Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233312e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3233312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: ZTAWyIIiih9c6vuF8AMO0+mgF0wVGa1m+2UakeBI/JQ=
Subject key identifier: EC:70:CB:93:A2:D9:4A:58:83:EE:A9:0D:B7:77:74:55:37:D7:52:B2
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5048AB0391A2FD10E1677DBE1F3175AB9FD48C76
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233312e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:01 +0000
ROA not before: Tue 12 Apr 2022 08:55:01 +0000
ROA not after: Tue 11 Apr 2023 09:00:01 +0000
asID: 24203
IP address blocks: 112.215.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:48:ab:03:91:a2:fd:10:e1:67:7d:be:1f:31:75:ab:9f:d4:8c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:01 2022 GMT
Not After : Apr 11 09:00:01 2023 GMT
Subject: CN=EC70CB93A2D94A5883EEA90DB777745537D752B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:b3:aa:8d:a0:96:d8:f9:af:da:c3:06:0b:
b5:b2:7b:5b:29:31:a3:49:3c:35:d3:e1:d2:c3:52:
0b:4f:9e:46:3d:13:b1:d4:2a:95:39:e2:e3:b8:6e:
fb:a8:42:c2:e6:8c:58:94:db:a9:4b:fc:05:bc:ad:
8d:66:c2:22:4a:31:28:fd:2f:12:ff:80:2c:a7:c4:
09:8e:7f:cb:fb:c9:50:8a:93:f0:fe:75:33:c1:14:
41:b8:e7:fe:71:2c:fd:78:3f:5f:50:da:f6:39:68:
f5:53:7a:d0:47:f3:c2:b9:95:43:19:2a:37:17:a9:
01:9e:e7:4c:bc:76:64:b0:42:d3:a0:5d:4b:c9:f3:
26:d0:a3:2d:1d:7e:b9:3c:1e:b3:4f:18:07:9a:1c:
fc:21:e6:43:4d:d1:89:88:00:a4:ad:46:c1:a7:60:
2d:dc:e2:55:e1:c0:9b:cf:5b:be:3f:28:5e:dd:14:
83:b2:30:27:01:0d:f0:9a:6c:8e:2e:f5:6c:64:3a:
16:b5:c2:a1:26:c8:e3:2d:75:bc:b8:f0:9e:59:11:
de:5d:be:ee:85:a3:fa:a9:8f:e6:82:73:da:09:20:
a1:f7:31:6b:13:5c:dd:df:79:2d:7c:3e:36:62:b1:
88:71:00:3a:67:60:99:c3:d6:8e:d8:aa:a2:36:12:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:CB:93:A2:D9:4A:58:83:EE:A9:0D:B7:77:74:55:37:D7:52:B2
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bf:f2:9a:11:af:09:36:77:a2:a5:42:bd:72:68:92:f9:87:
59:13:0c:1f:bb:35:3f:2c:56:f6:f3:fc:fa:e4:ae:ff:5d:90:
55:70:a6:78:ab:1f:a2:85:dd:1d:b8:30:c9:61:5c:eb:81:b3:
48:b0:82:25:7c:8f:9e:ff:60:b3:9e:b0:b9:99:30:fd:7f:6f:
66:db:68:92:4a:95:d8:b1:cf:63:c9:ce:0b:26:5d:25:e7:a4:
00:c7:da:93:9a:31:45:d2:b4:a6:6d:32:eb:0f:f5:4e:46:39:
be:39:eb:ec:00:66:2b:31:68:77:ba:5f:48:96:b9:f6:e2:34:
e8:96:ee:f8:03:45:41:7a:5f:c8:bc:76:13:f7:08:ef:32:d8:
ba:5a:0b:43:ac:a4:91:b2:b0:9e:b1:a4:30:79:ea:91:09:2f:
dc:dc:43:8d:f8:b6:e3:68:6c:25:07:9f:54:c0:a5:b6:36:e0:
8a:9c:aa:d9:1b:f4:ca:39:09:87:30:26:fd:79:95:4d:19:98:
3e:ee:a4:f3:81:34:08:1a:eb:0d:3b:bb:a3:97:ac:b2:1b:6e:
20:11:03:53:b5:1d:e7:26:a1:da:5b:04:ac:db:09:8d:42:d8:
95:e2:51:38:90:76:49:6e:1c:49:eb:4b:4d:98:a2:b4:23:09:
5c:8c:fc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net