Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32362e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e32362e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: of/fxAa+95JFq7+YPH5iTLy3DrnVjki0rbZi8PGxfuI=
Subject key identifier: E4:EE:0F:77:7C:EC:06:6B:56:B1:92:93:60:A1:40:2C:CB:24:EE:6D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 62530B9263B015C1BC29A15DE04AB919E24A26DE
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32362e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 09:00:00 +0000
ROA not before: Tue 12 Apr 2022 08:55:00 +0000
ROA not after: Tue 11 Apr 2023 09:00:00 +0000
asID: 17885
IP address blocks: 121.52.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:53:0b:92:63:b0:15:c1:bc:29:a1:5d:e0:4a:b9:19:e2:4a:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:00 2022 GMT
Not After : Apr 11 09:00:00 2023 GMT
Subject: CN=E4EE0F777CEC066B56B1929360A1402CCB24EE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:53:1e:4d:e7:7b:73:09:44:3d:b3:1f:36:
25:64:14:4d:fe:00:cb:86:d8:b6:ad:5c:5e:60:d0:
73:4e:a1:64:36:f1:10:2a:25:d7:3a:7c:b6:b8:4a:
95:d2:c7:5a:f3:1a:e3:df:62:2c:14:5a:1e:d9:f6:
bd:30:92:f3:45:b5:a3:8d:f9:0e:06:4f:35:06:b1:
d0:6b:f2:64:51:d7:3b:26:49:b2:79:33:c3:b5:89:
bd:e1:ce:3d:13:a2:5d:0b:8f:cc:85:21:37:5a:8b:
88:7d:83:fd:a9:77:d8:43:1c:7e:5a:af:62:b4:a1:
fe:04:f5:8f:8f:19:4f:12:2e:f5:88:87:90:75:d4:
6f:fe:78:4e:3e:9a:14:63:8f:65:50:a3:a0:07:5b:
7c:72:fa:2b:0b:ce:39:15:e0:78:30:45:0c:05:a8:
56:c0:44:fb:71:e3:32:f0:a8:58:a3:c1:19:71:74:
ce:a9:58:43:86:fe:15:0b:23:4b:d9:73:ae:08:bc:
1d:fa:ef:2b:cd:45:3e:ac:9d:a5:e4:bc:80:4f:27:
1d:d5:63:ef:26:42:b0:5c:b3:e3:d9:5b:3e:df:99:
d4:a9:4c:19:71:58:02:75:79:9e:8d:ca:02:b3:9e:
4b:63:f4:ed:18:b0:ad:2e:ef:98:6f:f7:fc:11:b3:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:0F:77:7C:EC:06:6B:56:B1:92:93:60:A1:40:2C:CB:24:EE:6D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e32362e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.26.0/24
Signature Algorithm: sha256WithRSAEncryption
51:77:52:0f:40:85:f5:df:3a:9c:00:e8:b8:4d:aa:2c:4e:c1:
2e:26:56:33:79:29:1f:d9:d9:e1:e8:f2:8b:4c:ac:36:0e:b0:
fb:f3:63:c7:72:57:32:b2:8e:58:47:47:a4:3a:ee:7a:3a:cd:
67:99:f6:bc:8e:b7:a2:37:b6:ea:10:06:42:e5:45:83:ab:ab:
5c:8c:fd:2c:03:99:c7:89:2f:7e:91:89:39:3e:bc:5d:fe:7e:
10:5f:96:3f:dc:d1:fd:a9:e9:bb:53:8f:42:e9:ae:4e:f6:52:
ad:f1:5b:90:ae:fa:55:cd:ba:bc:d8:7f:03:d8:6b:04:e3:b1:
f5:22:b8:b2:0f:51:4c:c9:2c:1f:ad:b9:df:80:3b:3b:95:85:
ff:32:af:f5:d0:05:a2:e1:f1:64:bf:33:1d:47:d6:fb:5d:68:
7b:39:12:8a:85:6f:89:d0:d2:87:65:ad:aa:82:05:ce:f1:40:
ed:cb:b7:bf:d7:09:64:38:d8:9f:a1:fb:dd:bf:c5:d6:88:ca:
82:df:a6:9c:4d:73:4c:93:f9:bc:91:c3:71:ce:f7:f7:b7:7e:
a5:3a:f9:6c:e3:9c:71:1c:9c:5c:7d:09:c8:3a:1e:e6:27:d5:
86:91:58:28:c6:48:19:dd:e5:22:41:36:ca:c2:d3:dc:d6:7a:
0c:f6:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net