Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234342e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e3234342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: BKKtg4GdYV3jydgc/URXwBSR/cSdqQd1e3e6qT5ZKF4=
Subject key identifier: 25:FE:23:2F:2F:3B:C8:00:4E:89:2E:27:9D:61:E5:B8:1A:6D:45:C5
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 290274C59942D042C4746CA4C5DE8F82B66F696E
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234342e302f32342d3234203d3e203234323033.roa
Signing time: Tue 12 Apr 2022 09:00:01 +0000
ROA not before: Tue 12 Apr 2022 08:55:01 +0000
ROA not after: Tue 11 Apr 2023 09:00:01 +0000
asID: 24203
IP address blocks: 112.215.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:74:c5:99:42:d0:42:c4:74:6c:a4:c5:de:8f:82:b6:6f:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:01 2022 GMT
Not After : Apr 11 09:00:01 2023 GMT
Subject: CN=25FE232F2F3BC8004E892E279D61E5B81A6D45C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:07:db:e7:96:c8:7e:c9:07:fe:26:ad:78:
f0:1c:d0:71:39:f6:59:ef:39:22:fe:f6:8d:c6:e5:
db:9b:20:2a:03:aa:4d:7e:4c:96:11:80:e4:13:e4:
e0:83:75:b7:2a:93:82:6c:0d:e0:1a:5b:53:5e:6e:
f4:8e:79:d3:2b:2a:0e:01:97:d6:59:5a:37:c3:17:
e9:a0:89:55:6d:3e:79:da:32:53:6b:d6:bc:de:f9:
1e:6d:ac:0d:0e:dc:e1:1b:7a:b5:f4:51:05:4d:47:
c5:f2:ff:0a:2b:a3:75:56:75:2c:30:b1:1d:da:53:
63:5b:b6:8e:a9:3f:64:ad:fe:77:55:4a:e4:cd:71:
68:c6:ec:50:1e:0e:bc:13:b3:2e:a7:84:a2:d0:9d:
f1:a3:9b:05:74:80:0f:fb:74:fc:6e:1b:a6:c8:a8:
db:74:4a:de:0d:82:21:90:15:33:da:6a:8b:a0:b0:
6d:55:ae:58:59:34:e2:23:a9:8c:69:e2:74:22:9d:
65:9a:fe:c7:8f:3c:63:47:59:af:f3:9a:f4:5a:a9:
5a:2c:4a:1d:dd:be:4b:27:46:2d:7d:5d:a2:6f:25:
ad:fd:7b:58:a9:35:3d:08:ae:d1:cd:4e:71:eb:88:
fd:51:35:ed:59:45:bd:c3:7d:f8:84:77:c4:40:f7:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:23:2F:2F:3B:C8:00:4E:89:2E:27:9D:61:E5:B8:1A:6D:45:C5
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.244.0/24
Signature Algorithm: sha256WithRSAEncryption
02:84:bc:6b:68:2a:dd:fa:25:b5:be:09:d1:2d:d4:b8:f8:6e:
68:e6:bb:24:0f:72:64:7a:05:bf:c9:13:9a:82:46:8d:7b:ee:
ac:74:ae:38:71:c0:5c:93:39:95:ee:ea:75:55:af:58:06:06:
55:fb:b3:ef:bd:3f:b9:8f:12:d5:56:20:32:4a:a8:cf:0d:13:
a7:f9:fa:18:ab:43:ee:b2:af:a7:f1:e4:6d:55:a7:0e:c3:1d:
c5:23:54:6f:f6:e0:5b:77:75:02:e0:24:37:c7:27:38:99:35:
bc:23:5c:66:6e:ed:43:f3:71:13:db:7a:ba:89:2c:a7:3b:3c:
0c:16:5d:52:cf:84:e7:ea:18:64:d4:d6:d0:3b:4e:99:1f:2f:
38:e5:9e:51:dd:12:4d:e4:88:9b:fa:90:a4:5f:73:a5:56:da:
4e:ed:9b:e5:f6:55:97:1f:e6:c5:79:ce:bc:3c:8f:64:c5:e7:
1b:b0:0e:4e:ed:dd:2f:78:86:2f:70:da:41:01:e8:3a:f9:aa:
44:ca:b5:e3:af:50:6d:13:02:c2:5a:0a:1e:bb:6c:ed:cd:e6:
70:71:85:26:3c:6f:e0:4b:e8:bd:d5:53:d5:97:97:17:35:72:
de:ba:1b:a9:7c:5b:c0:d2:d3:99:b6:ca:20:ee:41:50:10:34:
7a:9e:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net