Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232392e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3232392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: oxvM7RHTt2Cp3tAGW3V6ZbCN5kEHBRaNotQXUnxeBwI=
Subject key identifier: 59:2D:73:84:E4:0F:AF:D1:5F:52:8A:CF:44:F5:89:96:1F:82:8B:86
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 3F4A70C681DC1A3F2FE7B7838E1A14C5A38E4CDC
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232392e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:03 +0000
ROA not before: Tue 12 Apr 2022 08:55:03 +0000
ROA not after: Tue 11 Apr 2023 09:00:03 +0000
asID: 24203
IP address blocks: 112.215.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4a:70:c6:81:dc:1a:3f:2f:e7:b7:83:8e:1a:14:c5:a3:8e:4c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:03 2022 GMT
Not After : Apr 11 09:00:03 2023 GMT
Subject: CN=592D7384E40FAFD15F528ACF44F589961F828B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:0a:e7:78:ff:9b:e6:d0:b8:df:79:cd:cd:
1d:d0:43:c8:a3:99:89:03:88:7a:c8:1f:15:a3:8a:
88:9a:a2:83:84:33:64:a4:7f:85:39:f0:61:97:47:
2b:b5:d6:18:e0:64:b8:b1:c0:c5:ab:c0:ae:6e:24:
02:be:5a:46:e0:c3:e5:a0:7e:22:e9:96:b4:e9:e7:
7d:bd:1d:21:95:90:6a:91:65:ae:82:95:56:5d:cf:
3e:16:7b:ab:c2:fa:8f:2d:1f:35:d8:b8:cd:39:91:
99:2f:63:01:e9:f8:70:49:32:bc:83:0e:f2:26:fe:
aa:e5:23:7a:14:7a:3a:f4:d3:6b:61:8c:ab:aa:af:
80:fb:87:90:1b:9d:39:90:04:c6:20:4b:68:6e:47:
92:77:89:a4:ed:65:ba:57:b0:a2:f2:7f:b6:fb:ee:
34:88:33:34:72:98:81:1b:37:7d:c0:30:23:26:cf:
e9:5d:01:31:53:cb:74:af:0b:72:bc:05:f4:37:9a:
08:88:38:ac:51:39:5c:5d:c6:1a:ee:16:8c:2c:b6:
be:a0:3f:75:54:36:17:e8:1c:bb:df:47:bb:8f:f8:
c5:79:f3:ef:91:83:d6:61:a0:d3:ec:8f:0c:26:c2:
21:3f:a0:7c:ff:37:b2:9b:3f:62:1d:34:4d:0e:84:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:73:84:E4:0F:AF:D1:5F:52:8A:CF:44:F5:89:96:1F:82:8B:86
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3232392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b0:3f:1f:26:a6:ce:04:f5:2c:4a:8c:70:d3:68:32:9a:71:
d8:25:5b:1c:60:4c:35:a6:2b:80:00:f2:21:fc:de:4d:4d:63:
87:33:08:b8:e7:50:5a:60:f6:54:7a:9e:73:02:27:7c:99:40:
0f:4b:98:0a:f5:21:36:80:f4:d0:16:28:65:3f:ad:70:5c:5c:
35:ca:5c:d2:67:df:00:bc:0a:1b:dc:f4:8d:61:0f:ac:8b:a5:
2d:d1:13:59:20:8c:86:c6:59:fe:ac:ad:93:a7:94:2f:61:60:
86:88:07:8e:99:e2:9a:34:3d:71:f2:bf:d0:3a:cb:73:b3:3e:
f5:80:6e:05:c1:76:02:07:4a:e8:24:b9:99:e9:1f:37:29:64:
b3:40:5b:36:ef:92:2d:c7:83:83:49:f2:6f:f3:0a:09:7a:db:
c4:8d:ce:a8:df:86:b3:e6:d2:c9:4a:4b:64:df:ea:23:66:f1:
45:97:50:a2:27:6b:c6:6f:c1:1e:02:ef:95:d1:ea:02:19:c5:
dd:0c:26:fb:04:5f:29:cf:c0:b1:a1:4d:a9:c7:a7:3b:ed:f6:
3f:bd:35:ae:95:13:9b:f1:3e:e4:bd:88:68:57:b6:f6:d8:8f:
be:f3:11:c5:23:3b:42:07:92:2b:fc:1d:68:7e:1d:bc:65:16:
75:ce:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net