Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231322e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3231322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: p5cK2hKEfBgK/Uds/7Xh0nt2pCLYXL1+Hk5b7Ra8I7c=
Subject key identifier: 15:02:6B:FD:C6:F8:0A:2B:C6:D2:2D:D3:B5:5F:FF:04:1C:0D:A2:72
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 71DA05111B25700106F0555792345ED4BDD5FDE8
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231322e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 08:00:00 +0000
ROA not before: Tue 12 Apr 2022 07:55:00 +0000
ROA not after: Tue 11 Apr 2023 08:00:00 +0000
asID: 24203
IP address blocks: 112.215.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:da:05:11:1b:25:70:01:06:f0:55:57:92:34:5e:d4:bd:d5:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 07:55:00 2022 GMT
Not After : Apr 11 08:00:00 2023 GMT
Subject: CN=15026BFDC6F80A2BC6D22DD3B55FFF041C0DA272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:bb:87:b7:71:4f:39:0b:91:e4:d8:9c:11:
dd:70:7c:1c:95:f0:fa:6e:01:10:ce:44:57:61:2e:
87:60:18:4c:3d:5e:3b:7d:e3:61:f4:52:8f:b3:96:
19:c8:7b:19:d2:9e:01:65:b1:a4:b0:87:a6:65:8b:
a7:ad:c5:68:1b:05:5e:55:9f:25:81:5d:21:00:b1:
2f:54:9d:a1:36:b7:14:3c:3c:11:a7:85:47:8b:f5:
28:0b:4a:1e:fb:87:3b:5a:6b:9f:39:23:2f:0c:21:
ac:79:f6:77:ac:69:e3:13:de:6d:56:5e:b2:ca:41:
6a:ee:48:ad:75:f2:eb:0a:cf:f8:2f:a0:1d:80:d0:
4a:42:1b:0e:1b:8d:b0:81:f4:ed:ab:c8:87:4d:93:
dc:6d:90:0f:0c:b6:4d:23:c1:fa:82:ac:4c:13:6a:
ca:9f:4a:36:3e:a1:e5:f1:d9:20:0d:f8:1f:5a:33:
f4:a3:3d:65:b9:05:d9:f2:2d:c7:b3:9f:27:91:54:
40:17:2a:1c:c4:0b:fd:48:4d:cf:2b:b6:62:03:44:
3b:a9:b1:db:a5:36:03:5d:28:e5:b0:2e:15:51:ae:
8f:76:4d:c3:49:80:06:81:a2:72:f4:cb:e2:15:b5:
9d:6f:c0:81:13:69:36:85:79:1d:31:f4:df:c1:47:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:6B:FD:C6:F8:0A:2B:C6:D2:2D:D3:B5:5F:FF:04:1C:0D:A2:72
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231322e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.212.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d4:70:98:30:e9:84:9c:63:82:e9:7c:15:25:c4:85:da:21:
07:c0:6c:d1:65:6d:47:d5:cc:be:c6:c8:69:54:8e:ea:31:1c:
0c:88:b3:b8:dc:87:a1:08:ec:b8:33:d0:ae:83:c0:ac:71:87:
e5:2a:ee:6b:ed:dd:a2:98:f1:38:03:c4:38:1b:bb:18:41:13:
e6:79:2b:5c:af:ac:74:45:01:6c:19:3e:c9:40:4c:be:93:7c:
e6:d5:8e:c2:bc:12:b8:9b:de:43:02:ce:01:6f:d1:56:f3:5a:
80:aa:1a:c8:09:de:3d:19:d5:2b:b8:33:76:61:26:29:6a:54:
10:d7:70:3a:3e:85:9e:69:9a:e4:4b:8d:d3:7e:e0:47:42:99:
30:1b:45:e6:57:1f:f6:5d:ac:1f:9f:be:99:93:f6:d3:68:78:
27:2f:80:b3:27:84:91:99:a2:da:2c:fb:bc:54:30:ff:a1:22:
1b:37:25:6a:fa:14:8e:e5:8e:64:1e:1a:a7:71:79:29:79:ea:
66:9e:91:5d:31:d1:26:7e:e5:71:bf:4a:3b:c7:40:ad:93:98:
61:5a:d7:80:3b:06:93:84:cc:33:6d:f3:aa:b5:1c:af:4c:7a:
03:59:a6:74:f2:9b:33:f7:9b:23:5f:ae:0b:7c:f0:3f:88:6a:
36:e8:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net