Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233392e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3233392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: /ksvnzFiA5SOq7+TfSjQXxE8KeCzXH2hTWUyKGqaKvI=
Subject key identifier: 09:C1:F4:15:76:0C:F3:53:EE:32:7E:5E:1D:64:C0:B6:1F:01:5F:7E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7DDEECCAB00225613A8F85F395EA91B882CD3845
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233392e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:04 +0000
ROA not before: Tue 12 Apr 2022 08:55:04 +0000
ROA not after: Tue 11 Apr 2023 09:00:04 +0000
asID: 24203
IP address blocks: 112.215.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:de:ec:ca:b0:02:25:61:3a:8f:85:f3:95:ea:91:b8:82:cd:38:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:04 2022 GMT
Not After : Apr 11 09:00:04 2023 GMT
Subject: CN=09C1F415760CF353EE327E5E1D64C0B61F015F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:d6:99:ed:a2:88:2a:f0:ae:e3:ed:9f:98:
d3:98:fa:3d:b1:d5:d5:ed:fe:80:51:98:c2:d7:0f:
0e:e0:63:c2:e7:db:f2:b3:5b:e7:f6:4d:b7:b4:ff:
63:72:fa:2a:b7:db:c4:e9:94:49:8f:27:fc:23:c5:
07:cf:ab:30:25:40:6a:11:84:c0:03:a3:94:a1:79:
5c:16:5c:42:1b:e7:2f:44:d1:02:50:55:e6:dc:ee:
f3:6e:50:93:c5:51:22:98:cd:26:a1:5d:ec:e7:26:
09:9c:1d:e4:9d:81:e4:c1:b5:eb:d0:1e:3c:e1:dc:
a4:87:f3:e4:53:71:73:97:ad:cb:60:df:c5:7f:88:
ce:e4:41:c9:d1:c3:1d:82:5e:06:55:c0:be:cd:34:
13:b5:af:e7:80:a9:25:bb:4b:38:20:ba:12:e6:94:
5f:43:cb:b6:a7:5b:5a:14:d4:dc:2c:f9:f5:94:de:
61:87:15:1b:77:3a:20:bd:0e:97:06:d5:28:be:19:
cc:bd:d0:35:ec:e9:15:3b:8a:56:1a:ec:9c:0e:3d:
a8:ca:96:72:f0:ea:ae:8a:3b:07:cc:cf:e2:f2:dd:
16:84:44:a3:15:e3:45:cd:69:61:ba:23:e0:76:f1:
ff:1e:b5:74:f3:36:64:df:52:33:91:fd:85:fc:f4:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:F4:15:76:0C:F3:53:EE:32:7E:5E:1D:64:C0:B6:1F:01:5F:7E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:66:3f:d6:fe:3e:dc:83:88:b4:19:96:34:2b:2b:b9:34:ad:
d4:0a:45:a7:70:2e:a3:3c:d3:35:47:7b:4a:16:46:04:dd:71:
a3:bf:86:7a:26:de:af:5b:dd:e5:5a:c1:fb:54:06:1b:b2:cc:
12:7e:92:86:96:98:eb:6b:5d:56:04:06:18:63:e8:35:40:d5:
e5:75:72:10:f0:e7:cd:3c:f5:a3:4d:53:68:9b:73:a9:44:32:
69:d3:dd:ee:11:fc:18:11:2a:e1:71:13:0b:cb:c5:3c:1c:bc:
62:a0:8c:fa:7e:02:31:91:c6:c3:57:6a:f4:15:f2:14:7a:bc:
e1:b3:8b:db:01:a6:a6:7b:ba:a4:4d:63:7f:c1:a7:d1:bf:b9:
22:6a:8a:5f:be:de:a2:f0:ee:43:ca:b6:28:82:dc:97:19:4c:
a3:d2:25:61:ca:51:b0:dc:35:1b:72:2f:a4:44:07:7d:46:8c:
83:35:3b:e6:4f:eb:84:5e:91:7e:fc:6d:5e:46:62:85:73:41:
50:3c:ae:2d:b5:be:b9:19:a3:69:2c:d1:01:ae:f0:14:df:3a:
94:bc:65:ee:54:c9:bc:ce:fa:9f:fa:fa:c4:fa:5e:80:e3:58:
df:36:2f:00:46:2f:55:3f:ba:e2:3e:d7:bb:ed:80:01:f4:e8:
84:1e:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net