Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37342e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e37342e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: gJ7zWbSGbIg3mTYgXeQqj641lyj1kWvmB+xfNs1cKoo=
Subject key identifier: 58:A8:52:02:0A:DD:AD:17:9C:EB:48:AA:0F:11:86:0B:AF:F3:E6:F7
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7B38CD253E77FB70E2E47D48E83ECCD45B304F96
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37342e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 04:00:00 +0000
ROA not before: Wed 13 Apr 2022 03:55:00 +0000
ROA not after: Wed 12 Apr 2023 04:00:00 +0000
asID: 17885
IP address blocks: 121.52.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:38:cd:25:3e:77:fb:70:e2:e4:7d:48:e8:3e:cc:d4:5b:30:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 03:55:00 2022 GMT
Not After : Apr 12 04:00:00 2023 GMT
Subject: CN=58A852020ADDAD179CEB48AA0F11860BAFF3E6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:5c:02:e3:d5:f7:a8:a8:08:0d:28:1a:24:
f4:49:28:7f:27:6c:f8:28:d1:84:76:61:c1:60:1f:
34:1d:9d:c1:fb:8c:f4:38:78:96:16:9f:56:5a:3c:
13:ce:da:f8:2f:5b:2a:52:54:24:a0:8f:d6:a5:2d:
eb:66:2d:aa:ee:ff:54:d6:d5:dc:c2:da:0b:f8:eb:
13:3e:02:1c:8c:ce:29:43:73:90:96:0a:a1:48:22:
d0:f3:b6:11:74:0d:93:24:90:38:40:56:40:a2:da:
dd:cb:e4:5f:ff:d1:07:b6:1c:68:57:c9:d6:a9:82:
8d:ef:8a:20:86:9b:29:cb:6d:3c:a5:54:56:61:ca:
b4:4e:e5:b9:ae:73:25:a5:2d:73:4b:94:21:e8:c7:
80:67:e2:d8:3c:7d:9a:7f:95:35:7b:59:6c:b1:cc:
c3:d0:0c:f2:74:ad:ef:30:b9:f0:21:6b:38:7c:ee:
4e:fa:a7:08:18:35:76:f6:4c:7c:27:97:98:07:7d:
b3:a0:09:8a:8e:db:39:8b:f3:92:33:c5:5f:f3:5a:
b4:de:43:1b:d1:76:c0:18:7f:ef:2a:a0:bb:52:40:
57:fd:64:c8:b9:44:48:b8:13:73:34:df:06:60:7d:
fb:68:01:1a:45:6b:92:1d:9e:9a:3c:de:cf:45:20:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:52:02:0A:DD:AD:17:9C:EB:48:AA:0F:11:86:0B:AF:F3:E6:F7
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37342e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.74.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c9:21:01:25:07:43:20:89:ee:8a:9b:98:c8:4f:a0:be:cc:
69:21:d1:82:1a:90:ef:3b:59:a3:2a:04:14:df:26:e8:97:f8:
a1:8e:60:f7:01:02:6b:04:f1:b2:01:9a:1f:c3:e2:0e:b1:b9:
e7:44:e3:70:9a:8e:53:f6:7d:cd:ed:d3:68:4e:f5:3d:7c:20:
cd:eb:e5:80:d2:14:bf:2c:7b:71:23:5a:83:5d:e7:a7:2b:e3:
b9:5e:7c:48:55:a3:ef:e7:72:1e:22:dd:57:06:f9:bd:46:db:
b9:ec:78:07:cb:80:d5:ba:fe:62:cc:e5:6a:74:5f:f6:d7:2e:
cf:36:fb:e3:bc:80:2d:14:2b:12:64:bd:f9:2f:39:51:fc:50:
bc:13:30:cb:52:2a:43:ed:4a:18:27:09:ad:d0:d7:0e:e4:71:
9c:6f:8c:32:e4:f4:8d:2f:e0:a8:77:aa:46:86:cd:d8:19:99:
b6:6e:78:50:8e:fe:94:59:24:d1:a7:b2:ed:54:2c:d9:00:14:
ab:91:a3:54:40:87:44:4e:80:7a:ce:43:1c:28:b8:fc:97:59:
18:2b:e0:6f:a1:89:fd:45:b5:15:5d:35:09:9d:9f:71:ca:e6:
30:7b:4d:ca:dc:37:d7:67:80:b8:f9:6c:e5:fc:78:bd:d1:0c:
92:00:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net