Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231392e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3231392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: irZlC/m0QPrVuLyBkIenPXmgbMpNjrQhMvBgKyKQcCU=
Subject key identifier: 26:CB:8D:B7:A2:7F:6D:E8:70:D2:03:DD:9A:87:A6:0C:CC:7D:46:84
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 657FF7F792CB6C08C64DD328EA5234A0D9B2964A
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231392e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 08:00:00 +0000
ROA not before: Tue 12 Apr 2022 07:55:00 +0000
ROA not after: Tue 11 Apr 2023 08:00:00 +0000
asID: 24203
IP address blocks: 112.215.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7f:f7:f7:92:cb:6c:08:c6:4d:d3:28:ea:52:34:a0:d9:b2:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 07:55:00 2022 GMT
Not After : Apr 11 08:00:00 2023 GMT
Subject: CN=26CB8DB7A27F6DE870D203DD9A87A60CCC7D4684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:0a:ca:fc:f7:47:ae:85:59:a0:dc:e9:93:
28:bd:85:37:e7:9d:58:e8:53:74:e8:c0:66:05:03:
25:88:a6:e5:4c:0c:f7:b5:8c:c1:f8:c5:98:50:60:
ff:95:ef:9c:d2:bf:74:da:2d:54:43:37:89:4c:32:
8a:57:67:7d:95:d8:8e:85:bd:9c:38:72:f4:56:d8:
2f:c5:71:f5:55:9c:10:f5:e2:09:55:d4:10:65:56:
91:d7:28:5d:fd:18:9b:8f:59:6e:68:80:ed:af:c0:
e8:9d:a2:43:af:9e:c9:91:03:d4:90:3e:4e:6d:8d:
d4:af:45:20:eb:64:09:8f:1e:ac:a4:fc:a5:14:09:
9a:fc:ab:be:5e:c2:6f:42:52:4d:85:45:8d:41:4c:
d1:3a:cc:d1:0b:1c:2f:24:c6:f3:8d:3d:3f:8a:8f:
0e:48:3c:81:0e:b6:21:50:1f:f9:11:f0:d6:17:9b:
e1:f4:ba:0c:6c:73:7f:a5:b6:0e:52:e4:ed:83:41:
da:75:26:0d:b6:1a:4b:c4:13:d2:e8:6d:7c:a8:63:
8e:87:88:19:c4:0d:6e:d4:45:2d:22:36:89:c6:88:
37:c4:d8:55:5b:28:80:67:bf:e7:2e:44:28:be:8c:
04:00:32:b5:3d:73:17:8d:d0:5c:e7:ce:e7:fc:8b:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CB:8D:B7:A2:7F:6D:E8:70:D2:03:DD:9A:87:A6:0C:CC:7D:46:84
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3231392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8f:e1:ff:a6:35:9c:42:f3:89:d1:cf:52:f3:80:41:a7:7e:
b8:ef:71:3f:42:da:a7:d2:92:41:50:8e:1d:17:67:60:de:3f:
d8:90:2f:95:31:b4:fe:cb:cc:aa:79:1d:ef:af:e1:03:53:9c:
cf:8d:1b:0f:25:31:4f:6b:1c:c3:7f:1b:66:ee:79:74:54:a6:
db:47:56:f4:18:35:f5:81:e6:06:a3:b1:68:af:81:ff:1a:97:
b2:e9:13:08:9c:ac:3f:a2:8d:8c:2a:84:d0:c3:08:3e:20:46:
c7:15:7b:b5:93:97:55:cf:52:d7:fb:99:a8:e6:1d:f6:cd:44:
cd:ac:90:d6:d5:1e:80:2e:33:13:d4:d8:f1:fe:91:d9:49:6c:
18:15:c8:e6:c6:26:3d:ec:10:d1:f7:13:a3:88:f8:25:0e:36:
00:4f:e5:e4:cd:7f:5f:12:77:6e:13:ce:09:96:54:10:55:57:
9a:1c:a1:93:69:ef:3c:36:bd:8b:b5:f6:df:98:c5:67:e1:9e:
c8:2d:6f:24:e7:44:1b:56:9d:3e:56:63:e5:b2:05:4d:af:a0:
83:8b:95:8f:df:a2:a6:cd:82:86:0b:c0:22:34:99:1c:00:80:
d7:cf:31:0e:18:84:a0:98:81:d5:34:1e:7f:59:c0:a1:7e:43:
e4:28:30:69
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZX/395LLbAjGTdMo6lI0oNmylkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MTIwNzU1MDBaFw0yMzA0MTEwODAwMDBaMDMxMTAvBgNV
BAMTKDI2Q0I4REI3QTI3RjZERTg3MEQyMDNERDlBODdBNjBDQ0M3RDQ2ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuwrK/PdHroVZoNzpkyi9hTfn
nVjoU3TowGYFAyWIpuVMDPe1jMH4xZhQYP+V75zSv3TaLVRDN4lMMopXZ32V2I6F
vZw4cvRW2C/FcfVVnBD14glV1BBlVpHXKF39GJuPWW5ogO2vwOidokOvnsmRA9SQ
Pk5tjdSvRSDrZAmPHqyk/KUUCZr8q75ewm9CUk2FRY1BTNE6zNELHC8kxvONPT+K
jw5IPIEOtiFQH/kR8NYXm+H0ugxsc3+ltg5S5O2DQdp1Jg22GkvEE9LobXyoY46H
iBnEDW7URS0iNonGiDfE2FVbKIBnv+cuRCi+jAQAMrU9cxeN0Fznzuf8i5UPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJsuNt6J/behw0gPdmoemDMx9RoQwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNfbMA0GCSqG
SIb3DQEBCwUAA4IBAQCjj+H/pjWcQvOJ0c9S84BBp36473E/Qtqn0pJBUI4dF2dg
3j/YkC+VMbT+y8yqeR3vr+EDU5zPjRsPJTFPaxzDfxtm7nl0VKbbR1b0GDX1geYG
o7For4H/Gpey6RMInKw/oo2MKoTQwwg+IEbHFXu1k5dVz1LX+5mo5h32zUTNrJDW
1R6ALjMT1Njx/pHZSWwYFcjmxiY97BDR9xOjiPglDjYAT+XkzX9fEnduE84JllQQ
VVeaHKGTae88Nr2LtfbfmMVn4Z7ILW8k50QbVp0+VmPlsgVNr6CDi5WP36KmzYKG
C8AiNJkcAIDXzzEOGISgmIHVNB5/WcChfkPkKDBp
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net