Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e32362e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e32362e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: MKgxSZeioQQGg1sH51XhZTWYYMDz0X5d1Kcl0ihh35M=
Subject key identifier: F6:CB:FC:A0:6B:26:71:2E:6C:CB:20:47:D8:65:07:DE:9A:C2:62:9E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6089DF63C4252C9A889CB945F0BE0A7384077850
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e32362e302f32342d3234203d3e203137383835.roa
Signing time: Fri 25 Mar 2022 06:00:01 +0000
ROA not before: Fri 25 Mar 2022 05:55:01 +0000
ROA not after: Fri 24 Mar 2023 06:00:01 +0000
asID: 17885
IP address blocks: 112.215.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:89:df:63:c4:25:2c:9a:88:9c:b9:45:f0:be:0a:73:84:07:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 25 05:55:01 2022 GMT
Not After : Mar 24 06:00:01 2023 GMT
Subject: CN=F6CBFCA06B26712E6CCB2047D86507DE9AC2629E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:45:15:8c:f1:a2:c5:d3:7e:47:1a:17:0a:
f4:26:19:8a:1a:73:e3:20:2a:c1:90:86:2e:f7:0a:
e4:32:c0:8e:60:75:67:74:77:24:3c:a2:28:53:07:
92:7c:71:9a:c7:5f:32:cb:d4:6b:61:fd:06:91:75:
fd:a3:1b:b0:14:ad:68:22:ae:ed:fa:6d:8f:86:f7:
4d:da:15:da:bb:83:b7:d8:63:0e:00:e8:a0:67:d6:
74:77:50:a6:e0:a2:97:f4:69:7c:fc:68:ff:f4:ac:
e1:23:c2:84:7e:90:fc:19:67:28:b0:64:0a:95:53:
e3:f1:13:96:f9:1b:7e:7b:1d:a7:b7:cc:a9:ff:20:
fd:ba:39:d6:22:a1:7c:76:03:00:16:72:41:ae:bf:
ab:a2:40:0a:63:ea:a0:eb:d1:9a:04:35:bc:f3:83:
4f:f1:6f:91:ac:c1:72:2f:30:0c:7c:c7:1e:da:3d:
1b:9e:dd:d5:43:b1:fc:ae:af:15:53:a2:b3:88:1d:
00:81:92:5e:14:87:b3:da:69:17:9d:c0:e8:43:93:
ad:a2:46:73:d7:a1:80:15:3c:c4:5b:a2:88:58:70:
2d:01:24:f1:09:e2:4f:39:24:59:68:2b:49:55:b4:
ce:a0:1f:cd:a9:3c:5d:fe:b1:67:2e:57:ba:7e:f0:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:FC:A0:6B:26:71:2E:6C:CB:20:47:D8:65:07:DE:9A:C2:62:9E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e32362e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.26.0/24
Signature Algorithm: sha256WithRSAEncryption
87:94:3a:3a:ed:a4:9d:f0:56:21:c3:22:0c:17:9a:10:f1:02:
32:72:34:bc:6c:78:79:b2:b7:d4:a2:20:36:77:0b:6f:67:f4:
d9:d9:49:d3:a9:a8:91:cd:d8:de:96:46:ef:e4:4e:c6:5e:6e:
17:ea:5d:c3:f1:e2:dd:51:c1:93:e5:4e:cd:8b:5e:c3:fd:4c:
b0:3c:f6:03:5b:13:64:41:74:88:b7:f3:fc:35:3d:2f:20:52:
c9:63:34:1b:b0:3a:a7:ae:b9:92:d7:0e:fb:90:1d:a1:bb:24:
f6:7e:b6:55:9f:71:46:1b:ce:78:57:40:11:6e:d3:cd:f9:e3:
d6:a6:c8:81:c2:9e:c2:9d:59:10:42:d2:03:40:dc:95:c3:60:
7f:e6:27:88:0d:cb:de:f5:01:32:6a:89:57:6c:6b:41:67:34:
37:0f:f5:81:65:d6:ee:06:c2:70:34:27:87:a8:e2:8a:87:25:
98:20:9b:41:b3:03:d1:cc:c3:b5:92:e4:da:c3:e7:ed:db:de:
ea:9e:25:d2:d1:2c:5c:52:af:c0:96:9f:6b:4e:5f:80:df:ea:
96:bc:1e:d4:a3:e1:3c:4e:81:06:e9:10:c5:01:80:da:69:37:
fd:9a:e5:0d:4a:86:80:96:2c:43:da:3a:3e:0c:56:1e:d8:ff:
8a:53:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net