Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39362e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e39362e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: aRkQi4OdUVRvJTEljeaie7In+YUx73o9cxQjdYEL/dk=
Subject key identifier: DF:A5:4D:96:70:49:F8:8F:8B:4D:25:E2:E4:41:2F:BC:28:E7:3A:34
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 78039567CB7AD44459866CD5D76D56A5D3465297
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39362e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 11:00:00 +0000
ROA not before: Tue 05 Apr 2022 10:55:00 +0000
ROA not after: Tue 04 Apr 2023 11:00:00 +0000
asID: 17885
IP address blocks: 112.215.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:03:95:67:cb:7a:d4:44:59:86:6c:d5:d7:6d:56:a5:d3:46:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 10:55:00 2022 GMT
Not After : Apr 4 11:00:00 2023 GMT
Subject: CN=DFA54D967049F88F8B4D25E2E4412FBC28E73A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:02:61:47:f8:9a:1d:ac:5f:2f:06:71:d1:
4a:0b:06:73:22:97:4d:c2:9c:ff:30:d2:26:f4:35:
0c:6d:2f:15:46:49:e8:25:00:89:52:54:77:09:12:
9b:bd:bc:74:0a:d4:99:b6:09:67:8a:68:bf:90:39:
d9:5e:24:3b:68:96:42:5f:c1:f2:2f:cb:90:e9:d2:
24:1d:8a:93:83:e3:c4:6c:19:da:24:51:86:75:08:
fd:17:b5:f0:d0:aa:09:1d:3f:a2:d7:c8:9f:a4:66:
a3:a8:c0:f4:59:35:15:36:48:ab:ed:d6:64:ff:f9:
57:da:3d:cb:49:79:85:ac:52:5a:dc:3a:06:20:fc:
f7:04:51:bf:5e:48:c6:76:2f:ef:d2:c9:78:22:e6:
62:4c:fe:31:39:fd:6d:b0:6a:66:d0:f3:6b:8c:ed:
ac:53:0d:54:4c:bc:ce:d8:41:70:3f:0f:fd:22:42:
31:f5:16:69:0a:2f:2a:6f:e3:25:5b:67:ff:25:3a:
0d:6e:a7:fb:ce:9a:36:8b:84:39:c4:aa:7b:12:20:
57:c6:6e:3f:6d:46:97:2c:d6:d1:7b:69:09:04:89:
6f:ba:9e:b7:ba:df:59:9c:7f:82:2d:50:6f:d1:29:
56:ec:e9:98:52:67:33:0d:ff:7a:cd:c6:ac:2f:b0:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:4D:96:70:49:F8:8F:8B:4D:25:E2:E4:41:2F:BC:28:E7:3A:34
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39362e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.96.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ba:18:5e:dd:7a:e7:b6:31:95:b4:c7:e6:2b:12:9f:02:df:
c7:c1:2b:63:46:b3:a2:42:20:21:fa:73:7a:63:88:97:96:5e:
e6:d7:95:54:68:7e:fb:70:5b:66:d6:5e:ce:ca:c0:50:f9:07:
ad:2b:b0:1f:df:28:20:c7:84:e0:6f:dd:c2:76:59:58:20:b3:
fe:cf:17:6a:8d:43:4b:e1:03:9c:4a:b2:2e:3f:92:ec:f6:1d:
13:a2:8a:48:3b:79:db:54:d6:75:9d:c7:67:5c:81:51:6e:47:
90:0e:b3:e0:aa:d7:09:29:36:46:c0:17:65:72:46:7b:87:ae:
07:f1:27:5b:94:41:9d:a1:e7:c8:d3:27:c7:c7:85:f3:c7:e5:
83:80:68:a5:04:d5:47:8b:81:bb:19:e2:63:5d:4b:b7:01:d4:
29:60:d4:ca:15:a0:10:4e:c2:91:5b:80:b9:a8:1d:01:b3:58:
41:92:ef:1f:63:ff:54:9f:10:8c:f4:23:4b:af:eb:c4:a2:72:
e3:41:9e:19:0e:80:6e:ab:1d:5b:90:97:e8:db:a5:3e:09:a7:
c4:11:f7:ac:a6:b3:09:95:98:52:8a:0f:27:81:55:ef:64:36:
63:88:7c:23:4b:9e:89:12:c4:da:fb:0f:be:9a:e1:96:c9:2d:
0c:4a:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net