Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234312e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3234312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: KcH+nIxsm+DF0I1qCqNXF5L8S1kKKv2NQ30xlqtPCmU=
Subject key identifier: 42:06:4B:6D:CC:DE:32:1D:97:FE:CF:56:5F:AD:0A:98:0D:1A:D3:65
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5394A76857A6B7B5740EAF632FCF75A1C7FAB888
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234312e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:00 +0000
ROA not before: Tue 12 Apr 2022 08:55:00 +0000
ROA not after: Tue 11 Apr 2023 09:00:00 +0000
asID: 24203
IP address blocks: 112.215.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:94:a7:68:57:a6:b7:b5:74:0e:af:63:2f:cf:75:a1:c7:fa:b8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:00 2022 GMT
Not After : Apr 11 09:00:00 2023 GMT
Subject: CN=42064B6DCCDE321D97FECF565FAD0A980D1AD365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:86:71:95:bc:79:88:3e:06:dd:ca:0e:1d:
5a:c1:f3:97:3f:97:0c:0d:6a:3b:ba:12:95:40:31:
98:3e:ec:17:3f:7b:48:ed:2b:7f:40:ea:00:c3:fc:
ca:8b:fa:a4:d3:30:cd:be:de:23:7f:32:21:72:92:
8e:3a:2a:eb:e5:7a:a0:05:fe:c3:31:b4:2b:1c:fa:
42:01:d5:99:bf:e3:e5:e1:c3:23:34:cc:7a:36:c2:
f5:6f:7e:c2:d8:59:5b:7f:f0:09:cb:79:89:98:14:
ff:fb:53:ef:31:a5:34:d6:20:f5:24:44:68:91:dc:
72:c6:a1:62:24:0a:8a:3a:c5:89:0f:7d:b8:8f:3a:
36:cd:22:d1:6b:60:70:4c:5c:52:c7:f1:d6:2a:0d:
18:c2:4e:7f:66:0f:15:fd:f9:7e:40:0b:3e:9a:27:
4b:cc:71:25:e5:4d:cd:4e:29:a3:10:e7:20:ff:eb:
fb:ac:c5:63:e6:5d:f2:0b:c5:06:52:fa:55:0d:71:
c2:cc:93:dc:51:1e:ba:6b:df:f6:0f:a3:9e:f5:56:
30:f3:a6:46:b8:25:3b:c8:ff:a4:00:fc:2a:79:88:
5a:18:9c:3a:99:a5:77:3f:7d:04:dd:51:c4:36:bf:
8c:37:69:96:b7:ce:0c:32:50:ce:2f:74:ab:ce:a0:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:4B:6D:CC:DE:32:1D:97:FE:CF:56:5F:AD:0A:98:0D:1A:D3:65
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cc:7a:47:93:3f:4b:66:6d:98:1e:f9:55:f4:21:2b:72:be:
23:4f:73:52:77:9d:d0:98:db:dd:ab:4a:dc:85:2b:b5:d6:87:
06:0f:ba:cf:e1:c4:88:5e:53:22:f2:7f:a8:de:76:08:b6:c0:
c9:07:de:76:b5:1c:a4:d3:98:5a:cf:74:c1:82:36:ed:44:34:
2e:a4:01:7b:c7:c9:3b:d9:93:a5:25:e7:80:88:8a:17:8a:d8:
ed:bb:d8:bf:22:4b:53:55:80:91:e7:02:37:c1:01:c1:cb:cf:
c7:dc:49:8a:33:85:09:cb:ca:84:7c:dc:cd:f4:c9:27:82:74:
5d:01:18:53:ed:d9:37:37:81:ff:ec:ba:1f:c8:08:39:41:8b:
23:b3:d8:53:b1:88:58:3d:83:f9:f2:bb:ae:84:8c:86:64:82:
28:b5:5f:84:d6:fb:e1:8a:28:78:09:5d:dd:27:63:ca:ba:f9:
38:34:31:ff:43:53:b2:93:cd:7e:7f:df:97:63:bf:14:38:77:
93:1c:0f:5a:37:8d:04:df:89:18:a6:2f:dd:cd:b2:5a:19:18:
e9:30:61:f0:27:ff:8c:67:79:29:bd:77:5f:20:37:ff:fa:45:
b4:68:3d:41:32:36:2b:4b:ee:6f:71:99:28:d0:7f:e2:38:69:
e7:d5:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net