Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3235342e302f32342d3234203d3e203137383835.roa
File: 3230322e3135322e3235342e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: CIhkb5qq4nK6/FfV35NKJc6jvnJh2oB+3LMY1LmtTQE=
Subject key identifier: 3B:7C:61:09:87:59:2A:4E:14:4B:F5:C1:7C:EC:19:86:FB:02:5C:67
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 5AAA863AFB6CD97E3FF943046C1571A2A740CB49
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3235342e302f32342d3234203d3e203137383835.roa
Signing time: Wed 20 Apr 2022 06:00:00 +0000
ROA not before: Wed 20 Apr 2022 05:55:00 +0000
ROA not after: Wed 19 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 202.152.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:aa:86:3a:fb:6c:d9:7e:3f:f9:43:04:6c:15:71:a2:a7:40:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 20 05:55:00 2022 GMT
Not After : Apr 19 06:00:00 2023 GMT
Subject: CN=3B7C610987592A4E144BF5C17CEC1986FB025C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:47:55:be:6b:3c:18:19:cc:25:b8:01:0f:
8f:22:70:d3:e5:9a:87:0b:7c:bf:af:47:44:93:32:
f3:8a:9c:7d:2c:12:f6:b8:dc:d7:1d:67:8c:18:eb:
9e:bb:ba:96:6e:be:4a:13:e2:46:b8:90:a0:6c:3d:
d5:58:db:ea:d5:56:15:c7:e3:ee:1a:2f:9c:44:67:
bd:30:26:d7:bd:da:2d:f8:f9:34:5e:c2:52:9f:e2:
bf:d5:3b:4d:b2:14:6e:f1:5c:c1:31:f6:e7:95:7e:
08:87:2a:e4:3b:81:2e:d2:5a:93:4d:38:f1:ef:d2:
af:69:b2:ec:29:c2:4b:75:27:74:ac:f1:4f:a7:76:
fb:72:81:06:6f:58:2c:29:3b:a9:9b:cf:4f:65:1f:
78:33:4c:16:50:72:37:ed:fc:23:42:8c:84:33:33:
fd:86:82:9f:74:6f:9e:22:3b:25:e9:91:de:97:9b:
fa:11:d6:2c:85:fb:87:9e:43:f1:68:5d:2d:38:49:
f6:48:a1:64:a7:8e:b7:7a:31:4e:8b:dc:b7:f9:47:
ae:b4:d4:d6:be:5c:ef:3f:6e:00:0b:4c:ba:bb:0c:
f4:18:06:f7:32:05:4e:d9:fb:20:d3:a9:8e:a3:c0:
05:62:91:05:ac:50:72:10:5c:84:27:04:9b:a9:d6:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7C:61:09:87:59:2A:4E:14:4B:F5:C1:7C:EC:19:86:FB:02:5C:67
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230322e3135322e3235342e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:85:93:2e:c0:64:1e:82:20:5e:12:80:f4:90:c7:55:0c:25:
1c:7e:40:3c:75:d3:56:83:72:5a:b5:c3:7e:e8:ca:d1:db:0c:
0b:c1:a4:94:26:d5:55:c3:f6:ad:99:a2:34:0b:cb:29:eb:92:
5a:80:f2:37:ea:2b:76:2c:3a:a2:6f:cd:c3:4a:46:3e:53:a6:
5c:c4:12:c4:55:c1:d6:2c:7a:ed:ff:dc:da:72:07:1f:48:53:
12:84:33:41:38:aa:c7:05:a7:30:91:cb:bd:45:50:89:4e:35:
68:73:05:f1:8d:be:f6:d5:92:2b:10:f2:f1:49:10:ed:89:86:
34:26:28:bb:40:04:01:ba:54:45:d6:a1:86:89:b1:15:9b:4a:
00:b8:09:58:36:54:08:c0:36:2f:60:a8:8b:c9:a6:20:6f:87:
e6:f9:e2:04:56:bd:e6:ff:b6:86:97:d3:c2:e5:b2:cc:c1:cf:
0f:db:2a:c7:01:f0:8e:56:89:eb:e8:5b:46:3d:69:51:55:84:
1b:6d:5f:6a:ab:e8:bc:c4:84:aa:ae:fc:13:c9:a0:a2:e1:04:
f5:74:0c:7f:1c:a1:da:5d:b7:0a:0a:e8:d7:db:dd:27:00:95:
e1:b1:90:da:fa:61:15:bc:36:3b:ca:5f:a5:7e:0a:af:1c:92:
5a:49:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net