Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131372e302f32342d3234203d3e203234323033.roa
File: 3230332e37382e3131372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: L2wrJ4YLYQcJ4A46tVSJOsp+qDtDoeow5uS8JOK1m/o=
Subject key identifier: 70:79:40:85:5D:78:9C:8E:C1:DA:19:5C:7A:61:C7:C2:6F:40:5C:1E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0669DB4672EC8DF786263AD680630CB5771B1145
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131372e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:00 +0000
ROA not before: Thu 07 Apr 2022 07:55:00 +0000
ROA not after: Thu 06 Apr 2023 08:00:00 +0000
asID: 24203
IP address blocks: 203.78.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:69:db:46:72:ec:8d:f7:86:26:3a:d6:80:63:0c:b5:77:1b:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:00 2022 GMT
Not After : Apr 6 08:00:00 2023 GMT
Subject: CN=707940855D789C8EC1DA195C7A61C7C26F405C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:98:e7:b1:27:fb:c5:e5:91:f7:13:90:2d:
a6:60:f2:fa:4d:8b:b0:46:7c:0f:b3:ef:c1:a4:30:
eb:67:73:92:71:e1:ad:6a:8e:f6:96:77:95:68:15:
26:e1:ea:5c:c7:b0:d6:0d:cd:32:26:76:74:57:02:
b6:58:4c:a8:2e:55:93:d4:71:54:f7:08:0f:95:fd:
4a:ff:d8:be:d2:27:e5:8b:c6:a8:71:84:76:f2:f6:
ff:64:90:d3:4f:97:0b:ad:73:28:82:ff:d8:cf:e6:
68:9e:cb:a6:8e:03:51:35:2d:ac:77:7f:23:b0:8d:
24:5a:73:ac:08:c3:ea:ad:e7:80:1b:18:0b:27:cf:
58:4d:fe:75:4c:01:4a:ec:74:34:b1:fa:05:73:80:
6f:73:ec:63:4f:18:48:d2:26:c3:5f:d2:2c:12:ff:
51:35:a3:61:10:49:29:9e:2a:8a:da:58:f9:35:d1:
f2:2b:cf:59:a1:fe:d9:84:c3:d3:8b:29:18:04:42:
bd:9c:60:4b:19:31:73:9f:d3:99:ad:77:f5:17:98:
33:38:50:55:a4:fa:53:dd:53:0d:86:e7:d7:aa:5b:
01:a6:83:21:a3:66:cf:20:74:5f:d2:44:aa:4a:24:
a2:5d:82:ad:16:8b:f3:28:57:74:64:cd:25:dc:cf:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:79:40:85:5D:78:9C:8E:C1:DA:19:5C:7A:61:C7:C2:6F:40:5C:1E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.78.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c2:76:51:3b:21:19:7c:d8:7e:fd:b5:c7:e6:d3:42:78:c3:
5a:15:d3:fd:ce:b6:97:0f:09:94:90:96:8b:47:49:31:ef:14:
02:25:4a:93:ba:ec:55:bb:eb:90:9c:94:ae:5a:53:aa:61:e1:
9c:47:dc:36:39:d6:08:f1:6a:ab:f5:1e:23:38:7a:3f:62:75:
f3:61:1d:5f:83:35:93:c9:91:fe:88:68:39:6d:2c:ff:44:c5:
46:63:6f:6d:66:c6:b9:40:fc:8b:f4:4d:a0:11:c9:fd:67:08:
63:f9:e7:31:e2:95:9f:95:3d:d4:bc:ce:18:c0:d1:30:65:b1:
93:90:07:c3:ba:76:be:50:2c:16:63:7b:28:e7:91:2e:5f:fd:
92:04:ae:7f:df:de:b8:6d:65:5d:43:3f:74:0c:8b:0f:3c:16:
94:26:3c:c3:0f:8a:98:b5:02:e4:63:4c:af:69:e7:91:fa:3c:
0e:cc:db:ee:64:60:eb:f9:4e:3c:12:41:ce:88:62:7f:58:17:
40:6c:fd:07:92:86:74:ec:3c:8d:15:c0:c1:d6:99:06:f2:6a:
8d:99:a2:be:ee:68:53:fb:e1:2e:a6:95:b1:d8:f5:07:97:30:
9b:d6:c5:9b:f4:a5:be:82:52:66:44:d1:e7:f1:d3:9f:13:ca:
34:62:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net