Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230392e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3230392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: LgtFKx9zEAAtcfGNJis5aayF0XkGgbi5FcU88l5c32E=
Subject key identifier: C7:99:D1:22:75:70:FB:2F:DC:EA:C2:F0:A3:E7:59:55:5D:DF:43:99
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7906EDFAB3E295975B32B74BE946668FD571FF82
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230392e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 17:00:02 +0000
ROA not before: Thu 07 Apr 2022 16:55:02 +0000
ROA not after: Thu 06 Apr 2023 17:00:02 +0000
asID: 24203
IP address blocks: 112.215.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:06:ed:fa:b3:e2:95:97:5b:32:b7:4b:e9:46:66:8f:d5:71:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:02 2022 GMT
Not After : Apr 6 17:00:02 2023 GMT
Subject: CN=C799D1227570FB2FDCEAC2F0A3E759555DDF4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:7b:43:cf:95:a2:4f:27:7a:90:fe:94:60:
49:ba:55:7e:0a:b4:46:0e:62:76:20:dd:93:01:5f:
d2:95:96:1e:29:3b:c1:f9:f9:73:2d:76:19:a8:91:
f7:52:fb:df:ef:88:24:29:31:4e:d7:fc:6a:7a:b9:
dc:bc:2f:e7:47:b8:76:2f:c3:f9:d5:ef:f0:66:11:
61:67:e9:06:10:26:d7:b4:07:4f:60:5c:a1:0d:33:
eb:7a:52:bb:aa:86:8c:52:95:7e:fc:8e:46:23:fe:
0d:64:5e:74:d0:78:e8:50:ef:1c:3b:59:a9:1c:7b:
e1:6f:99:62:64:1e:16:0c:6a:d7:7d:a3:f7:ea:7b:
1a:48:0c:c4:8c:74:09:e8:4e:68:33:33:93:da:40:
a3:06:f0:64:d6:63:47:43:18:5b:71:5e:cd:6d:ae:
11:cf:13:d7:f7:a8:15:b1:f5:23:a4:d3:55:83:4e:
da:a7:18:1c:7e:eb:75:8f:ed:ff:57:f7:d4:64:c9:
4a:1b:f2:f7:e6:25:90:a2:c4:99:91:32:b8:9d:92:
78:c7:5e:60:eb:6e:3c:4b:b0:13:00:90:6f:5f:48:
51:94:9c:a7:ad:e9:d4:48:c4:4e:52:d6:5d:85:a4:
9f:f6:97:71:7a:1e:9b:06:30:df:91:62:9a:2b:84:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:D1:22:75:70:FB:2F:DC:EA:C2:F0:A3:E7:59:55:5D:DF:43:99
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3230392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.209.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6c:e2:99:94:3a:24:1e:3c:3d:7e:20:f1:53:7b:91:21:23:
fd:2e:45:b3:06:3e:e4:d0:6e:02:89:15:56:85:43:5d:53:71:
b7:76:1a:d2:af:13:24:b6:b1:e9:3e:e4:7c:4b:8f:c5:4c:2d:
af:11:d6:39:ee:6f:74:e2:c7:38:cb:2f:dd:22:d3:db:fd:f3:
f7:34:0b:fb:57:ea:4f:42:aa:d3:5b:7c:45:b9:1c:49:84:2f:
72:5d:86:04:e8:a3:5f:9c:bf:55:0f:aa:21:64:7b:cc:1e:d9:
7b:96:ea:a0:ee:98:bd:6f:5d:23:24:d4:da:cf:18:66:24:15:
2f:39:76:83:51:a4:e5:63:9e:a5:37:a4:cd:ac:9a:aa:06:8a:
85:1c:83:6e:ec:d9:84:5f:0d:ee:dd:48:37:79:e9:6f:3a:11:
42:88:51:2f:60:0e:99:a4:c4:fd:42:39:22:e3:8a:91:31:42:
ea:26:42:bc:cd:88:8b:6f:f8:b5:62:bc:83:b2:80:ef:a6:a5:
2f:f3:05:8e:03:6e:66:10:b0:f8:75:57:50:ac:43:dd:f6:d0:
02:11:8d:e7:93:c0:52:36:10:a4:13:b0:a8:ce:4e:e0:c8:a6:
2e:ca:a7:6e:03:ae:e1:5a:3f:60:a9:d8:70:ec:ff:8d:9d:fb:
06:50:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net