Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233372e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3233372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 85l9GkhVd+7UPP790PQRB9EISna7pEy60gKSsHTxLs4=
Subject key identifier: 73:8F:32:D6:1A:0F:A0:7D:98:64:82:4C:62:6E:6B:80:AA:AD:0C:36
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 4F22250CDF60CA779CF1CB7589F5A81DA26DFE1F
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233372e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:02 +0000
ROA not before: Tue 12 Apr 2022 08:55:02 +0000
ROA not after: Tue 11 Apr 2023 09:00:02 +0000
asID: 24203
IP address blocks: 112.215.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:22:25:0c:df:60:ca:77:9c:f1:cb:75:89:f5:a8:1d:a2:6d:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:02 2022 GMT
Not After : Apr 11 09:00:02 2023 GMT
Subject: CN=738F32D61A0FA07D9864824C626E6B80AAAD0C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:40:66:28:ee:b1:92:5e:df:61:2c:b1:8f:
63:b1:8b:7e:b9:be:ad:97:26:39:f4:32:f0:92:eb:
74:91:71:36:a3:66:24:f8:52:09:8b:27:90:09:46:
c3:46:2c:ae:35:77:78:6f:00:1e:15:6c:7a:36:04:
b1:b5:5d:6f:f5:df:38:bc:05:cb:3a:55:94:13:31:
7f:ed:cb:b5:23:ff:49:45:9e:0b:23:f2:c0:2f:bc:
6a:c2:f5:db:f4:49:41:b2:7b:b6:33:e8:01:17:84:
16:93:31:6c:d2:73:0b:00:fc:9a:27:3d:67:56:21:
4d:9f:f6:02:3f:a3:c1:ff:1a:4d:02:06:52:35:71:
23:84:88:aa:3b:0f:bd:87:b9:2f:df:6a:bb:da:44:
2b:1a:3f:2e:8b:71:93:92:b6:30:35:2c:2e:2e:fe:
7d:fe:66:87:d4:c2:72:8a:76:98:33:15:00:86:25:
f6:f6:c1:75:6b:83:68:fb:74:71:20:dc:8c:8f:7b:
a2:bb:21:30:b4:0d:9c:e9:97:92:08:68:85:ab:eb:
62:27:3c:1d:bd:de:7f:05:25:56:14:39:00:93:61:
f5:5b:1e:80:61:54:86:fa:e0:82:02:23:82:74:b6:
69:07:e6:ee:07:fb:c0:0c:e6:5d:4a:6d:a3:8b:8e:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:32:D6:1A:0F:A0:7D:98:64:82:4C:62:6E:6B:80:AA:AD:0C:36
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.237.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ef:59:7e:ae:59:42:c9:d1:ff:fe:d0:13:29:88:b3:d8:b5:
8d:b6:36:18:c5:84:2f:f1:7b:20:ba:1f:90:de:36:7b:1d:33:
80:27:9f:21:f3:0a:5f:02:94:77:ca:d7:08:84:e5:33:15:d0:
4c:a0:73:78:24:4d:bf:29:ab:a7:46:0f:78:7f:26:76:17:20:
b9:44:4c:ea:eb:6b:c8:fa:c1:85:60:f9:60:f0:0f:90:2b:1a:
de:7a:b5:7b:bd:bd:31:3e:0b:0d:57:98:2e:d7:0d:8f:de:35:
f3:2e:16:ff:90:e8:04:47:9f:9c:c3:4f:c9:d4:d0:78:c0:75:
e1:ef:83:59:12:29:4e:30:44:44:8d:a0:42:2e:20:d8:0d:5e:
91:bd:48:9c:9b:01:ec:be:06:59:4f:fa:63:94:c8:96:71:4d:
5c:37:ce:69:45:f2:1a:cc:0a:ff:83:e1:20:8f:d9:90:f1:85:
8c:7f:57:60:89:ce:f7:21:a3:3f:3e:68:76:a8:0b:e3:2b:bf:
34:37:a7:ac:70:5f:0c:db:70:62:3f:92:ff:72:1d:a2:70:17:
aa:fe:0a:b7:d0:70:59:14:f0:69:d6:53:0a:e2:e3:2a:e7:fd:
fb:7e:15:40:97:25:5a:41:d3:9e:25:ab:b0:dc:04:e3:d2:e2:
c8:f8:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net