6:
72:0a:d7:79:01:75:98:8e:ae:34:82:34:13:8c:7b:15:e2:37:
04:23:47:e4:3b:4e:c2:35:3c:2b:d3:69:89:1e:2f:65:82:01:
b7:67:39:63:22:20:7c:a6:e5:d7:b6:78:2b:2d:f6:1a:aa:ea:
6d:ed:14:2f:f3:fe:f4:83:92:5c:bb:55:3e:1e:af:9d:fb:29:
48:66:88:f6:d7:cd:74:2e:50:bf:d4:01:d7:ae:ec:8d:03:05:
25:c2:3d:74:ae:f2:06:ed:b4:89:5b:52:e7:da:34:08:24:b6:
0e:a2:97:d8:41:18:be:45:31:22:5f:31:27:60:77:65:d3:06:
06:10:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net