Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234332e302f32342d3234203d3e203234323033.roa
File: 3230322e3135322e3234332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: Sm/vmZtNve0Qrg/5hnrT0gd201IaQHPz+geOYDO13iM=
Subject key identifier: B1:AB:21:03:6E:99:CF:1E:A1:BF:24:45:35:0E:6B:A1:61:84:32:BE
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7577CD344CA41F546BF20E7A3713A0B09904EEB7
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234332e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 06:00:01 +0000
ROA not before: Wed 20 Apr 2022 05:55:01 +0000
ROA not after: Wed 19 Apr 2023 06:00:01 +0000
asID: 24203
IP address blocks: 202.152.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:77:cd:34:4c:a4:1f:54:6b:f2:0e:7a:37:13:a0:b0:99:04:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 20 05:55:01 2022 GMT
Not After : Apr 19 06:00:01 2023 GMT
Subject: CN=B1AB21036E99CF1EA1BF2445350E6BA1618432BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:85:31:1b:d1:eb:a1:c6:82:ec:e1:92:a1:
90:70:cc:f0:63:ed:3d:0a:26:d3:10:44:e6:f5:44:
b2:65:90:75:08:7a:a7:38:6c:8d:45:62:9c:9c:04:
8f:7f:27:fb:8d:9e:39:3f:9d:d1:07:4b:19:55:c3:
63:15:87:1a:8b:9e:5a:54:90:63:bd:b5:2d:15:75:
2b:a6:03:cd:a6:37:8b:af:05:9a:7b:50:07:ca:02:
7b:78:b0:ed:22:fc:10:49:36:62:a8:02:ce:4e:fa:
d1:62:d1:07:db:fd:1c:6b:23:81:4c:d7:17:23:3b:
b8:08:03:c1:73:92:2f:9a:79:9c:c9:7a:57:3e:f0:
87:55:f1:44:ee:61:07:45:85:07:97:da:0d:b4:26:
28:21:8c:6e:f3:3a:f6:c7:a2:50:48:2d:53:7a:5b:
7d:58:3f:83:39:85:b5:78:20:b2:4b:9e:21:c6:53:
3b:25:92:8f:d1:3f:d8:d8:7a:4c:a5:a5:4e:61:27:
bc:1e:d7:ba:31:4c:e7:cd:27:d6:7a:76:8f:aa:f7:
c8:3e:0d:0e:c3:b9:e5:75:bb:26:b9:8b:a1:04:4b:
6b:a9:3e:4e:16:09:14:d1:30:b5:7c:56:f0:3d:a5:
f9:bf:4b:2b:f3:a1:a4:09:19:41:7f:c1:99:da:69:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:21:03:6E:99:CF:1E:A1:BF:24:45:35:0E:6B:A1:61:84:32:BE
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:66:00:33:1c:0b:f7:88:c5:8f:e3:d5:eb:b9:9c:28:86:e3:
f9:0e:fb:f0:e9:06:d7:b7:e7:c1:fe:8c:d4:49:de:ad:0e:80:
a3:4c:da:6a:1f:1a:ca:a3:57:39:0d:c0:52:e2:68:ec:15:b4:
5e:7f:f0:b9:75:d7:55:86:3a:66:9e:6e:e9:e4:2f:6d:c7:ad:
dc:28:2c:85:b6:63:83:ac:dd:f8:3e:12:44:d4:fb:d4:c0:02:
d6:ef:c0:2b:82:bc:03:89:71:09:d0:88:02:0f:1b:07:98:6e:
fa:d2:74:22:95:b3:eb:25:c0:3c:53:ea:b4:68:92:23:0f:79:
2d:f2:16:61:b5:7b:79:ff:ad:75:f1:97:6e:5f:09:31:41:6b:
a7:d4:19:1d:f7:da:b9:7d:94:ad:cb:e2:c3:74:24:d3:c5:68:
70:9b:ab:2b:12:2f:7f:7f:d0:c1:dd:c8:63:99:6a:fc:15:22:
3a:e5:e8:a2:9e:cc:05:cc:cd:58:8b:ec:f2:2d:16:cf:37:29:
65:37:00:4f:1e:0d:6f:b0:d6:6b:2f:a3:1d:d1:3f:72:41:2c:
14:ce:2c:b1:86:0a:2d:8c:81:3a:62:38:20:04:d3:b5:f0:c1:
b1:5f:85:d0:ec:b9:bf:54:40:01:79:b5:03:a5:8e:ef:f0:e3:
c4:c5:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net