Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232322e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3232322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 3ZOrvL0Ix3atFDnqSaixr+T3qSbnQVTLSV+Gg0f8aPM=
Subject key identifier: BA:7D:72:0C:09:12:FB:B0:46:F1:18:AD:58:B3:72:BF:9A:24:C1:E7
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 20B6686E884585F4E73979A6DC73C7365ACE4DFF
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232322e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 08:00:01 +0000
ROA not before: Tue 12 Apr 2022 07:55:01 +0000
ROA not after: Tue 11 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 112.215.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b6:68:6e:88:45:85:f4:e7:39:79:a6:dc:73:c7:36:5a:ce:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 07:55:01 2022 GMT
Not After : Apr 11 08:00:01 2023 GMT
Subject: CN=BA7D720C0912FBB046F118AD58B372BF9A24C1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:20:2d:01:ad:14:60:4a:76:22:f9:fa:da:
d0:36:87:3a:41:37:33:2c:84:d9:b2:f1:25:be:8a:
5d:4c:49:1b:c9:01:92:18:0c:1a:38:68:35:44:71:
7d:f0:19:eb:71:32:d5:a6:0d:15:a8:b5:0f:62:fe:
e0:d5:d0:44:b8:c9:71:ae:9c:cc:94:95:cb:54:7a:
e9:80:40:46:a1:ea:d4:5b:d6:5f:59:af:18:05:b3:
b9:5b:b3:a7:e0:26:c0:2d:4a:f8:f8:ad:59:70:d0:
5e:ca:de:f5:55:96:04:54:d8:4c:2e:0e:3b:c3:fd:
e3:25:6a:96:87:1f:9f:4f:a7:79:f4:fd:63:3b:ce:
6b:7c:4f:1a:14:d5:c9:bb:88:56:bb:27:ce:20:af:
a9:0d:bc:97:b9:68:24:a2:64:c2:5b:27:5a:e2:ba:
58:18:84:a1:57:7e:3d:8b:16:5b:1d:ab:c1:2f:91:
7d:dd:78:d1:f5:4a:6e:be:03:b3:0f:8b:6c:ae:33:
b0:5a:9d:ff:3d:cb:0b:6a:ff:c8:73:37:4d:8a:cc:
a1:ab:69:ff:c7:9a:36:cc:84:b8:7a:af:70:be:f3:
db:10:06:71:27:a5:d4:a3:15:c5:63:78:89:b8:3c:
5e:e1:0d:8a:33:cc:71:be:31:b9:84:1d:5b:f1:76:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:72:0C:09:12:FB:B0:46:F1:18:AD:58:B3:72:BF:9A:24:C1:E7
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232322e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e7:7e:22:ba:07:e8:ff:6c:0b:5e:65:c3:d4:12:e5:3e:04:
93:45:76:70:3c:17:ac:78:81:09:29:43:ef:c8:fd:31:6b:80:
68:b1:1f:1c:34:69:f5:5d:b9:e2:b8:86:bb:dc:0e:b3:a8:dc:
ab:f2:75:f3:12:40:f2:f5:01:89:13:9d:74:97:34:c8:b5:6b:
b6:69:e6:a8:05:8a:96:b9:76:64:e5:52:9c:83:c6:08:a6:f0:
30:ae:96:3f:2e:8c:7a:e4:39:4b:9f:aa:3c:7d:a2:dc:cc:7d:
85:01:f0:be:d4:89:66:66:66:a0:a8:e5:ac:28:4f:38:b9:45:
b9:78:13:d3:8a:f2:7e:cb:0a:f3:ba:b4:e5:c3:bb:df:12:61:
44:89:d9:39:05:d6:0e:01:ad:c5:8e:dd:1c:90:84:9b:ff:98:
45:9d:21:98:2f:d1:dd:49:ce:70:ba:ad:ac:ae:7c:51:d0:87:
99:e3:c6:3c:cb:27:62:fb:77:a4:be:b4:61:15:0e:b3:1d:9e:
c3:b6:8c:e8:7d:26:40:bd:ee:77:7a:3a:a5:40:22:ba:93:97:
d9:d4:71:c2:c3:40:f5:b3:bd:29:0d:d3:03:42:4c:8b:0b:18:
68:dc:be:ba:c8:b5:b4:39:c4:7b:28:58:7d:7a:1c:de:c9:80:
d6:97:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net