Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e38382e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e38382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: GT+cXhDzk9gC+/z5Ty0bfriD6M9XRGOG55/Et3wvZYM=
Subject key identifier: 9B:85:62:F3:CB:72:96:AD:10:C0:9E:B3:C1:04:3F:69:92:1D:C5:65
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7A6BE3F6476BC8BBBC33D31F42C33D48E41BB663
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e38382e302f32342d3234203d3e203234323033.roa
Signing time: Thu 31 Mar 2022 19:00:00 +0000
ROA not before: Thu 31 Mar 2022 18:55:00 +0000
ROA not after: Thu 30 Mar 2023 19:00:00 +0000
asID: 24203
IP address blocks: 112.215.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6b:e3:f6:47:6b:c8:bb:bc:33:d3:1f:42:c3:3d:48:e4:1b:b6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Mar 31 18:55:00 2022 GMT
Not After : Mar 30 19:00:00 2023 GMT
Subject: CN=9B8562F3CB7296AD10C09EB3C1043F69921DC565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:69:d5:32:3a:30:69:d0:6b:8b:c5:7a:30:
24:54:3c:f7:8c:0f:c4:34:d3:be:0e:d4:ea:50:21:
c2:cd:c7:5a:1a:95:3d:74:95:15:70:44:96:bb:c4:
4a:16:07:53:76:10:d1:79:b5:90:41:51:2c:17:10:
ae:c8:00:81:11:b2:e0:32:8d:88:f8:c9:56:7d:17:
0b:72:b3:fe:4a:86:38:aa:56:4c:6f:f1:8b:ad:1d:
44:23:b3:c6:fd:21:3a:49:d4:45:2d:81:27:86:5e:
de:dd:29:f2:32:c8:27:42:78:a4:55:05:52:41:9a:
88:74:2c:4e:1e:cc:e6:46:a5:d8:5a:e2:d5:91:20:
27:06:39:59:3f:f2:04:2f:bc:f4:2b:02:ac:96:f7:
0c:75:e8:39:91:9c:2f:b2:ac:dc:2d:3d:b8:c8:7d:
5c:e6:de:9e:98:73:be:05:4d:0d:38:0f:c1:c5:5a:
65:50:60:18:1f:3b:97:57:58:9d:38:2f:5c:47:d9:
70:a7:70:48:c2:9a:34:d8:60:af:94:1c:e1:d3:e7:
bd:d6:3e:45:f0:25:df:40:4d:91:75:dd:01:e1:65:
bb:bb:2e:e9:6f:91:a3:9e:e3:13:2d:b2:18:e7:74:
36:b8:45:a8:f8:c7:90:7a:41:54:8b:93:47:b8:05:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:62:F3:CB:72:96:AD:10:C0:9E:B3:C1:04:3F:69:92:1D:C5:65
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e38382e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.88.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8e:11:55:c0:fc:9c:ca:81:e3:5e:9d:da:0c:e6:6e:e5:51:
32:7f:2b:50:6f:0c:39:4f:9b:e7:49:a1:12:56:5e:6c:e6:de:
cd:a3:3d:74:e1:d8:23:01:2a:2b:a8:61:f3:cf:cf:c6:bc:01:
f0:27:e2:ec:6a:d3:b3:59:df:2d:f5:f4:00:e1:01:de:6d:65:
16:f8:20:06:8e:cf:f8:a4:7d:4b:8a:78:1f:27:70:d9:b5:47:
dc:96:51:05:ab:6f:88:f9:0f:f4:53:45:f4:55:48:b9:f4:93:
59:bd:e2:68:0e:a4:45:cd:d7:3b:5a:1c:5b:ff:56:35:8c:3d:
6b:14:3a:ed:a7:0e:9d:5e:52:98:28:e0:e1:32:cd:5b:36:3b:
52:f0:29:e2:e2:ca:ef:60:a5:f2:df:93:99:c8:88:a1:da:6d:
be:e4:f4:32:53:8e:70:96:c1:86:b2:43:69:1a:80:e3:d9:c2:
c8:6a:0b:e4:0f:d8:9d:a2:f3:97:cc:e5:2b:95:ee:e7:cd:21:
7d:4c:76:09:44:b4:9c:71:30:e4:c1:74:69:8b:8a:eb:59:fc:
66:d2:7d:43:32:30:13:87:46:c6:47:ce:8b:17:8e:a9:91:b1:
07:36:26:7d:5f:75:41:ac:b9:1c:76:22:58:d1:44:7c:18:11:
01:42:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net