Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36362e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e36362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: tcaBTg/oLFjKlIjdD8blEf2TdN1qymuqip1srbFqh38=
Subject key identifier: A8:99:ED:7A:62:99:B3:2E:F0:19:7E:18:3B:0A:D7:D1:D5:BE:2F:30
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1790174F9F3A77CC0D3C61A58B4D78ADB247C2B3
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36362e302f32342d3234203d3e203234323033.roa
Signing time: Thu 31 Mar 2022 12:00:00 +0000
ROA not before: Thu 31 Mar 2022 11:55:00 +0000
ROA not after: Thu 30 Mar 2023 12:00:00 +0000
asID: 24203
IP address blocks: 112.215.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:90:17:4f:9f:3a:77:cc:0d:3c:61:a5:8b:4d:78:ad:b2:47:c2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 31 11:55:00 2022 GMT
Not After : Mar 30 12:00:00 2023 GMT
Subject: CN=A899ED7A6299B32EF0197E183B0AD7D1D5BE2F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:0b:79:81:70:24:69:b0:98:9c:04:6b:da:
e6:27:cf:3b:8a:ed:75:01:a1:85:78:8a:78:c6:aa:
4b:3a:ac:31:51:8b:bc:95:83:34:34:38:3f:09:b4:
dd:e4:72:50:fe:04:db:72:c9:58:ff:cb:bb:83:37:
41:ad:ee:92:b7:6d:b5:71:2f:e7:c0:6f:44:96:1b:
10:2f:e1:a6:96:ca:12:79:87:cf:57:79:75:6c:29:
43:52:02:4d:52:75:cd:6d:e3:c9:a4:57:12:3d:bb:
09:ed:cf:f4:6a:47:2f:b3:af:f3:c9:6f:09:73:0e:
0a:3a:45:5d:df:45:d5:db:47:a3:92:4d:f7:6c:33:
90:6a:56:0f:2f:38:a6:0a:5f:ee:02:b8:df:4c:fe:
1e:c2:a8:f1:38:77:16:11:72:07:6e:05:db:68:5a:
ee:6f:8a:aa:7d:a2:0d:db:ab:7d:77:28:5f:6f:bf:
36:47:11:d1:c4:64:ff:e7:3c:0b:64:54:f1:81:ca:
43:99:ba:bb:63:96:ca:fb:02:e6:e1:e3:84:72:14:
f2:d1:1c:e6:c9:f1:da:ee:d8:ce:48:38:02:14:7c:
0f:04:39:ee:75:1c:8e:dd:ae:37:57:f8:bd:8a:e0:
ec:79:6c:cd:ed:1c:e1:72:04:fc:4b:d0:80:d8:07:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:ED:7A:62:99:B3:2E:F0:19:7E:18:3B:0A:D7:D1:D5:BE:2F:30
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36362e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.66.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7b:fb:14:79:0a:82:61:c5:f2:af:89:72:35:5f:51:5c:30:
44:f0:d2:05:d5:ad:47:2b:ee:86:08:37:a4:a5:7c:b8:13:00:
76:83:9f:27:a1:52:bd:e5:fb:81:40:23:a1:a4:e9:20:92:fc:
34:84:1c:f5:bc:63:10:ce:af:95:25:f2:f8:c7:5a:32:b1:fc:
3f:7a:bd:df:81:f5:0f:94:1f:c7:39:bd:d2:39:a3:e6:02:d3:
85:14:d7:68:c1:4b:62:af:0a:e3:0c:61:e8:24:28:0c:24:f3:
d1:89:f1:a5:fb:7e:e3:cc:46:4d:2a:d3:37:7b:d0:b3:59:26:
b2:5a:76:0b:2a:e2:c8:d9:72:33:f0:71:87:a4:f7:3c:71:8d:
34:97:cb:ac:76:d5:5c:a2:05:08:cf:12:a6:88:71:3a:c8:74:
b8:88:ca:e5:e5:94:04:bb:43:71:a4:35:9e:50:a1:29:bf:4e:
e3:36:7e:db:40:a4:cb:59:d6:14:86:a0:10:7a:9c:04:83:85:
78:17:83:c6:ab:75:3a:c0:92:d7:7f:78:94:c8:00:32:39:1e:
7e:27:d9:05:d8:ac:16:95:86:4b:6c:74:4d:b8:78:44:ed:15:
36:60:e9:ee:25:55:13:f5:80:ba:c4:5a:c5:3f:f1:41:e1:44:
bf:be:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net