Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38312e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e38312e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: M+XiKrr7gP2ryQhp2U4pKDcbXYwTOhkYJdn40eFVjuI=
Subject key identifier: 18:21:B5:58:71:CD:B5:67:10:53:56:3C:ED:3F:2F:20:4A:89:0C:3B
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 400DDC409180DBD580FBA425678DCA0D8EF7EFA5
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38312e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 06:00:01 +0000
ROA not before: Wed 13 Apr 2022 05:55:01 +0000
ROA not after: Wed 12 Apr 2023 06:00:01 +0000
asID: 17885
IP address blocks: 121.52.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0d:dc:40:91:80:db:d5:80:fb:a4:25:67:8d:ca:0d:8e:f7:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 05:55:01 2022 GMT
Not After : Apr 12 06:00:01 2023 GMT
Subject: CN=1821B55871CDB5671053563CED3F2F204A890C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:f0:0a:03:0d:e5:af:04:a6:24:59:ee:e6:
57:46:3b:a6:ac:c2:45:6c:fd:8b:07:ac:b1:bf:8d:
8e:73:98:c4:d7:45:07:74:87:53:59:3d:16:70:32:
08:b7:d7:88:04:0e:f2:1f:8a:be:40:dd:77:a1:01:
c6:72:f8:4d:a0:c5:b6:fb:fc:f3:8f:f6:7a:ac:1d:
82:28:de:36:eb:10:c0:10:0d:29:45:ae:f8:66:f8:
88:62:c9:0d:91:e3:02:82:c6:69:44:3e:cd:33:ad:
6d:33:35:7d:1d:6d:9a:7f:e0:e1:24:5e:ca:3a:02:
2a:be:12:03:47:34:9e:21:72:d4:90:18:e1:36:a6:
47:90:99:d3:9b:cc:89:3e:6c:26:8e:96:e4:01:2c:
f2:0c:25:c8:7a:73:4b:73:f3:9b:c8:4b:79:0f:37:
16:e7:3f:be:6a:5c:a8:15:02:10:d6:e0:ee:d2:8a:
31:31:ed:84:81:7b:e2:b2:7d:8a:39:3c:56:7f:16:
e7:77:a8:1a:f1:78:df:47:8c:e4:e8:f9:ef:3a:e2:
66:dd:c5:bf:52:f3:d4:b4:96:f2:b2:40:ff:8b:8f:
8c:c5:72:50:49:07:f4:19:9b:c5:a3:50:02:6f:b9:
39:b4:47:63:c3:97:9a:83:74:1c:09:39:63:d8:e5:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:B5:58:71:CD:B5:67:10:53:56:3C:ED:3F:2F:20:4A:89:0C:3B
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38312e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:98:62:5b:4c:ba:7c:33:42:7f:d6:6a:6d:55:4d:85:91:50:
9c:7d:cc:c4:7d:7d:9c:c6:b6:dc:a7:e2:d0:ea:fd:07:48:1e:
ec:ed:c4:d2:d8:33:12:fd:c5:5b:8f:c4:a9:f9:fe:8f:b4:7c:
e5:8a:eb:87:90:25:db:d4:c6:5c:a2:eb:d6:e2:57:34:15:78:
13:da:70:99:06:f5:cc:b7:5d:38:83:1c:aa:ea:de:0a:05:bd:
41:86:ba:12:8d:e8:41:d9:fe:09:a7:a3:f0:33:7f:94:3a:e2:
f2:38:89:14:19:77:23:63:ba:41:38:7a:5b:8b:6e:00:00:1c:
f3:e9:e1:3d:cb:06:02:e0:cf:00:d7:86:13:db:2e:83:5e:1a:
23:4f:74:c7:85:6e:e9:c5:97:19:42:bc:a1:31:68:5e:1e:ff:
cd:33:c8:e8:8e:bd:46:c6:71:de:6c:c4:8f:ba:5a:fd:c5:52:
37:9d:46:a8:06:58:b6:26:1e:dd:62:00:fc:a6:91:e0:0e:0a:
f4:e7:ec:c6:01:09:ed:d3:ec:92:d3:23:00:af:3e:fd:48:98:
23:09:5e:89:7b:b2:99:a5:8f:56:cd:95:2d:ac:34:be:45:17:
52:44:d7:d8:92:26:e7:6d:20:6d:2f:47:aa:1b:78:fa:e8:5f:
05:a0:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net