Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36382e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e36382e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: rUYWV0NIgzRVXJ7nX/ym9sLuWIop+VX8QeCON1hjsYw=
Subject key identifier: 95:FE:4E:6F:02:F7:56:F3:92:98:A9:C0:87:D6:0D:49:CC:C2:37:63
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5C2AFE1AF73E7D06B9E4DEB7EA89AC734A1BD9DC
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36382e302f32342d3234203d3e203137383835.roa
Signing time: Thu 31 Mar 2022 12:00:00 +0000
ROA not before: Thu 31 Mar 2022 11:55:00 +0000
ROA not after: Thu 30 Mar 2023 12:00:00 +0000
asID: 17885
IP address blocks: 112.215.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2a:fe:1a:f7:3e:7d:06:b9:e4:de:b7:ea:89:ac:73:4a:1b:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 31 11:55:00 2022 GMT
Not After : Mar 30 12:00:00 2023 GMT
Subject: CN=95FE4E6F02F756F39298A9C087D60D49CCC23763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:95:2d:c3:62:df:d0:e5:cd:4e:5c:33:63:
0f:53:1e:10:cc:7a:e0:18:97:75:32:cf:9e:1e:8c:
7a:3b:d0:bb:2f:fa:99:4c:bb:30:0c:f4:95:d9:a7:
1a:35:7a:ce:24:9f:59:cd:63:76:2a:22:df:17:67:
71:61:26:ad:69:99:72:b6:7a:2a:bb:f6:08:a4:32:
9d:f2:48:b3:90:07:3e:8b:a8:a0:18:92:5e:c1:5a:
a5:f5:d1:51:4e:53:2e:60:02:a0:0e:49:36:cd:fe:
63:ac:30:8c:09:e1:c2:eb:20:ce:72:d9:17:ae:f6:
87:4d:61:91:95:a5:2c:db:6b:c5:5c:56:ef:df:ff:
f0:3e:d4:d4:b4:fb:33:6b:e2:da:fc:d5:5f:ff:fd:
25:eb:84:07:bd:de:04:88:1a:af:9c:b3:9e:03:b7:
5c:7c:7a:3a:04:e8:64:f3:74:65:fb:3a:a1:60:c7:
d6:8a:fe:df:9d:71:f5:f1:12:12:8f:9e:61:78:e9:
b0:0c:6c:6c:64:86:27:4e:dd:2a:39:98:5b:d0:24:
9f:29:e3:db:e0:a4:d5:4b:57:34:87:1c:4b:13:27:
53:8e:e4:2a:3a:8b:8f:42:8a:d3:ac:e8:48:37:66:
7a:8f:40:38:2a:26:c4:d9:66:c8:c9:4d:5c:0c:2b:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:4E:6F:02:F7:56:F3:92:98:A9:C0:87:D6:0D:49:CC:C2:37:63
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36382e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.68.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:72:23:fa:8f:1b:8f:58:38:1e:73:ef:78:67:64:e7:49:
c8:9a:db:ce:c9:7c:f5:8a:50:d7:97:fd:04:e1:02:5b:1f:a3:
7d:9b:7a:99:53:4a:fa:1f:4e:62:ce:a4:dc:28:6b:af:4a:79:
48:b4:3f:c3:9e:40:01:cb:0b:f9:8e:37:b0:39:05:60:f0:ad:
9c:9d:ce:b8:d7:05:0a:6e:e8:5e:29:5b:4d:44:ac:cb:ec:3e:
3f:95:7d:01:38:5a:49:29:0a:f4:53:4d:78:9d:7a:89:f5:8d:
51:4f:f5:70:8d:a7:19:6c:46:1d:98:9b:7a:b8:9a:a6:db:fd:
7e:bc:02:81:2b:97:4e:b1:2a:1c:bd:d0:4c:cd:6f:74:4c:b9:
3b:6f:00:3e:e2:ef:b7:56:96:57:7e:d5:84:3b:2f:f2:8d:1d:
7d:83:67:c7:de:c8:95:da:2b:13:b4:58:53:35:bc:2e:8c:93:
f3:1a:a5:55:16:51:08:bb:a0:5f:90:6f:9e:44:47:07:e9:03:
49:f0:04:2a:c6:37:4c:88:21:a2:cc:27:e8:9a:df:2b:f6:62:
e2:d4:3b:73:2b:52:df:44:80:5c:f1:04:3e:d0:71:3d:43:56:
d2:a7:26:06:bf:db:d4:38:33:ea:63:bb:86:71:9b:cc:f4:29:
8c:2b:b3:b6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXCr+Gvc+fQa55N636omsc0ob2dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjAzMzExMTU1MDBaFw0yMzAzMzAxMjAwMDBaMDMxMTAvBgNV
BAMTKDk1RkU0RTZGMDJGNzU2RjM5Mjk4QTlDMDg3RDYwRDQ5Q0NDMjM3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSpUtw2Lf0OXNTlwzYw9THhDM
euAYl3Uyz54ejHo70Lsv+plMuzAM9JXZpxo1es4kn1nNY3YqIt8XZ3FhJq1pmXK2
eiq79gikMp3ySLOQBz6LqKAYkl7BWqX10VFOUy5gAqAOSTbN/mOsMIwJ4cLrIM5y
2Reu9odNYZGVpSzba8VcVu/f//A+1NS0+zNr4tr81V///SXrhAe93gSIGq+cs54D
t1x8ejoE6GTzdGX7OqFgx9aK/t+dcfXxEhKPnmF46bAMbGxkhidO3So5mFvQJJ8p
49vgpNVLVzSHHEsTJ1OO5Co6i49CitOs6Eg3ZnqPQDgqJsTZZsjJTVwMKx4fAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUlf5ObwL3VvOSmKnAh9YNSczCN2MwHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHDXRDANBgkqhkiG
9w0BAQsFAAOCAQEAicRyI/qPG49YOB5z73hnZOdJyJrbzsl89YpQ15f9BOECWx+j
fZt6mVNK+h9OYs6k3Chrr0p5SLQ/w55AAcsL+Y43sDkFYPCtnJ3OuNcFCm7oXilb
TUSsy+w+P5V9AThaSSkK9FNNeJ16ifWNUU/1cI2nGWxGHZiberiaptv9frwCgSuX
TrEqHL3QTM1vdEy5O28APuLvt1aWV37VhDsv8o0dfYNnx97IldorE7RYUzW8LoyT
8xqlVRZRCLugX5BvnkRHB+kDSfAEKsY3TIghoswn6JrfK/Zi4tQ7cytS30SAXPEE
PtBxPUNW0qcmBr/b1Dgz6mO7hnGbzPQpjCuztg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net