Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3233332e302f32342d3234203d3e203137383835.roa
File: 3230322e3135322e3233332e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: vCaMVzT6UWXqA21C454zXP5ZuZb0ofkjGNxFfH1ESNA=
Subject key identifier: 0E:41:D6:F2:CD:6A:02:86:59:B1:CB:FC:CD:1A:B8:3A:67:9D:62:5E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 09DFD5AED342EAFC251E631A3EAFA24A0DF490
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3233332e302f32342d3234203d3e203137383835.roa
Signing time: Wed 20 Apr 2022 06:00:00 +0000
ROA not before: Wed 20 Apr 2022 05:55:00 +0000
ROA not after: Wed 19 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 202.152.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:df:d5:ae:d3:42:ea:fc:25:1e:63:1a:3e:af:a2:4a:0d:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 20 05:55:00 2022 GMT
Not After : Apr 19 06:00:00 2023 GMT
Subject: CN=0E41D6F2CD6A028659B1CBFCCD1AB83A679D625E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:be:b3:87:98:80:af:14:51:c0:ec:1e:25:
f4:5e:f9:e5:0f:5e:92:67:cb:f5:8e:be:5e:8a:c6:
27:49:e9:fc:a1:7d:6a:d0:3b:0b:f8:85:25:b3:ce:
c7:6d:42:64:8c:49:2a:0e:22:32:af:04:ec:19:1a:
6c:bb:f5:c1:49:21:ce:a2:b9:ea:b2:a3:49:8f:17:
f0:d6:ec:95:ae:36:a3:eb:ab:58:9d:96:d8:7e:53:
f2:8b:c6:51:65:94:0a:75:d7:8b:67:2a:2c:3b:76:
af:91:47:2c:1f:8f:68:ef:f5:e5:56:94:40:d3:c8:
3c:d4:51:66:d1:16:c0:77:88:12:dc:55:a8:41:03:
be:b3:ea:0f:ce:12:ce:92:1a:27:08:49:3e:4f:89:
d4:76:c7:5b:3d:9f:7a:cf:df:71:f2:e2:af:12:6f:
a4:af:51:9b:a6:e0:e6:34:03:52:f0:df:2d:48:42:
dc:b8:7b:ba:d5:c3:d4:e0:fb:43:67:47:b7:b8:37:
ea:d1:b8:f4:b2:40:15:e0:34:fd:96:e4:16:40:9b:
2e:eb:c7:2f:60:df:b9:20:ed:a2:01:bd:84:a7:d0:
3a:32:ab:17:4d:3c:57:78:b7:cf:de:c4:19:85:19:
8f:12:07:6c:c5:b8:01:12:a1:e5:a1:fb:72:e5:c9:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:D6:F2:CD:6A:02:86:59:B1:CB:FC:CD:1A:B8:3A:67:9D:62:5E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3233332e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8f:21:ea:db:2c:d7:9c:9e:21:4d:d0:9c:6e:a8:09:2d:e8:
43:93:29:9c:d7:25:41:2d:97:d4:4b:82:16:99:75:11:1b:0d:
2f:83:8c:24:80:70:68:29:c0:24:9e:3d:49:9f:e5:2e:73:21:
8c:8b:dd:68:79:78:71:04:8a:2e:83:44:0a:c7:bf:f6:51:86:
c7:e7:49:83:d6:8d:6f:9f:c7:ff:77:a0:af:ea:7f:94:95:1d:
f7:a1:58:5f:00:fc:a3:5f:90:2c:73:4f:85:b9:39:cb:50:d5:
0e:2a:b9:c2:0d:92:32:88:dc:4d:08:27:6f:2e:ea:34:18:80:
96:0a:32:e5:dd:e5:94:e6:37:51:0d:06:9b:f1:3b:81:60:95:
6c:f0:f1:42:5c:c7:a1:c8:44:80:65:1f:f5:02:73:7e:b3:c8:
bc:0f:77:71:b2:dc:ac:e1:46:76:2e:23:6c:6e:c1:86:04:75:
ca:6e:dc:5f:09:f6:af:3a:6e:9f:c5:c5:ef:35:69:87:ef:45:
0f:fc:fd:c7:7c:b6:42:9a:a5:cf:e5:32:1a:59:6e:59:99:f8:
77:b8:ad:3c:94:3e:f9:51:b5:24:ad:cf:3e:09:7e:81:b9:b3:
ee:0e:bd:97:de:bd:f9:c7:67:69:96:ba:e0:45:47:e5:97:16:
6d:e2:3b:49
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgITCd/VrtNC6vwlHmMaPq+iSg30kDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCNDkzQTVDRUJGMDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5
NTY4N0RBMB4XDTIyMDQyMDA1NTUwMFoXDTIzMDQxOTA2MDAwMFowMzExMC8GA1UE
AxMoMEU0MUQ2RjJDRDZBMDI4NjU5QjFDQkZDQ0QxQUI4M0E2NzlENjI1RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFUvrOHmICvFFHA7B4l9F755Q9e
kmfL9Y6+XorGJ0np/KF9atA7C/iFJbPOx21CZIxJKg4iMq8E7BkabLv1wUkhzqK5
6rKjSY8X8Nbsla42o+urWJ2W2H5T8ovGUWWUCnXXi2cqLDt2r5FHLB+PaO/15VaU
QNPIPNRRZtEWwHeIEtxVqEEDvrPqD84SzpIaJwhJPk+J1HbHWz2fes/fcfLirxJv
pK9Rm6bg5jQDUvDfLUhC3Lh7utXD1OD7Q2dHt7g36tG49LJAFeA0/ZbkFkCbLuvH
L2DfuSDtogG9hKfQOjKrF008V3i3z97EGYUZjxIHbMW4ARKh5aH7cuXJHyUCAwEA
AaOCAjQwggIwMB0GA1UdDgQWBBQOQdbyzWoChlmxy/zNGrg6Z51iXjAfBgNVHSME
GDAWgBS0k6XOvwnhC8NdmsIhHa/SCVaH2jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRi
ZGIxZTBhLWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wL0I0OTNBNUNFQkYw
OUUxMEJDMzVEOUFDMjIxMURBRkQyMDk1Njg3REEuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi9CNDkzQTVDRUJGMDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4
N0RBLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzAvMzIzMDMyMmUzMTM1MzIyZTMyMzMzMzJlMzAyZjMy
MzQyZDMyMzQyMDNkM2UyMDMxMzczODM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKmOkwDQYJKoZI
hvcNAQELBQADggEBAG+PIerbLNecniFN0JxuqAkt6EOTKZzXJUEtl9RLghaZdREb
DS+DjCSAcGgpwCSePUmf5S5zIYyL3Wh5eHEEii6DRArHv/ZRhsfnSYPWjW+fx/93
oK/qf5SVHfehWF8A/KNfkCxzT4W5OctQ1Q4qucINkjKI3E0IJ28u6jQYgJYKMuXd
5ZTmN1ENBpvxO4FglWzw8UJcx6HIRIBlH/UCc36zyLwPd3Gy3KzhRnYuI2xuwYYE
dcpu3F8J9q86bp/Fxe81aYfvRQ/8/cd8tkKapc/lMhpZblmZ+He4rTyUPvlRtSSt
zz4JfoG5s+4OvZfevfnHZ2mWuuBFR+WXFm3iO0k=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net