Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234392e302f32342d3234203d3e203137383835.roa
File: 3230322e3135322e3234392e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 2G7qvOTsIStkYDoLIL9h++VRYmZoc7R8i/EY4Mmu0vM=
Subject key identifier: DB:70:7F:9F:71:F8:BA:95:87:34:70:57:F4:DB:0B:14:54:CB:51:1E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 21E02F1F2BF04850287B937195EDDF876D824CE0
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234392e302f32342d3234203d3e203137383835.roa
Signing time: Wed 20 Apr 2022 06:00:00 +0000
ROA not before: Wed 20 Apr 2022 05:55:00 +0000
ROA not after: Wed 19 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 202.152.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e0:2f:1f:2b:f0:48:50:28:7b:93:71:95:ed:df:87:6d:82:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 20 05:55:00 2022 GMT
Not After : Apr 19 06:00:00 2023 GMT
Subject: CN=DB707F9F71F8BA9587347057F4DB0B1454CB511E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:2c:5b:9d:f1:47:37:a7:3d:d0:17:b6:d0:
76:e0:35:9f:fc:df:b2:f2:eb:95:41:3e:8c:95:1d:
65:92:27:35:67:d5:b1:d8:d1:b6:3c:74:51:27:e7:
47:92:3b:a9:51:cc:11:89:68:a8:d6:2e:11:eb:c2:
7a:6c:05:45:4e:6c:9b:66:65:1c:47:4d:16:85:5c:
eb:4c:1a:c6:b5:32:5f:36:0c:73:50:99:66:f1:cb:
67:06:54:1c:ae:3f:6b:bb:7e:2f:12:d9:99:ee:bd:
2b:c3:cc:30:4a:53:e0:8c:b6:1a:82:a0:88:6f:3b:
59:16:6e:31:a9:c8:39:b4:cd:07:53:da:9f:c6:f5:
5f:f8:7e:f2:0d:a1:a6:2d:ef:f5:e0:90:d7:5b:57:
d8:36:08:2b:c6:a4:32:33:36:e0:98:be:0d:80:17:
e2:d1:b6:4a:b1:00:a0:3e:86:e9:02:8c:71:53:f7:
2a:61:c6:04:f8:d3:e1:25:82:e9:24:60:b2:67:b5:
50:3b:ad:0e:3f:8f:53:bd:c3:4f:44:07:fa:92:30:
a2:b1:91:18:25:bc:99:d7:5b:ce:94:86:34:3f:8d:
33:82:cb:cf:e1:f3:ed:85:9d:f7:0e:3e:3d:eb:a9:
44:c3:21:98:b6:ef:4b:17:4d:a7:d8:f1:ef:03:11:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:7F:9F:71:F8:BA:95:87:34:70:57:F4:DB:0B:14:54:CB:51:1E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3234392e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.249.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d9:1f:01:8c:db:51:0c:21:2e:fe:13:fc:5e:78:28:01:72:
44:b1:eb:94:af:85:ba:57:aa:ac:99:9f:80:d5:15:06:4b:03:
22:87:de:23:77:2a:83:ef:6d:d8:83:95:ad:19:a7:87:bb:72:
bd:be:31:cc:97:71:d9:25:cd:82:0e:dc:07:cd:9e:6f:ee:1c:
7a:14:af:8a:a9:7a:a7:0a:e4:ac:b7:3f:1d:91:f8:be:ff:88:
b1:c3:57:65:2f:e2:78:f5:e2:7e:a7:cb:d1:cd:3d:fb:fc:02:
c1:ce:64:1f:fc:e5:b3:22:c7:5d:20:47:f1:ae:bc:c6:5a:14:
38:3a:49:73:6c:11:ae:2c:a2:a3:75:d4:1f:84:a7:70:64:72:
24:50:8b:ed:09:86:e8:4e:01:51:9d:d4:6a:1b:96:2c:b4:7f:
54:b4:db:59:00:ae:c7:28:a1:3e:aa:71:18:bb:30:1d:03:1b:
82:5b:d0:bd:fc:4d:f7:8b:4e:5b:19:8f:1e:28:f3:47:f9:66:
14:80:03:e3:6b:cc:ea:ca:94:79:1d:40:39:4b:17:80:f9:e9:
ca:88:7c:62:d6:91:b6:7d:47:27:73:bd:24:02:b5:59:95:0f:
f3:cf:16:0c:64:46:4a:44:9a:0f:3d:16:b9:c5:8d:51:e0:0e:
75:e0:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net