Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37322e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e37322e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: rlnSdAyojBjCgdYfJ5+WOJmE+1J8atmz9uGuHQ8In2c=
Subject key identifier: CB:BA:2A:E5:A4:70:67:74:FB:2F:FD:F4:93:98:BD:B8:6D:C3:32:54
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 2D1C489807AE78B167428AD18B38A04E034BF7C7
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37322e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 04:00:01 +0000
ROA not before: Wed 13 Apr 2022 03:55:01 +0000
ROA not after: Wed 12 Apr 2023 04:00:01 +0000
asID: 17885
IP address blocks: 121.52.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1c:48:98:07:ae:78:b1:67:42:8a:d1:8b:38:a0:4e:03:4b:f7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 03:55:01 2022 GMT
Not After : Apr 12 04:00:01 2023 GMT
Subject: CN=CBBA2AE5A4706774FB2FFDF49398BDB86DC33254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:f2:45:9d:df:50:0a:68:48:07:46:08:d9:
02:56:9d:cd:64:10:52:5d:c1:b8:7d:26:55:62:39:
16:c0:52:66:bd:11:fa:e1:f2:69:19:98:0b:45:9a:
51:5f:af:3e:ab:cc:ac:ce:f5:e3:1b:87:a9:fa:be:
06:d5:b3:8a:10:42:9d:19:97:c8:8b:59:ed:12:7b:
c4:d5:8b:09:3c:ad:b9:c6:c4:d1:1c:41:53:28:17:
10:2f:a3:e0:c9:2a:f7:7d:d6:d7:26:84:6d:ec:1f:
a1:f3:6b:1f:61:9a:08:e4:87:c9:91:5c:8f:64:2e:
81:ae:2a:3f:4a:62:6a:7f:32:ca:97:29:c3:23:00:
be:03:ba:85:70:89:ee:be:99:b1:b4:cb:ce:fd:aa:
8c:0c:a1:60:46:fc:b5:be:2f:1b:c7:15:49:5b:d7:
47:72:2e:65:7f:a2:df:22:9d:b5:f0:5d:59:f9:9e:
6f:b5:2a:b3:28:48:1c:ad:0d:a9:f5:2d:57:2a:ea:
b0:a5:8b:5e:d6:6b:24:8d:fe:67:2c:53:b4:6b:09:
b2:0d:72:e2:d4:af:e2:3a:44:5f:e9:2d:bf:49:31:
8e:9c:aa:51:05:65:ff:22:20:27:d9:1c:65:5b:3d:
38:6f:8a:ae:74:4d:e4:2f:96:2d:a6:ba:e7:8f:1e:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:2A:E5:A4:70:67:74:FB:2F:FD:F4:93:98:BD:B8:6D:C3:32:54
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37322e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.72.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9e:bf:d9:fd:60:30:49:50:dc:2f:b7:8d:bb:7c:cf:29:b1:
03:39:85:a7:ca:09:46:1d:8d:22:c0:ef:43:9d:ac:5a:bb:1d:
be:69:1d:ee:c2:d2:df:3f:dc:52:38:9e:c1:3a:95:e9:a4:8e:
d6:33:82:6f:7a:00:d1:e6:92:90:77:73:95:e9:c8:b7:32:10:
22:85:47:63:ba:91:fa:94:75:24:99:91:b1:20:f7:aa:96:a0:
e0:db:91:7b:c1:a4:9d:73:55:7a:04:1a:fa:b2:ea:a2:5e:aa:
c9:2f:a4:9b:51:44:21:98:39:53:1a:76:53:74:a8:43:f5:af:
1f:80:18:4e:3b:c2:d7:04:bd:46:24:9b:5e:53:c4:4c:b0:fd:
7b:08:0c:60:9c:a4:9e:6d:5d:52:68:47:dd:0a:e4:88:dc:3d:
cd:66:f2:4e:f0:a9:b6:61:26:c2:41:52:b9:cd:db:65:b2:fc:
49:2e:ea:35:06:bc:ed:4a:5a:99:40:0a:ef:ef:cc:8a:61:d0:
5e:09:33:ea:31:a4:8a:ff:00:98:e6:cd:0f:36:c7:62:a7:f1:
e3:40:bf:65:09:ca:f2:09:15:15:31:03:45:60:48:a5:5d:28:
18:7a:75:af:97:6c:36:f7:50:02:34:92:4a:02:e2:39:58:34:
b1:f3:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net