Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e39372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: EtW6TC1YBhwyvXNYqiaFeBIOuICAWHMPLgHVaXqfMgc=
Subject key identifier: FD:C4:18:5C:C2:5A:9B:F9:AD:32:38:C9:57:21:07:F0:15:31:16:6F
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7D79938028BA90F3D84B30373292B29FDA5E1DC6
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39372e302f32342d3234203d3e203137383835.roa
Signing time: Tue 05 Apr 2022 11:00:00 +0000
ROA not before: Tue 05 Apr 2022 10:55:00 +0000
ROA not after: Tue 04 Apr 2023 11:00:00 +0000
asID: 17885
IP address blocks: 112.215.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:79:93:80:28:ba:90:f3:d8:4b:30:37:32:92:b2:9f:da:5e:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 10:55:00 2022 GMT
Not After : Apr 4 11:00:00 2023 GMT
Subject: CN=FDC4185CC25A9BF9AD3238C9572107F01531166F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:64:20:3a:dc:7b:08:85:80:d0:48:a9:ad:
9a:c6:d2:be:e6:e6:3f:6d:25:72:aa:d2:19:16:7e:
26:1b:bd:82:c2:0e:f0:e2:f9:6e:81:9c:37:8a:e2:
27:eb:d5:a8:f1:50:a0:7b:10:cc:dc:16:20:87:db:
0b:f8:ff:35:ec:ab:84:7c:4b:f4:07:7a:f4:3e:10:
31:f1:7c:f4:e1:b3:d7:5f:02:99:13:fe:e8:b3:d6:
c2:df:01:ff:60:77:25:78:31:f4:64:e1:39:44:fd:
ed:c2:7f:2a:c5:3e:96:db:a8:4e:f9:59:20:3d:d9:
9c:54:2e:3f:08:50:7f:1a:45:e0:ca:99:fa:68:04:
ab:2a:2b:e6:ad:9d:70:31:ab:65:3b:75:7a:28:48:
8a:dc:44:1b:0b:9d:5e:0a:73:ad:10:70:36:06:78:
84:07:a8:63:66:ae:16:76:6a:3e:c7:d8:3e:fc:6d:
b5:c1:3a:0b:c3:81:99:ad:fb:74:1c:cf:a6:f1:9a:
26:1e:71:51:79:d7:ab:29:96:b7:81:75:fe:59:b0:
34:6d:7f:b7:01:b5:35:0b:e3:f7:83:f6:dc:8e:13:
03:42:87:c6:d3:0b:29:0e:a4:df:9d:e0:3e:eb:42:
27:a6:5c:62:b3:93:da:6e:2f:6f:f7:ae:12:60:55:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:18:5C:C2:5A:9B:F9:AD:32:38:C9:57:21:07:F0:15:31:16:6F
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e39372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.97.0/24
Signature Algorithm: sha256WithRSAEncryption
34:21:ff:b4:97:02:3f:ea:d6:76:ce:dc:57:6f:ca:a1:18:d1:
e3:11:52:e4:a2:38:fd:fd:9e:09:04:1d:c5:ff:59:a9:34:a4:
5a:5b:33:7a:ad:82:f7:ae:48:ad:e5:78:c1:54:e3:de:28:01:
97:45:57:d3:1e:1c:a6:b2:38:9c:5c:c4:d4:4b:b0:3a:0e:a3:
d8:87:79:9e:c6:d4:6d:aa:da:c2:1d:d7:c3:db:cd:6a:f4:62:
a5:92:b5:da:62:b8:57:bb:46:25:4a:54:1a:63:3c:9f:7d:9a:
c8:90:dc:87:f5:e4:43:8c:ec:00:27:ce:90:30:41:2d:d2:79:
77:0a:95:5e:70:f1:c8:7c:06:6a:f7:05:4e:cd:c7:ef:c2:e1:
74:b9:a2:4d:98:d5:71:1c:b9:85:36:22:54:46:54:6c:ef:4f:
f7:8e:31:c5:1d:2c:49:c7:ad:25:fc:4b:41:24:c0:af:6d:4c:
4e:21:9b:46:95:54:cf:55:86:94:14:6b:ac:a0:56:f6:bd:3f:
5e:69:74:c9:9d:4a:04:2d:23:b9:d4:d8:c3:e9:0d:04:0e:7e:
f6:d2:a0:bc:51:42:b9:9c:b5:59:9d:2b:aa:ee:c7:4b:e7:38:
af:29:8f:e5:44:e9:42:5f:8f:73:cd:88:da:54:67:b4:ee:d9:
8c:4a:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net