Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32352e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e32352e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: MUkrqB6JKD3uPUTWTP47MZnyH69GwiUgAYu0l9rog9w=
Subject key identifier: BD:25:E3:0D:29:C9:B6:AC:6F:E8:29:D4:11:DE:86:6F:7E:B7:EB:C7
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 44A8848751D35E3D059CAFF7E86BAB7AE58BD5DA
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32352e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 09:00:02 +0000
ROA not before: Tue 12 Apr 2022 08:55:02 +0000
ROA not after: Tue 11 Apr 2023 09:00:02 +0000
asID: 17885
IP address blocks: 121.52.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a8:84:87:51:d3:5e:3d:05:9c:af:f7:e8:6b:ab:7a:e5:8b:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:02 2022 GMT
Not After : Apr 11 09:00:02 2023 GMT
Subject: CN=BD25E30D29C9B6AC6FE829D411DE866F7EB7EBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:5d:ca:85:54:3c:ac:02:b9:61:52:74:8c:
0f:c7:a1:1d:53:db:25:7d:e6:a5:21:75:3d:1f:43:
02:f3:8e:76:b6:eb:a0:99:5b:c4:de:97:57:76:dd:
a5:cb:0d:7d:c4:22:84:7a:73:c1:92:17:1d:c9:1c:
14:9b:b9:ad:6c:78:be:a6:4e:1f:c6:41:52:8a:96:
ad:02:c3:70:67:a3:61:dc:d1:a9:61:d5:bf:48:f7:
3e:e3:f5:e5:3a:6c:3c:21:39:56:5e:2a:6c:3f:47:
df:07:77:7b:9b:10:f2:80:27:94:2c:61:f2:57:f5:
b0:69:d1:c3:9e:b1:70:4c:ed:29:48:65:14:99:16:
0c:21:97:88:3a:ba:f9:ed:d3:83:d9:bf:06:50:4e:
d4:34:10:fa:ed:6b:40:d2:cf:39:90:44:5a:2a:56:
56:1d:7c:a3:59:27:67:52:ac:c5:59:59:7d:6a:70:
4f:b7:bc:89:60:7a:d4:0d:8c:24:5b:27:91:ff:aa:
0f:b4:88:6f:9f:06:5b:e7:ef:b4:88:35:85:cf:e4:
65:a3:0c:3f:d8:b9:b3:d9:6e:3f:f1:ad:c0:95:d0:
d9:86:85:b0:33:06:aa:be:79:6d:18:a0:ec:d4:5d:
89:85:f7:1d:f6:c3:ec:21:b2:8c:e5:29:e4:85:d1:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:25:E3:0D:29:C9:B6:AC:6F:E8:29:D4:11:DE:86:6F:7E:B7:EB:C7
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32352e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:97:ed:05:05:e6:50:59:26:d8:f8:9c:5f:45:6e:b2:36:2c:
dd:33:2c:1e:ee:a2:ce:8a:6e:9a:1b:5f:44:4a:64:b8:bc:2d:
e5:64:64:7a:f0:95:ad:80:a8:5d:dc:30:a8:cc:26:34:0e:db:
9f:d7:c6:d5:af:e2:cd:70:ae:9c:d1:93:6b:b5:40:4f:fd:61:
f3:1a:52:b6:cf:0a:6f:c6:79:68:ad:9f:60:86:49:6d:76:7c:
34:bd:c7:16:2b:52:ac:a9:ee:79:ad:b7:05:cd:54:5c:60:d0:
99:d6:6b:57:7a:e6:00:8f:e0:55:78:f0:f5:9a:bd:2d:37:fb:
65:2e:c1:c0:92:38:2a:4a:4c:c4:d8:2e:b7:d5:22:5e:f5:ea:
75:8f:74:a4:d7:e2:f9:5b:36:25:69:a4:50:36:d6:40:4d:e4:
c6:be:24:b0:0a:4e:bd:54:c3:e7:b9:1f:1f:07:6f:4e:f7:21:
e2:39:1e:1b:7a:2f:20:28:74:8a:ca:2c:8e:d1:52:72:c2:05:
a9:52:88:97:d1:e5:71:ed:9a:6b:fe:b4:91:84:79:17:c0:8a:
1e:59:63:dc:f9:36:ee:34:00:43:f0:fd:54:f9:d8:f2:88:e0:
c0:71:fd:24:c1:66:88:6e:18:53:d1:a3:2f:96:8b:12:18:50:
bb:28:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net