Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34342e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e34342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: bp/bVnKkX3gNk5eCAZ88HtPgxPdJMnwEOWEtprvtcP8=
Subject key identifier: B7:87:69:9B:07:1E:BC:7A:47:E8:60:B1:21:E5:CE:19:AF:4A:DF:6B
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 19E6A614AEA0C18AAF5C399E7FA3F9D5C5F11CB5
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34342e302f32342d3234203d3e203234323033.roa
Signing time: Thu 31 Mar 2022 10:00:00 +0000
ROA not before: Thu 31 Mar 2022 09:55:00 +0000
ROA not after: Thu 30 Mar 2023 10:00:00 +0000
asID: 24203
IP address blocks: 112.215.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e6:a6:14:ae:a0:c1:8a:af:5c:39:9e:7f:a3:f9:d5:c5:f1:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 31 09:55:00 2022 GMT
Not After : Mar 30 10:00:00 2023 GMT
Subject: CN=B787699B071EBC7A47E860B121E5CE19AF4ADF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:7f:0f:8c:39:42:8e:88:a3:fd:65:9e:24:
80:fc:cf:82:21:11:f7:72:c2:bf:8a:ee:f0:ab:14:
82:a6:80:50:7e:b0:ba:88:f3:cd:51:7c:dc:f8:65:
6b:aa:50:99:41:9b:73:fb:79:a3:1f:df:a9:41:50:
28:5e:40:1d:6b:d3:48:e2:35:2e:94:bf:a4:1e:ff:
64:02:00:90:3f:2e:50:e4:32:a9:33:98:fb:bd:37:
8a:7b:2c:97:71:d9:14:4d:6f:fa:d7:c0:d5:bc:e1:
b4:c3:d2:9a:62:05:2a:86:6a:65:9f:cd:ba:70:1d:
35:8c:19:ac:6b:f3:64:94:3b:fb:b1:be:ea:31:73:
b8:8a:6f:58:f7:f8:1d:40:ce:84:db:fb:03:85:20:
50:ec:86:75:3f:38:19:a5:02:aa:f8:cf:3b:70:2a:
b2:a8:4d:96:81:25:72:d3:b2:88:72:ad:4c:f0:58:
23:5c:76:c1:e8:a2:dc:62:d9:59:81:98:58:44:1b:
97:e3:5e:2b:a7:b4:99:08:9f:a8:2c:9e:69:c3:46:
f3:b5:a5:68:ea:10:5e:be:0f:35:84:0e:5c:28:6a:
44:9b:f0:90:44:ec:3a:30:f6:95:be:04:cc:75:54:
53:22:c6:7a:5a:fd:47:49:40:02:94:5e:6f:b5:71:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:69:9B:07:1E:BC:7A:47:E8:60:B1:21:E5:CE:19:AF:4A:DF:6B
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.44.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0c:0d:ec:6d:6c:65:40:3b:91:45:40:f2:e1:f1:f9:c1:b1:
75:fd:54:6e:24:03:a5:e5:50:49:0e:8d:ec:8a:0e:be:3a:b6:
72:b8:86:0d:a6:20:f6:0c:c7:5e:19:0f:24:a7:94:c9:70:3a:
df:5a:90:e0:2f:0c:16:c5:cc:47:3b:d9:da:da:d5:e3:21:84:
a3:0c:f7:c5:26:f6:f8:13:55:31:e2:f3:38:5f:1f:47:5f:82:
71:53:20:e6:21:05:7a:6e:09:2c:18:0b:a6:56:5e:68:df:2e:
35:0f:1c:d6:ec:96:dc:4e:6f:09:d0:e9:c1:fa:b9:c9:26:40:
bc:a4:c1:9c:de:e6:72:11:56:34:7b:a8:8f:c8:dd:bf:b6:bf:
2b:6b:ed:c9:20:41:66:88:66:8f:27:9c:9d:b5:ca:3a:76:6f:
b7:8f:cd:23:0f:73:7f:a5:c6:51:b7:48:89:04:42:f5:f9:ef:
63:5f:5a:02:1c:b6:29:60:73:fa:a6:35:a0:17:75:03:ce:94:
db:b8:f0:ee:67:e6:fc:b0:07:60:7b:9f:67:c3:9b:1e:76:5c:
68:6e:df:e5:4a:ba:58:ea:50:d2:18:7c:82:4b:00:77:dd:9b:
7e:43:0d:b8:3b:39:f9:46:19:cf:d0:15:99:1f:18:c2:57:ad:
b4:fd:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net