Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e35302e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e35302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: eBlEub4eSSGQC4PLTqyIO0/VwIPaaaSMCbWxrrGFKx4=
Subject key identifier: 9E:09:CA:DA:36:95:4E:33:CD:CE:7C:37:FF:D8:42:65:8D:62:A9:38
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5DD36716E08151089F22F65BDF42D6E4239547DA
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e35302e302f32342d3234203d3e203234323033.roa
Signing time: Sat 02 Apr 2022 07:00:00 +0000
ROA not before: Sat 02 Apr 2022 06:55:00 +0000
ROA not after: Sat 01 Apr 2023 07:00:00 +0000
asID: 24203
IP address blocks: 112.215.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d3:67:16:e0:81:51:08:9f:22:f6:5b:df:42:d6:e4:23:95:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 2 06:55:00 2022 GMT
Not After : Apr 1 07:00:00 2023 GMT
Subject: CN=9E09CADA36954E33CDCE7C37FFD842658D62A938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:7e:42:0e:73:21:43:e3:9a:b7:3f:91:b8:
d5:de:5a:7b:8e:e1:d5:f2:1d:df:4b:e9:18:f3:5d:
3e:a9:1c:51:fc:98:1c:da:2e:df:4a:74:75:e7:1f:
a4:2b:44:99:f0:31:54:d6:a3:46:38:6d:41:67:fb:
ba:61:e4:f8:64:2a:5c:e5:5c:63:5e:b1:a6:bf:79:
1a:e3:a2:e9:9d:e4:46:46:a7:69:e3:40:bc:95:7b:
66:85:b2:b5:8d:34:77:e3:0d:13:72:1a:72:83:3d:
2b:25:73:4a:f8:76:03:a0:27:2e:d6:02:e2:0f:a2:
24:35:dc:a8:f4:ca:73:57:2a:2d:7c:17:c8:e9:99:
e5:3e:68:77:a7:08:6d:0c:2e:ae:dd:c4:09:00:4d:
e5:99:af:b4:a3:fc:12:82:17:31:f8:51:35:ed:61:
94:7b:65:6e:93:3e:e8:33:ef:1f:a0:51:ef:4e:fe:
82:80:62:79:c3:5d:24:85:69:f1:c0:e2:eb:78:74:
b9:db:79:90:5c:cd:69:62:91:d2:2b:be:83:4d:8a:
fe:c5:94:cd:01:6b:ac:1b:95:9e:ad:20:d7:81:d4:
7b:f1:1c:ec:16:a3:ba:fb:31:ce:19:4c:93:0d:2f:
20:bb:73:b6:3d:63:53:e6:d1:b4:2d:26:26:cf:be:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:CA:DA:36:95:4E:33:CD:CE:7C:37:FF:D8:42:65:8D:62:A9:38
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e35302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.50.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ec:62:33:37:37:78:1b:7c:3d:1b:de:b5:c3:c3:83:af:e5:
25:23:6b:2c:97:5f:6f:36:27:d9:72:44:12:01:76:8d:18:2c:
01:6f:ef:34:e0:ad:67:b7:a9:68:21:2c:53:12:8c:23:63:e9:
48:42:90:07:53:c5:9c:e4:1f:59:4a:d5:5e:c1:4e:20:32:c7:
24:fc:6a:52:cf:19:f9:6c:1d:fa:e7:e5:85:36:2e:99:68:a4:
31:45:97:c8:4f:e5:98:3f:d2:9d:4b:26:a4:f9:6e:a9:75:2f:
b8:46:80:41:30:c2:18:8d:77:d2:22:97:99:bd:fe:26:8c:24:
ac:ff:86:36:99:35:8a:39:e8:f7:26:a6:0a:cb:59:28:f0:41:
42:15:eb:91:8c:42:d9:26:d8:36:0e:06:8b:0b:57:e3:04:25:
f6:02:b7:66:5f:7a:1f:58:f3:2b:ce:e9:ab:52:6a:41:ff:d8:
93:d1:9e:0d:0c:d7:19:12:f1:6f:d5:b8:8d:f9:56:7a:60:49:
ae:37:ea:3d:1f:36:37:ac:d9:37:a2:d1:2d:f0:cc:46:c1:d6:
ae:c3:66:97:39:c6:55:87:2c:ae:f2:8f:7c:91:5d:3e:19:e9:
88:78:87:75:05:10:e5:6e:ea:02:06:43:8b:5a:52:15:48:b0:
3b:e0:e1:36
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXdNnFuCBUQifIvZb30LW5COVR9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDIwNjU1MDBaFw0yMzA0MDEwNzAwMDBaMDMxMTAvBgNV
BAMTKDlFMDlDQURBMzY5NTRFMzNDRENFN0MzN0ZGRDg0MjY1OEQ2MkE5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4On5CDnMhQ+Oatz+RuNXeWnuO
4dXyHd9L6RjzXT6pHFH8mBzaLt9KdHXnH6QrRJnwMVTWo0Y4bUFn+7ph5PhkKlzl
XGNesaa/eRrjoumd5EZGp2njQLyVe2aFsrWNNHfjDRNyGnKDPSslc0r4dgOgJy7W
AuIPoiQ13Kj0ynNXKi18F8jpmeU+aHenCG0MLq7dxAkATeWZr7Sj/BKCFzH4UTXt
YZR7ZW6TPugz7x+gUe9O/oKAYnnDXSSFafHA4ut4dLnbeZBczWlikdIrvoNNiv7F
lM0Ba6wblZ6tINeB1HvxHOwWo7r7Mc4ZTJMNLyC7c7Y9Y1Pm0bQtJibPvmexAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUngnK2jaVTjPNznw3/9hCZY1iqTgwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHDXMjANBgkqhkiG
9w0BAQsFAAOCAQEAhuxiMzc3eBt8PRvetcPDg6/lJSNrLJdfbzYn2XJEEgF2jRgs
AW/vNOCtZ7epaCEsUxKMI2PpSEKQB1PFnOQfWUrVXsFOIDLHJPxqUs8Z+Wwd+ufl
hTYumWikMUWXyE/lmD/SnUsmpPluqXUvuEaAQTDCGI130iKXmb3+JowkrP+GNpk1
ijno9yamCstZKPBBQhXrkYxC2SbYNg4GiwtX4wQl9gK3Zl96H1jzK87pq1JqQf/Y
k9GeDQzXGRLxb9W4jflWemBJrjfqPR82N6zZN6LRLfDMRsHWrsNmlznGVYcsrvKP
fJFdPhnpiHiHdQUQ5W7qAgZDi1pSFUiwO+DhNg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net