Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230312e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3230312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: wn4kYrh/FYz/h3YjgW0BSHInuZSmHO+8lToagxOtGB0=
Subject key identifier: 70:4C:92:5D:B6:61:2F:87:1E:C0:57:42:EE:74:13:3F:1D:97:47:5E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1C65103C9508B6464424A06CD03D577BB7217BA4
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230312e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 17:00:02 +0000
ROA not before: Thu 07 Apr 2022 16:55:02 +0000
ROA not after: Thu 06 Apr 2023 17:00:02 +0000
asID: 24203
IP address blocks: 112.215.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:65:10:3c:95:08:b6:46:44:24:a0:6c:d0:3d:57:7b:b7:21:7b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:02 2022 GMT
Not After : Apr 6 17:00:02 2023 GMT
Subject: CN=704C925DB6612F871EC05742EE74133F1D97475E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:fe:42:76:e5:d2:a4:27:8a:53:d0:08:6b:
6d:a6:66:0e:a7:52:ba:41:7e:e4:8e:b3:b7:f2:5a:
dc:18:f0:f0:81:e0:b5:9a:49:37:13:47:76:77:5b:
a1:b2:90:87:3e:fa:d0:3f:9a:13:17:46:18:f5:3a:
93:4c:a0:ae:7c:ea:4f:0d:22:34:ab:e0:2f:36:dc:
d0:03:24:9d:93:7f:e1:29:dc:29:f0:7d:70:07:f2:
bd:90:fe:fc:a0:c1:42:eb:4a:4d:3a:db:3b:a7:ea:
00:f7:f6:6c:fd:08:d0:61:65:27:3e:0c:47:4f:6d:
4d:62:50:76:8e:d7:4b:1c:2a:2f:9b:d3:56:1f:bc:
ac:ff:8c:72:c0:3a:13:e9:be:76:de:c3:24:35:19:
85:c8:23:60:ca:9b:3a:2e:cb:a8:5a:6f:54:c1:64:
aa:3d:35:91:56:0b:14:9b:e4:e1:f5:09:92:42:1b:
f8:ed:00:2c:34:51:b6:ef:e7:25:49:0d:a9:77:31:
18:75:22:fe:95:c5:05:5b:49:be:ed:e0:8d:57:5b:
c3:07:9d:06:c0:59:b4:c8:80:85:d0:31:c9:99:8a:
cb:0d:24:51:b5:a8:7b:4f:4a:02:7c:a1:66:8d:93:
6a:a2:45:ab:53:c4:43:24:d2:7c:b3:1f:f0:7d:62:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:92:5D:B6:61:2F:87:1E:C0:57:42:EE:74:13:3F:1D:97:47:5E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.201.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7e:93:ce:72:e2:7b:fe:b0:9c:c7:b7:fc:8c:c5:ce:e4:ea:
dc:ed:5f:89:1f:81:72:eb:14:53:92:fd:85:fb:bd:79:68:6b:
71:d7:8c:5c:b7:b3:24:63:8f:67:fc:96:cb:3e:71:f7:b3:ed:
9d:db:61:8e:2c:94:db:a2:b6:25:3d:75:18:ae:3d:47:02:71:
cf:69:b4:5b:56:eb:0a:ac:a9:32:35:00:9d:20:4a:9d:df:c5:
92:cb:83:00:a8:13:4b:50:12:43:a7:4e:6b:5b:63:79:af:db:
48:5d:b7:0c:1a:e3:27:fc:c3:a2:b3:7e:cf:49:e2:22:1c:6f:
38:05:e3:55:bf:ce:13:73:a2:e0:28:37:40:b9:83:b0:10:a0:
54:b7:0d:8f:eb:52:25:cf:5f:d1:30:00:e3:a5:ab:e3:1f:7a:
60:f8:84:1e:44:36:6e:b7:51:24:38:5f:f3:f6:4d:22:f6:81:
fe:cc:4f:9e:09:66:dd:a3:da:7a:6a:ee:89:46:00:a0:cb:bc:
8f:81:1c:b5:b9:a3:d0:35:73:53:65:aa:61:41:49:e9:58:f8:
bf:fc:08:28:41:66:52:ee:85:af:19:2c:f1:77:6d:e8:9a:5e:
0d:55:4c:a1:99:c7:b9:60:02:e8:df:b7:c3:84:24:58:ec:01:
12:bc:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net