Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3232342e302f32342d3234203d3e203137383835.roa
File: 3230322e3135322e3232342e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: OhoRMbUnWYbB3B2IE/N3LjHpXezzzf5iro7E4Gu6zcs=
Subject key identifier: 57:1F:A2:E7:5D:A0:52:A8:C2:95:8D:E3:B9:C0:8B:2D:1C:D4:56:6A
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 307939F9E8ECBAF1BE315907AE2427BA2DCD9F97
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3232342e302f32342d3234203d3e203137383835.roa
Signing time: Wed 20 Apr 2022 06:00:01 +0000
ROA not before: Wed 20 Apr 2022 05:55:01 +0000
ROA not after: Wed 19 Apr 2023 06:00:01 +0000
asID: 17885
IP address blocks: 202.152.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:79:39:f9:e8:ec:ba:f1:be:31:59:07:ae:24:27:ba:2d:cd:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 20 05:55:01 2022 GMT
Not After : Apr 19 06:00:01 2023 GMT
Subject: CN=571FA2E75DA052A8C2958DE3B9C08B2D1CD4566A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:e9:68:9e:7a:96:26:c4:b3:d8:1c:96:c5:
8b:e1:02:00:a1:c3:30:80:50:23:12:57:9d:ea:a1:
aa:84:cd:8f:94:91:0c:e0:c9:3d:a6:cf:b7:d3:a3:
8e:97:80:48:85:e5:69:90:8d:78:21:71:39:53:54:
19:f2:36:2e:d3:e6:19:51:01:26:e4:1a:f6:cf:f7:
0b:f6:4b:e3:be:cb:bd:73:1e:a6:bd:0d:de:55:66:
e0:f8:b6:10:1a:61:5f:b4:01:78:26:34:89:39:82:
4b:8c:a7:5a:a9:1b:1c:60:75:59:10:2a:5a:ae:93:
98:42:96:fe:d6:cf:22:0c:d2:06:57:8e:93:03:7a:
57:f6:48:0a:4c:36:70:fc:9d:87:20:7a:3b:3d:05:
f2:d4:94:72:46:dd:40:09:5f:b3:cc:9b:32:a4:3e:
c6:00:ac:55:55:5a:e0:d3:30:f8:28:a5:da:29:74:
fd:f5:c5:2a:4c:ae:81:ae:62:21:cd:ea:0f:54:3e:
d2:6f:fa:2b:b9:1e:3c:3e:fa:ff:e0:aa:b6:a7:d1:
4c:f2:d5:5a:54:c0:9e:4a:f2:ad:4f:12:81:d2:79:
28:53:c2:ec:79:b3:3b:6f:62:d4:97:4c:cd:8f:37:
f4:f6:5c:6d:ef:1b:7c:84:31:01:44:9a:10:1d:37:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:A2:E7:5D:A0:52:A8:C2:95:8D:E3:B9:C0:8B:2D:1C:D4:56:6A
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3232342e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1b:7a:5f:bf:73:c3:5b:d9:ba:19:dd:96:97:04:82:23:05:
6a:e8:ab:95:2b:31:f9:f5:74:6e:fc:99:6a:50:cc:df:43:24:
27:02:0e:c5:73:fb:85:51:4f:de:ae:98:2b:cc:4d:94:cf:1a:
e0:3f:28:41:a2:07:13:1d:57:0a:c2:c3:68:48:fe:d9:0d:7e:
68:90:87:87:51:26:ec:de:7a:b1:c6:99:20:88:3c:b1:0c:33:
06:7a:1d:27:1c:fd:04:9b:9d:04:09:bb:c7:7a:e2:8d:f2:df:
5f:97:21:27:e7:1e:08:28:f0:a9:50:f3:de:3b:2b:3e:67:01:
55:d5:d0:09:b1:fd:af:40:e5:30:48:80:0b:f6:55:0c:f8:9d:
e9:3a:24:fa:e2:74:d0:0c:72:9e:ca:79:4a:2d:a1:21:ef:fd:
c7:8b:7f:ac:a9:bd:db:d1:4b:da:6a:4e:7c:d0:14:1b:05:30:
30:db:51:b4:d7:63:6e:99:a6:77:47:e6:d8:42:8b:6a:68:47:
fb:1d:c4:0a:6c:72:ca:35:9f:80:7b:e0:1c:3e:5e:e5:bd:0b:
0a:64:61:7f:48:6e:70:a0:39:5b:2f:ef:24:ca:1b:ec:e4:d1:
9d:2f:0f:7b:d4:e5:bd:6d:dd:cd:e4:9f:02:21:87:df:41:8b:
8f:74:85:d7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMHk5+ejsuvG+MVkHriQnui3Nn5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MjAwNTU1MDFaFw0yMzA0MTkwNjAwMDFaMDMxMTAvBgNV
BAMTKDU3MUZBMkU3NURBMDUyQThDMjk1OERFM0I5QzA4QjJEMUNENDU2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywOlonnqWJsSz2ByWxYvhAgCh
wzCAUCMSV53qoaqEzY+UkQzgyT2mz7fTo46XgEiF5WmQjXghcTlTVBnyNi7T5hlR
ASbkGvbP9wv2S+O+y71zHqa9Dd5VZuD4thAaYV+0AXgmNIk5gkuMp1qpGxxgdVkQ
Klquk5hClv7WzyIM0gZXjpMDelf2SApMNnD8nYcgejs9BfLUlHJG3UAJX7PMmzKk
PsYArFVVWuDTMPgopdopdP31xSpMroGuYiHN6g9UPtJv+iu5Hjw++v/gqran0Uzy
1VpUwJ5K8q1PEoHSeShTwux5sztvYtSXTM2PN/T2XG3vG3yEMQFEmhAdN6kLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVx+i512gUqjClY3jucCLLRzUVmowHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMyMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjgMA0GCSqG
SIb3DQEBCwUAA4IBAQChG3pfv3PDW9m6Gd2WlwSCIwVq6KuVKzH59XRu/JlqUMzf
QyQnAg7Fc/uFUU/erpgrzE2UzxrgPyhBogcTHVcKwsNoSP7ZDX5okIeHUSbs3nqx
xpkgiDyxDDMGeh0nHP0Em50ECbvHeuKN8t9flyEn5x4IKPCpUPPeOys+ZwFV1dAJ
sf2vQOUwSIAL9lUM+J3pOiT64nTQDHKeynlKLaEh7/3Hi3+sqb3b0Uvaak580BQb
BTAw21G012NumaZ3R+bYQotqaEf7HcQKbHLKNZ+Ae+AcPl7lvQsKZGF/SG5woDlb
L+8kyhvs5NGdLw971OW9bd3N5J8CIYffQYuPdIXX
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net