Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232302e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3232302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 8dcswMC4tTfIP5fnIjhw3mWWGN6WWzThn2OLMNDDwpA=
Subject key identifier: 6E:E9:10:6F:96:9F:6D:E0:52:CF:84:B2:4B:33:62:95:38:B4:5C:2D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 759F87271643515E32598D698F5728067926EA4F
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232302e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 08:00:01 +0000
ROA not before: Tue 12 Apr 2022 07:55:01 +0000
ROA not after: Tue 11 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 112.215.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9f:87:27:16:43:51:5e:32:59:8d:69:8f:57:28:06:79:26:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 07:55:01 2022 GMT
Not After : Apr 11 08:00:01 2023 GMT
Subject: CN=6EE9106F969F6DE052CF84B24B33629538B45C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:19:f2:5e:4d:8d:e2:82:5e:67:a6:fc:48:
1f:1d:c0:b3:49:7a:86:ce:b9:a4:e2:b0:90:6b:a1:
9a:5e:1e:46:97:7a:92:11:92:d1:c9:94:e9:6d:4a:
4d:16:a0:60:41:dd:1d:8d:1a:70:9e:88:7e:f8:e2:
43:af:f2:39:f8:86:96:85:3a:c4:bf:84:f9:8f:22:
3e:38:b3:5f:1d:4a:52:de:51:59:a2:f4:2c:26:b4:
ea:e8:62:27:d7:ea:5f:13:06:23:92:2c:6e:06:fe:
ca:29:d4:e8:4e:34:ba:21:bd:cb:98:b8:fe:e7:dc:
af:7a:6e:07:f9:8a:7f:ff:4c:d5:0a:b4:0c:bb:e2:
6e:92:67:2b:df:8b:0b:2c:29:68:24:5b:72:37:af:
fe:d4:95:c2:b1:64:05:34:23:33:aa:93:56:bc:22:
ae:f5:8e:04:5f:7a:2d:3b:13:6d:19:78:64:d1:00:
03:5a:2f:c8:32:40:ee:7c:ec:e6:78:17:b9:15:2f:
a8:5a:aa:db:4f:ce:49:4d:1a:98:ba:4d:a8:17:8a:
b9:71:d3:97:1c:48:ec:80:7c:ef:c8:45:f1:cd:7a:
a1:cd:0d:f6:01:87:c5:98:87:9c:4f:49:2a:95:0c:
5e:d3:f5:ec:5e:a2:39:88:6e:57:a6:69:48:83:e8:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:10:6F:96:9F:6D:E0:52:CF:84:B2:4B:33:62:95:38:B4:5C:2D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.220.0/24
Signature Algorithm: sha256WithRSAEncryption
78:46:fd:53:85:f0:24:39:b6:57:82:e5:6a:b5:b2:f9:a9:b3:
69:fa:ae:6e:c4:99:7f:64:7a:ae:13:9a:9d:e3:2e:40:75:93:
f5:c8:d2:2e:9b:48:83:78:eb:ee:20:18:87:a3:db:55:e0:29:
81:ff:12:7f:19:4a:ff:42:9f:b0:59:0f:a3:b2:ec:2b:e0:61:
10:50:55:1d:a8:94:90:08:d4:62:44:8f:79:ae:78:5d:7e:e7:
76:8f:9f:b2:7a:0e:48:a4:40:d1:67:00:d3:ed:9c:86:d7:ae:
4c:b0:78:1c:a9:bd:68:25:e3:21:51:2b:98:24:3c:f9:c0:98:
b3:b6:7e:0a:63:df:bc:3a:45:94:16:2f:c3:57:3c:03:dc:8e:
db:d6:46:1d:7a:0e:d1:de:6c:d1:c1:67:7c:1b:27:e8:a4:61:
dc:2d:e8:58:ca:2d:d9:ea:e5:94:de:79:b5:6a:23:87:94:db:
0d:18:52:06:ff:f4:e3:06:f3:53:01:ed:89:59:9e:ec:27:b9:
af:5e:de:09:5c:5e:71:ed:56:11:df:b2:3c:b3:3d:7d:ff:88:
dc:12:6e:95:64:c6:67:6d:c1:12:57:1a:78:b4:d6:28:5a:14:
4c:e9:88:41:44:79:47:59:ea:69:f1:ba:c7:4c:c2:83:3f:d7:
8f:11:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net