Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e34302e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e34302e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: z2vvD6wEUzY/jzieuk0XTbtjHQzv5gneKvTyfM2k0xQ=
Subject key identifier: 52:D2:87:58:58:15:4E:50:BA:A6:98:E0:86:CD:63:2A:78:55:3C:04
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6DEBD445F765C95A8FDE2D84396BCE6C08F0B2BF
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e34302e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 09:00:00 +0000
ROA not before: Tue 12 Apr 2022 08:55:00 +0000
ROA not after: Tue 11 Apr 2023 09:00:00 +0000
asID: 17885
IP address blocks: 121.52.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:eb:d4:45:f7:65:c9:5a:8f:de:2d:84:39:6b:ce:6c:08:f0:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:00 2022 GMT
Not After : Apr 11 09:00:00 2023 GMT
Subject: CN=52D2875858154E50BAA698E086CD632A78553C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:a9:f3:ef:8a:7a:99:b6:b0:a6:b0:3f:2d:
8e:14:85:1d:b8:50:d8:de:75:09:b1:32:37:d2:37:
f9:86:c7:99:4f:43:84:39:88:fb:6c:11:46:23:c0:
30:0a:27:27:80:25:45:62:b7:6d:89:01:cf:d3:d2:
e4:df:a7:df:c0:7b:24:2e:bc:d2:20:24:e3:59:0f:
0c:01:f9:62:de:08:de:2c:ac:03:a6:bd:56:48:4b:
47:31:5e:d0:2a:8b:8a:35:f8:e5:27:27:46:7b:3f:
0c:79:95:3e:02:44:fb:1a:11:2c:02:08:ba:ec:ff:
41:15:ee:f9:60:fb:55:91:17:a9:6b:58:05:83:ea:
89:ea:b0:6f:fc:f1:59:c6:e6:79:b8:78:03:a5:01:
37:a9:63:4d:9b:26:99:5b:57:59:4c:6e:1d:46:5e:
b9:18:70:61:49:0c:b1:3f:ab:cf:c1:66:f2:e1:43:
f3:c4:d7:4c:4d:d8:c9:46:47:88:d7:87:df:a0:91:
5f:2e:f7:af:ff:1e:b8:7f:f7:80:f3:ca:e4:31:0a:
d2:04:c7:c5:9c:c4:e8:f6:24:33:09:5b:a3:91:22:
60:ea:eb:ff:84:59:05:4f:91:6c:3b:02:ed:c6:bd:
0f:b4:4d:c7:5b:2e:2e:07:a2:44:b1:25:c1:16:3e:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:87:58:58:15:4E:50:BA:A6:98:E0:86:CD:63:2A:78:55:3C:04
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e34302e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:37:5f:7e:75:e9:cc:e7:95:42:4b:50:f8:c6:d7:f4:16:37:
6a:c7:f0:95:3e:c8:ce:28:87:64:7d:c7:e6:32:08:0c:42:89:
64:ff:45:d1:a4:5a:0f:0a:ba:f0:6b:b3:20:97:da:1a:6a:73:
09:77:93:00:4d:7d:de:c9:4a:59:07:ad:c4:86:bc:da:80:07:
9c:fa:b2:cd:b1:f5:f0:44:8b:ef:6e:cd:66:fb:d1:45:15:8a:
1d:9f:45:cb:52:30:a3:2b:71:89:4e:f8:04:ec:71:b7:52:76:
94:c0:2b:c0:2b:59:84:cf:24:d6:69:f8:a6:f5:12:c6:68:ea:
57:2c:17:99:6c:81:c7:65:0d:98:e5:2a:78:34:35:97:aa:89:
f2:8e:a3:54:4d:a6:c1:cf:58:aa:6e:73:ea:e5:f9:d1:c2:1b:
fb:52:e7:48:f3:5e:04:78:e7:1d:9a:96:f5:d9:f3:99:68:a0:
09:3f:0e:23:58:eb:71:e8:d8:db:f3:a0:3b:7c:5b:ff:55:1c:
6c:32:e5:bd:55:f7:bf:b4:82:44:1f:01:af:23:26:59:97:b3:
12:d9:f3:22:e7:2b:25:34:84:d2:0c:42:a5:0d:c6:de:39:a9:
98:94:bc:1d:aa:4e:9b:18:08:2b:1f:92:ec:86:97:81:05:fc:
03:ed:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net