Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e33302e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e33302e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: wZk021DFBPKOq5STYQwNwdtK8B/lB+qtqD3PL+kRT7w=
Subject key identifier: A7:5F:BF:B6:D3:DE:15:EF:6C:07:0B:C7:91:AF:CC:67:78:22:16:6D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5FFB3D471B623D9A2544997701B5E965403F75EB
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e33302e302f32342d3234203d3e203137383835.roa
Signing time: Sat 02 Apr 2022 03:00:01 +0000
ROA not before: Sat 02 Apr 2022 02:55:01 +0000
ROA not after: Sat 01 Apr 2023 03:00:01 +0000
asID: 17885
IP address blocks: 112.215.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fb:3d:47:1b:62:3d:9a:25:44:99:77:01:b5:e9:65:40:3f:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 2 02:55:01 2022 GMT
Not After : Apr 1 03:00:01 2023 GMT
Subject: CN=A75FBFB6D3DE15EF6C070BC791AFCC677822166D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:75:cd:ac:f9:94:90:5a:39:d1:9f:28:5c:
e7:cc:1a:68:63:4c:c4:30:16:6c:4b:be:17:65:8a:
c6:cd:a5:bc:5e:48:ca:9b:6e:b3:45:04:20:d6:98:
fc:e3:7c:f8:76:95:6a:15:b5:bf:d9:9a:d3:63:32:
bd:67:1d:36:11:be:fa:f6:0d:50:14:a1:1b:ec:48:
f3:db:0f:96:be:46:6e:00:ab:7a:63:c4:de:4e:90:
b0:58:bd:34:47:8b:b3:65:d2:6d:e8:fb:80:cb:7f:
34:93:84:3e:00:45:9d:12:29:b4:ff:43:d1:5a:58:
1d:c8:7d:19:a4:7c:bf:b4:ac:f2:ab:80:63:88:fd:
a3:b3:de:fc:e8:7c:f7:1b:17:49:bb:11:4e:46:e1:
26:c3:02:23:b4:1a:0b:ac:67:f4:8f:68:7e:49:6f:
20:a2:64:7f:f7:2d:0d:e2:66:87:9a:a8:20:39:c4:
7e:6d:25:1c:71:f2:f4:65:13:58:c5:7d:72:d9:9d:
73:87:de:04:b4:ae:0e:33:22:5d:90:61:29:bc:17:
73:95:8b:12:ad:01:b5:bd:60:0e:40:19:af:21:96:
53:f7:f4:6f:8c:af:c6:64:91:4f:6b:d7:b2:a9:c4:
d0:69:ca:e9:b0:79:fa:dc:04:26:c5:29:d8:c8:80:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:BF:B6:D3:DE:15:EF:6C:07:0B:C7:91:AF:CC:67:78:22:16:6D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e33302e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.30.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8e:54:3e:e3:a9:bd:eb:d2:1e:28:91:12:5a:38:5f:0c:9e:
d2:d8:a3:51:00:c3:1a:0b:0f:bf:6b:a7:67:9a:51:1f:86:25:
a3:0a:b3:67:b7:27:9c:f6:6f:52:6d:be:4b:ea:95:1a:26:67:
9d:2b:58:e0:69:8f:2c:89:d6:5a:55:7d:dc:5d:f7:f6:0f:5c:
84:6e:5b:52:ad:f0:08:40:17:6e:f0:d9:cf:82:bf:93:ce:67:
0b:cf:a1:d6:2f:11:33:f6:b1:4b:d9:b3:05:e8:7f:74:64:29:
14:3f:0a:e0:7b:f7:ec:51:ed:35:e3:78:63:fe:e7:12:4f:2b:
b0:62:f8:5b:cf:9e:32:83:69:00:d5:70:52:e6:1b:24:20:4e:
b9:e0:ab:2f:db:2e:c3:5b:5b:37:a9:bb:23:f9:de:6c:03:f3:
39:03:c0:e8:2b:19:92:7a:b3:3a:c9:24:a9:ca:21:2e:7b:02:
ce:fb:da:e6:e6:43:d4:b7:0c:56:70:78:05:30:3d:8f:96:98:
18:29:c2:40:91:64:03:a1:1c:22:b0:be:09:72:90:9c:0f:1c:
df:3e:1e:6d:95:ff:49:03:53:ec:14:aa:5c:f4:08:c6:aa:bf:
b4:fa:5c:3e:56:76:dc:b8:cd:84:60:bf:2e:8f:1c:2a:b9:17:
1a:3e:24:5d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUX/s9RxtiPZolRJl3AbXpZUA/deswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDIwMjU1MDFaFw0yMzA0MDEwMzAwMDFaMDMxMTAvBgNV
BAMTKEE3NUZCRkI2RDNERTE1RUY2QzA3MEJDNzkxQUZDQzY3NzgyMjE2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpXXNrPmUkFo50Z8oXOfMGmhj
TMQwFmxLvhdlisbNpbxeSMqbbrNFBCDWmPzjfPh2lWoVtb/ZmtNjMr1nHTYRvvr2
DVAUoRvsSPPbD5a+Rm4Aq3pjxN5OkLBYvTRHi7Nl0m3o+4DLfzSThD4ARZ0SKbT/
Q9FaWB3IfRmkfL+0rPKrgGOI/aOz3vzofPcbF0m7EU5G4SbDAiO0GgusZ/SPaH5J
byCiZH/3LQ3iZoeaqCA5xH5tJRxx8vRlE1jFfXLZnXOH3gS0rg4zIl2QYSm8F3OV
ixKtAbW9YA5AGa8hllP39G+Mr8ZkkU9r17KpxNBpyumwefrcBCbFKdjIgJRJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUp1+/ttPeFe9sBwvHka/MZ3giFm0wHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHDXHjANBgkqhkiG
9w0BAQsFAAOCAQEAV45UPuOpvevSHiiRElo4Xwye0tijUQDDGgsPv2unZ5pRH4Yl
owqzZ7cnnPZvUm2+S+qVGiZnnStY4GmPLInWWlV93F339g9chG5bUq3wCEAXbvDZ
z4K/k85nC8+h1i8RM/axS9mzBeh/dGQpFD8K4Hv37FHtNeN4Y/7nEk8rsGL4W8+e
MoNpANVwUuYbJCBOueCrL9suw1tbN6m7I/nebAPzOQPA6CsZknqzOskkqcohLnsC
zvva5uZD1LcMVnB4BTA9j5aYGCnCQJFkA6EcIrC+CXKQnA8c3z4ebZX/SQNT7BSq
XPQIxqq/tPpcPlZ23LjNhGC/Lo8cKrkXGj4kXQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net