Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e39342e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e39342e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: qEPICrJ/kNxRyG8TL25YNRQ+5hDrcMLbse+/xYoYcMM=
Subject key identifier: 4B:8C:15:74:4F:51:6E:18:F0:57:6B:DF:5D:72:3B:E7:68:35:9F:6D
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 4EF82BCA1EA8769902FF25C11E598BB914C87445
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e39342e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 08:00:00 +0000
ROA not before: Wed 13 Apr 2022 07:55:00 +0000
ROA not after: Wed 12 Apr 2023 08:00:00 +0000
asID: 17885
IP address blocks: 121.52.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f8:2b:ca:1e:a8:76:99:02:ff:25:c1:1e:59:8b:b9:14:c8:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 07:55:00 2022 GMT
Not After : Apr 12 08:00:00 2023 GMT
Subject: CN=4B8C15744F516E18F0576BDF5D723BE768359F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:9c:36:1f:a7:f6:6b:ab:c8:4b:7b:3e:74:
ea:e4:ab:89:37:08:57:2a:77:ea:8e:6d:16:6c:69:
03:77:ee:86:d6:6a:ca:e9:b8:47:7a:ca:d7:08:a8:
29:72:d7:8c:fa:fe:cf:3b:04:b7:b8:7c:0b:27:76:
6d:f0:b4:22:cf:3b:6c:51:ad:61:50:1e:b1:2b:97:
5e:d3:53:f2:ef:91:3b:58:89:56:5d:8a:83:f3:2d:
aa:b3:a4:a7:58:69:64:24:02:9b:f9:20:2d:3c:50:
c3:61:ba:23:b1:58:9b:f7:3e:9e:c8:16:b5:1a:d0:
81:4a:21:61:e4:0f:c4:62:78:1b:f9:81:54:f5:69:
c2:51:e7:51:b4:ba:95:03:53:2f:4e:c6:66:6e:99:
22:c9:60:ec:eb:2b:d2:36:47:0c:66:b8:21:51:03:
42:76:2b:e8:fe:32:4d:43:fc:92:72:07:e1:43:fd:
2b:7e:d9:8c:64:97:aa:81:e3:32:97:63:41:55:8e:
d2:61:dc:35:98:91:5e:e6:5e:af:ce:87:c1:6a:6b:
28:e0:1c:5b:e7:2b:d8:77:3a:ce:3f:5d:ec:aa:0d:
c7:97:3a:1f:9c:c2:19:8a:47:5c:7e:f6:81:33:be:
0c:b7:9c:ae:47:26:65:fd:07:81:57:e3:7b:3e:3a:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:15:74:4F:51:6E:18:F0:57:6B:DF:5D:72:3B:E7:68:35:9F:6D
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e39342e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.94.0/24
Signature Algorithm: sha256WithRSAEncryption
52:71:91:20:ed:ad:bd:74:39:f2:d2:25:9e:46:dd:f4:53:e1:
9f:ec:9a:86:29:cd:72:b8:2e:f0:5c:d8:7c:c2:10:be:f0:27:
f3:dd:6f:0a:04:a8:18:1e:5e:8f:f1:99:7f:23:4d:94:70:8c:
86:de:f5:f0:c6:8c:52:40:f6:72:f7:02:20:2e:cc:5c:f4:dc:
5a:8c:75:f4:03:80:cf:b7:15:97:2a:05:a9:dc:a9:6d:c3:4f:
60:92:78:0b:9f:60:f8:d9:20:50:32:cc:9a:66:af:e0:6a:5e:
ed:a9:c9:aa:dd:02:e5:9d:5f:3f:c5:c8:c0:04:cf:94:b4:e3:
fd:c0:a7:a2:88:f2:db:f7:95:bd:14:ec:b0:0e:cf:20:23:78:
01:78:77:87:de:27:aa:31:25:ef:84:38:0d:0d:94:06:37:93:
0f:ec:b1:ed:c9:ca:c0:ba:c5:3b:04:6b:b3:81:0b:79:ae:83:
ce:74:f2:b3:93:de:37:bd:6e:54:c2:64:dc:09:f1:ab:93:89:
d7:87:69:bc:ec:8c:c0:2f:60:3b:02:6f:c6:94:09:bd:f1:7a:
ce:b4:6e:47:98:fe:af:cc:3c:00:ea:00:1f:19:90:4f:9a:75:
bc:35:66:38:df:25:35:5b:d7:a6:e2:cb:09:ee:c1:e1:d3:b6:
f8:ac:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net