Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e34372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: OkDYB19uUK5o2hr9g5X4PrW+5fVcr82LBjUZeZl0/gc=
Subject key identifier: 6E:43:F2:2F:6C:BB:72:79:AF:83:32:43:40:67:98:53:A3:64:C8:96
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 40B8207B92388FF099BF09AA18C3AE47683E7491
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34372e302f32342d3234203d3e203137383835.roa
Signing time: Sat 02 Apr 2022 04:00:00 +0000
ROA not before: Sat 02 Apr 2022 03:55:00 +0000
ROA not after: Sat 01 Apr 2023 04:00:00 +0000
asID: 17885
IP address blocks: 112.215.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b8:20:7b:92:38:8f:f0:99:bf:09:aa:18:c3:ae:47:68:3e:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 2 03:55:00 2022 GMT
Not After : Apr 1 04:00:00 2023 GMT
Subject: CN=6E43F22F6CBB7279AF83324340679853A364C896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:f0:a4:24:44:8f:d9:b7:bb:b9:36:7b:9d:
4e:5d:18:e2:90:6f:2d:da:81:07:c5:a7:3b:b7:7a:
a9:5f:50:cc:74:3f:f1:e2:42:e4:80:ce:bd:14:d5:
05:61:70:69:f0:fe:10:30:33:3a:bd:d7:a9:fe:73:
3e:00:e4:17:15:44:5f:08:5c:db:ba:18:bf:97:1a:
04:6c:f0:b8:d2:6d:0d:b6:28:a1:57:b9:d5:d9:d9:
92:e3:15:bc:2b:88:23:e7:b3:5d:d4:08:91:ac:44:
ab:79:eb:e2:27:22:44:39:c9:03:1f:9c:40:5c:61:
d6:f2:8c:2a:d0:9d:a3:dd:b5:a3:1c:a4:ea:ca:a9:
11:af:e6:f5:05:b4:f8:e9:0f:af:73:e9:8e:49:88:
0d:90:e1:b5:e9:2d:96:9a:ed:da:c3:da:58:42:26:
9f:ff:ef:3d:ab:5e:a5:6c:a7:b8:3d:01:1e:6f:e3:
0f:0c:77:b1:8f:bb:1d:8d:f2:9b:fd:48:9d:2d:94:
16:90:59:58:08:76:a6:57:df:f1:b9:d2:a0:b7:fa:
36:9f:31:a9:35:ac:bb:13:45:08:c4:47:a3:27:db:
c8:74:45:10:d1:4f:5b:54:e8:6f:08:b8:bd:f7:2d:
63:33:18:0d:e4:a5:83:83:16:73:6a:05:93:55:48:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:F2:2F:6C:BB:72:79:AF:83:32:43:40:67:98:53:A3:64:C8:96
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.47.0/24
Signature Algorithm: sha256WithRSAEncryption
44:79:3b:c9:1a:21:78:e7:35:cc:f3:32:83:1f:26:b6:a5:a6:
7c:59:21:af:7d:f6:c8:9d:6d:aa:21:69:55:22:e4:a1:44:e7:
20:b7:05:0e:fc:bb:ce:da:3a:e9:b0:2c:48:6d:89:94:da:94:
0a:af:d2:99:45:ab:06:22:9f:88:39:f7:48:a1:98:14:33:f9:
25:23:ec:c5:a1:65:2d:b1:45:eb:1f:db:69:af:21:5c:b7:99:
9e:73:9b:5e:80:cf:1a:3d:a3:a9:0d:6d:1a:f3:a9:fb:b3:71:
3e:60:d2:c8:c7:e4:49:b8:b3:cb:78:7a:b3:8f:1d:38:9f:43:
82:90:f7:f7:af:9c:79:94:34:9f:d0:34:73:79:63:46:83:80:
a1:e0:d7:ac:8c:3b:43:c6:71:2b:6a:49:5e:32:6f:1f:0b:f1:
1a:84:5b:6d:09:44:78:e5:6b:b6:2d:c2:b0:ab:ed:5c:ec:25:
6e:5f:0e:df:ee:59:c9:64:b6:ef:37:c5:08:0b:c0:17:df:08:
32:c3:1a:ad:4f:36:45:67:0b:7b:c0:88:8f:9b:c8:82:f7:40:
60:26:2f:bb:f9:50:18:8f:02:67:f0:5c:eb:0d:50:03:9a:07:
9d:a1:f0:3d:68:68:70:34:a4:17:c0:3c:d3:eb:0c:01:6a:0c:
06:d4:b9:58
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQLgge5I4j/CZvwmqGMOuR2g+dJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDIwMzU1MDBaFw0yMzA0MDEwNDAwMDBaMDMxMTAvBgNV
BAMTKDZFNDNGMjJGNkNCQjcyNzlBRjgzMzI0MzQwNjc5ODUzQTM2NEM4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgk/CkJESP2be7uTZ7nU5dGOKQ
by3agQfFpzu3eqlfUMx0P/HiQuSAzr0U1QVhcGnw/hAwMzq916n+cz4A5BcVRF8I
XNu6GL+XGgRs8LjSbQ22KKFXudXZ2ZLjFbwriCPns13UCJGsRKt56+InIkQ5yQMf
nEBcYdbyjCrQnaPdtaMcpOrKqRGv5vUFtPjpD69z6Y5JiA2Q4bXpLZaa7drD2lhC
Jp//7z2rXqVsp7g9AR5v4w8Md7GPux2N8pv9SJ0tlBaQWVgIdqZX3/G50qC3+jaf
Mak1rLsTRQjER6Mn28h0RRDRT1tU6G8IuL33LWMzGA3kpYODFnNqBZNVSCGlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbkPyL2y7cnmvgzJDQGeYU6NkyJYwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHDXLzANBgkqhkiG
9w0BAQsFAAOCAQEARHk7yRoheOc1zPMygx8mtqWmfFkhr332yJ1tqiFpVSLkoUTn
ILcFDvy7zto66bAsSG2JlNqUCq/SmUWrBiKfiDn3SKGYFDP5JSPsxaFlLbFF6x/b
aa8hXLeZnnObXoDPGj2jqQ1tGvOp+7NxPmDSyMfkSbizy3h6s48dOJ9DgpD396+c
eZQ0n9A0c3ljRoOAoeDXrIw7Q8ZxK2pJXjJvHwvxGoRbbQlEeOVrti3CsKvtXOwl
bl8O3+5ZyWS27zfFCAvAF98IMsMarU82RWcLe8CIj5vIgvdAYCYvu/lQGI8CZ/Bc
6w1QA5oHnaHwPWhocDSkF8A80+sMAWoMBtS5WA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net