Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230302e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3230302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 104z0DM2Pa+UQrOsCPcXH8HWGZutM1FHMmxGbaoDD2Y=
Subject key identifier: 49:6E:91:31:C0:0E:B8:6B:79:E1:4E:CD:5A:18:04:FF:B8:0D:F1:C2
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6C522C0E345CC3FD7FFEFA41D84C7A07092DC5BF
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230302e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 17:00:02 +0000
ROA not before: Thu 07 Apr 2022 16:55:02 +0000
ROA not after: Thu 06 Apr 2023 17:00:02 +0000
asID: 24203
IP address blocks: 112.215.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:52:2c:0e:34:5c:c3:fd:7f:fe:fa:41:d8:4c:7a:07:09:2d:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:02 2022 GMT
Not After : Apr 6 17:00:02 2023 GMT
Subject: CN=496E9131C00EB86B79E14ECD5A1804FFB80DF1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:ca:50:20:c0:33:f1:ed:1d:6b:74:08:fa:
6c:9c:b0:6a:e5:ea:4b:a8:8e:a8:16:85:3a:0f:86:
2d:27:87:59:41:2d:ae:d5:79:b9:99:04:a0:aa:88:
38:a2:e7:86:25:44:d5:6b:ae:f2:25:65:93:6e:d4:
d6:67:ac:84:b0:5e:cd:ba:f2:7f:a0:64:7b:f6:46:
bb:86:0f:51:4a:c8:0a:e1:e0:62:96:41:cf:ea:9d:
ca:8d:64:ed:42:7a:2e:a8:ce:c8:b9:de:6c:31:a2:
04:7b:08:1c:f7:b8:97:a2:a1:64:a8:2f:b8:de:57:
2c:f5:ab:cd:99:0c:1a:c6:7e:02:c4:26:71:0f:34:
3c:09:49:b5:c2:13:8a:76:ca:bc:88:db:1a:9b:30:
89:f0:2c:6b:c0:b4:86:2d:1a:6e:d3:d1:17:d7:41:
bb:38:0a:61:3c:df:35:70:c1:ce:5d:8a:6a:67:54:
91:4b:9a:31:56:36:2a:ca:0b:5e:66:39:07:02:c1:
b6:94:6f:b9:01:1f:ec:24:db:6d:7d:ad:8e:f2:5f:
df:02:30:26:23:79:28:32:cb:06:61:a4:44:f5:25:
53:25:4d:1a:8e:a8:f1:c0:68:5a:21:5b:33:66:a1:
8f:7e:91:1e:48:33:83:bf:a4:05:cd:28:f3:16:0c:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:91:31:C0:0E:B8:6B:79:E1:4E:CD:5A:18:04:FF:B8:0D:F1:C2
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0c:92:58:67:0f:35:59:76:af:ce:1f:82:c0:23:8e:02:70:
9b:9b:db:1c:49:ce:24:8f:33:91:d2:45:89:a0:8e:71:6c:f8:
64:2f:1b:e9:c2:5e:38:8e:3f:00:82:2d:ed:61:5a:af:b2:8d:
da:7c:bf:98:12:d6:64:c2:37:3c:a8:0e:27:64:ff:5e:19:ce:
a0:64:90:54:65:22:f3:15:ec:54:63:24:04:89:82:ac:24:ef:
16:b4:a4:c1:c4:34:3a:da:b7:bf:86:f6:4e:fa:e9:c3:f9:7c:
d9:a8:a7:82:a4:e9:ca:48:51:e1:3b:29:d6:7f:45:8b:38:dc:
94:e6:73:a5:3a:e7:96:fa:39:3a:51:11:d8:47:dd:1e:d5:b5:
3c:4f:ae:9f:c1:82:87:c0:25:d0:87:4c:f9:64:39:21:e6:88:
4d:fa:d3:fb:0e:a6:61:13:b5:c0:cd:a7:81:bb:9a:2d:d6:83:
5d:4b:b1:71:b9:4a:db:dc:30:06:0c:d8:29:fd:b0:62:3c:c3:
17:d7:4a:40:0d:f1:34:b3:bc:ef:61:6f:5b:79:27:9c:6d:f8:
25:f3:07:b4:ed:ce:03:89:2f:8f:62:22:16:d3:b5:8a:f3:ff:
c5:33:ad:1e:0a:0a:ac:40:fc:79:50:ac:fb:94:a4:a4:4d:79:
9c:0a:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net