Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e37372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e37372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: R33UBP+T37oDS4Jg4Ngd3atqs9T00CqVjwG+HhTZV7A=
Subject key identifier: 4E:DD:63:81:2C:3B:AC:78:E4:1E:2A:04:58:7D:2B:39:BD:4D:2D:17
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0A4F356780A9CD3999F27C31C10B8F83567D24A2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e37372e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 11:00:01 +0000
ROA not before: Tue 05 Apr 2022 10:55:01 +0000
ROA not after: Tue 04 Apr 2023 11:00:01 +0000
asID: 17885
IP address blocks: 112.215.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4f:35:67:80:a9:cd:39:99:f2:7c:31:c1:0b:8f:83:56:7d:24:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 10:55:01 2022 GMT
Not After : Apr 4 11:00:01 2023 GMT
Subject: CN=4EDD63812C3BAC78E41E2A04587D2B39BD4D2D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:1e:46:a0:d7:8f:ed:17:d6:2d:97:c4:62:
2a:ca:b1:b1:02:b3:9d:5b:74:0e:68:fa:3e:3a:e6:
d6:bd:71:92:85:b3:c7:bd:8d:28:c7:33:7c:a2:c0:
8b:f3:07:6c:d4:70:aa:4b:e0:02:ce:a9:27:02:6f:
d8:65:b9:c7:77:e6:22:42:4f:aa:c4:48:73:c8:05:
dd:48:34:ba:87:1b:1d:f5:0d:0d:58:ae:78:ec:47:
79:f8:c6:37:6e:27:ed:08:16:a7:83:55:c2:fa:fb:
c5:37:a7:a9:30:e2:f9:e1:93:f5:7d:31:31:d8:dd:
37:5d:e5:3a:08:e2:19:04:d7:7e:9e:21:dc:f5:fb:
2c:92:65:24:8b:21:49:cf:d8:78:e1:d8:d3:0f:73:
53:a4:e0:de:f0:1c:df:e3:9a:f8:61:71:e0:87:25:
cc:70:3a:23:83:59:d6:bd:e9:c2:38:9c:29:46:aa:
23:6f:77:1c:a1:b6:e9:4c:d5:d7:bc:58:12:68:e0:
d4:62:9f:0c:73:48:d9:0e:fd:bd:b0:80:6d:80:78:
28:b6:17:e2:c0:6a:9e:c6:33:8a:d9:4f:ed:fa:be:
36:0b:b1:42:76:ff:8e:95:2e:fd:8e:55:fc:8d:67:
7b:29:37:b4:94:92:6d:a6:6d:cb:82:e2:3e:b9:72:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:63:81:2C:3B:AC:78:E4:1E:2A:04:58:7D:2B:39:BD:4D:2D:17
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e37372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0b:2d:e2:22:62:ec:73:ed:90:34:e5:3c:1d:cc:1d:6f:e7:
7d:1d:e3:8b:1e:15:af:c2:b8:17:9c:f9:ab:75:36:a4:a4:60:
c4:54:f7:3c:96:96:18:15:51:0a:83:84:b4:dd:62:aa:9a:16:
cb:80:cd:43:f7:8f:f7:82:f2:c0:6a:63:f7:42:72:84:ea:41:
3e:dd:5f:6e:aa:26:26:49:7c:43:07:7d:4f:10:90:a1:d8:2e:
a1:7c:95:a0:3e:94:28:d4:c1:db:91:78:63:e9:bf:39:10:d5:
45:8d:ef:3d:75:ca:59:a0:4e:00:39:8b:cd:36:80:89:0a:0c:
c7:4d:3c:98:37:3f:b4:e9:a8:3f:e2:5e:16:19:7d:19:e4:93:
33:ca:c5:7b:d4:01:39:1a:64:c6:b4:6d:b6:0d:65:b0:5c:57:
d3:16:af:95:00:66:ef:d8:3a:bd:18:45:c9:ff:5b:a3:19:09:
96:ee:02:12:d5:72:5b:c6:e5:e2:92:54:07:a5:5e:d7:a2:3d:
a3:62:25:db:8b:41:00:4f:0b:f9:b2:66:84:73:ec:71:49:6b:
96:a8:e9:8c:50:cb:71:ef:57:55:0b:16:c3:8b:8f:3c:08:df:
4f:89:09:65:54:f8:a3:52:a1:06:46:bf:99:63:1b:8f:fa:52:
f1:07:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net