Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34392e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e34392e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: C+N5pLHk5ED+PPtqV0aMEeMhyaun3ZfuUXz4ylwT0bo=
Subject key identifier: 27:59:CC:44:DB:B8:56:11:9C:F5:44:1A:FF:B0:DB:C8:8A:AC:29:E4
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6FE1572CEA3FA7BAC2E05AD9C7CA44848349C3D4
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34392e302f32342d3234203d3e203137383835.roa
Signing time: Sat 02 Apr 2022 04:00:00 +0000
ROA not before: Sat 02 Apr 2022 03:55:00 +0000
ROA not after: Sat 01 Apr 2023 04:00:00 +0000
asID: 17885
IP address blocks: 112.215.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e1:57:2c:ea:3f:a7:ba:c2:e0:5a:d9:c7:ca:44:84:83:49:c3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 2 03:55:00 2022 GMT
Not After : Apr 1 04:00:00 2023 GMT
Subject: CN=2759CC44DBB856119CF5441AFFB0DBC88AAC29E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:25:a2:35:3b:3c:9e:e2:75:c5:b0:ed:c7:
0b:2f:df:26:1d:34:e2:c5:41:d5:c5:bb:05:bb:e1:
d9:61:2b:f9:94:0c:3e:65:23:fa:29:4d:0b:c8:cb:
03:89:64:c8:bd:15:13:62:23:54:50:13:31:40:97:
41:fb:ee:fe:02:b6:66:ae:11:d0:31:a3:a7:42:c3:
bf:94:b1:a0:e3:49:02:c0:72:62:91:88:9c:28:ca:
8a:87:a9:51:53:ea:19:b0:f6:cb:5d:66:2d:6d:8f:
49:3d:92:e6:2a:78:b9:49:b8:a0:95:d7:f9:4c:ae:
08:54:d9:bb:26:7c:3f:6c:a4:18:2d:0f:9a:55:6c:
08:85:c7:ec:28:88:d4:62:6f:a9:4a:8d:43:05:8a:
54:e4:75:64:a2:92:3a:59:97:7a:39:ca:be:9e:25:
fc:52:a7:f0:43:66:02:89:d4:4d:0b:82:ba:7f:96:
c3:17:4c:8e:01:c1:02:e6:08:78:74:59:bf:06:12:
47:94:95:97:96:a1:5b:24:be:9f:03:93:c8:8a:39:
09:08:b1:54:94:51:e3:2d:c7:87:f9:eb:8a:27:ad:
7d:e5:f1:7c:52:38:63:bf:04:1e:c0:37:80:8b:a0:
57:72:60:0a:77:63:3d:ac:f4:8d:9a:3f:0d:f2:62:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:CC:44:DB:B8:56:11:9C:F5:44:1A:FF:B0:DB:C8:8A:AC:29:E4
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e34392e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.49.0/24
Signature Algorithm: sha256WithRSAEncryption
92:68:c5:7e:41:2e:0f:0c:e2:d0:25:d3:7c:7d:5a:5e:1d:d2:
00:18:f3:84:4b:30:61:20:7e:2f:e5:18:0e:29:30:18:25:22:
a8:46:83:6d:7f:d0:5b:8e:11:e9:b1:ca:00:1c:cb:0a:b3:65:
97:1e:a0:6b:6f:84:52:3a:9b:83:67:a3:8a:bd:27:87:86:68:
97:2c:0c:53:e2:2f:69:45:7d:d9:0a:5f:bf:9e:41:25:ae:e8:
a7:35:6c:c4:a2:9f:66:aa:ba:02:e0:87:d4:6c:fd:e6:0d:9d:
32:b6:27:4c:1f:68:be:ae:7c:d7:e6:22:3d:8c:4f:f8:07:0a:
83:c1:12:f6:70:4d:34:de:a8:b3:4b:4e:1e:56:7a:b3:ce:3f:
04:6e:3a:94:bc:77:84:04:a0:5b:79:1f:73:3c:c3:d3:06:af:
0d:f1:82:d3:f4:b7:22:7b:92:63:91:44:90:7d:ad:ff:b6:51:
d1:cb:1e:63:2c:3a:29:fd:40:84:48:12:3b:b1:34:e8:fe:10:
4e:54:61:a0:5d:3a:71:a3:ba:22:26:45:05:5e:c7:32:af:48:
67:dc:2d:a7:d4:11:11:4d:00:fa:19:34:b6:c8:ea:a8:d6:18:
bc:51:ac:1e:64:fe:09:b7:13:f9:d5:5f:31:41:a8:fe:3c:8a:
35:7c:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net