Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36372e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e36372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: h0joEtpCTdc+EB+nY1kh5MmbrmAMfNDaOEEFAyqXyUE=
Subject key identifier: DD:92:83:AB:25:20:72:7E:02:71:BE:76:A5:44:55:B3:F5:B4:40:85
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7AB91BCAE788A6D131295C41A2D2420A9E846A9C
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36372e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 10:00:00 +0000
ROA not before: Tue 12 Apr 2022 09:55:00 +0000
ROA not after: Tue 11 Apr 2023 10:00:00 +0000
asID: 17885
IP address blocks: 121.52.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b9:1b:ca:e7:88:a6:d1:31:29:5c:41:a2:d2:42:0a:9e:84:6a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 09:55:00 2022 GMT
Not After : Apr 11 10:00:00 2023 GMT
Subject: CN=DD9283AB2520727E0271BE76A54455B3F5B44085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:8d:e8:39:a3:b6:ac:33:e0:5b:e6:d9:69:
ac:1c:25:6e:af:ea:99:96:97:60:09:99:02:ae:b0:
88:4f:34:e7:64:2f:a6:1e:79:dc:80:14:a9:12:24:
31:76:f7:6b:17:2b:f9:a9:d2:17:d4:95:6a:18:0f:
43:ae:80:c0:2f:2a:58:d5:61:15:28:f7:88:72:71:
c2:0b:52:ec:43:44:2e:e7:15:22:af:51:0c:62:1e:
f1:84:87:a3:8d:65:87:3c:ae:6f:37:d9:54:f1:e0:
e8:97:60:e4:04:a6:56:02:11:62:21:28:56:b0:90:
5b:71:41:60:63:bf:9c:9c:e6:e0:50:ce:cc:90:ca:
88:c7:a9:21:29:b8:9c:af:cb:a6:00:2f:52:80:93:
09:a2:d3:6b:93:e3:4a:c6:ce:9c:a5:5f:25:2a:44:
98:33:dd:e9:6d:00:03:38:56:f4:8f:c4:08:93:02:
dc:3d:81:85:81:aa:9d:37:cd:2b:59:43:a4:51:3d:
ff:21:55:d1:89:ef:95:4b:7c:07:dd:22:46:75:4a:
73:06:f0:db:d1:f0:56:3d:9c:60:e6:d6:c7:37:9a:
5d:e0:1d:51:b5:14:ea:9b:72:11:a4:dd:00:58:88:
fc:5a:f6:ee:2f:7e:ae:c3:aa:be:b3:ac:c0:62:55:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:83:AB:25:20:72:7E:02:71:BE:76:A5:44:55:B3:F5:B4:40:85
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:be:3c:bf:d2:f9:bb:7d:c6:6f:3c:a3:e2:9d:8c:5a:b3:74:
4f:54:a9:f4:08:46:e0:74:cc:92:0c:8a:be:d2:3c:89:f5:6f:
3f:96:be:5d:78:8a:2f:22:5d:3f:90:98:9b:e8:1a:56:8e:e8:
6b:bf:2e:aa:b8:32:2b:fe:5a:ce:46:16:e1:d9:83:0a:1b:46:
94:84:a0:a2:1c:0e:5d:bf:14:bd:71:e8:f1:fb:99:6d:3f:94:
26:5c:e3:e4:5b:60:b2:76:07:e1:c1:3c:72:4c:98:60:bb:fc:
01:56:07:61:b5:bd:64:0c:7d:1a:44:fd:b5:42:c7:9a:e5:a5:
14:c6:d7:07:d6:f2:fd:1f:a8:d2:c7:c7:7e:b8:5d:c2:38:cc:
96:39:5e:ed:28:1e:86:fa:c8:90:cd:3c:fc:4e:9e:b1:5a:4d:
25:0e:81:0b:bf:98:77:e6:b4:06:60:32:8b:6b:e6:5f:59:51:
11:2a:1f:22:95:47:01:ac:9a:1a:ed:d1:54:c9:dc:1a:63:df:
5b:06:b9:71:73:41:c9:2c:94:0c:1c:77:5f:e3:f0:8f:58:bf:
05:5e:2e:bd:b1:cd:dd:f0:5b:3c:af:a7:e7:2b:ab:8a:0f:e2:
8a:93:b4:65:38:5d:ad:1a:a8:4f:43:c3:a2:83:ba:08:f9:2d:
59:bb:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net