Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131382e302f32342d3234203d3e203234323033.roa
File: 3230332e37382e3131382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: gpeV11XizZIz0Hz0CIGrpqRLnzzvgqeG19cCss311as=
Subject key identifier: 66:33:FC:46:CB:4D:53:42:01:6C:62:B1:1C:CA:FB:CE:EE:49:41:23
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 553CE2FC0D4438F80DA9C55E54D56DEA8F6C4F6C
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131382e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:01 +0000
ROA not before: Thu 07 Apr 2022 07:55:01 +0000
ROA not after: Thu 06 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 203.78.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3c:e2:fc:0d:44:38:f8:0d:a9:c5:5e:54:d5:6d:ea:8f:6c:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:01 2022 GMT
Not After : Apr 6 08:00:01 2023 GMT
Subject: CN=6633FC46CB4D5342016C62B11CCAFBCEEE494123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:3c:96:2c:dd:74:82:c9:3d:96:55:0d:24:
d0:ae:7a:bb:9d:30:99:c5:5d:09:29:24:6d:7e:0c:
73:30:12:ed:3c:c8:f7:2e:f6:65:cb:db:40:94:5a:
e7:14:54:9b:38:15:4a:ef:ed:d5:73:85:e8:43:38:
fc:41:d1:b6:5c:cb:3d:24:3c:f2:85:ed:4b:d6:df:
0a:20:11:5c:cc:15:7a:e5:e9:59:de:81:3d:89:3d:
a2:74:0a:7c:c1:08:9c:99:55:5c:ad:88:de:a1:41:
38:ae:98:65:9e:c5:19:94:31:d3:11:05:a4:51:39:
9c:fa:2e:17:f5:ec:25:3a:84:b3:a5:8d:fb:4b:16:
33:b8:3e:a0:32:6e:f4:09:59:c2:bc:60:5f:9a:e1:
3d:92:86:33:ad:01:b1:5c:59:5c:76:1a:81:a8:75:
23:51:8d:84:da:c9:98:0a:26:94:0a:8d:56:25:d3:
9b:3a:86:36:a4:37:45:40:63:1b:38:f9:93:52:1b:
87:07:80:94:0b:b2:78:a0:62:0e:12:87:78:8a:65:
e6:78:68:ac:b4:73:7f:61:07:4f:a1:27:c6:59:23:
8a:5b:bc:4a:aa:b7:a2:c2:ed:3c:c5:a3:97:d4:de:
d1:4b:71:af:ba:42:15:71:d0:72:94:0a:bc:56:cd:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:FC:46:CB:4D:53:42:01:6C:62:B1:1C:CA:FB:CE:EE:49:41:23
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3131382e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.78.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:94:f9:15:60:a9:3a:72:54:c4:f5:8e:74:94:4d:11:86:0b:
16:cd:11:20:50:d7:35:69:4b:b3:16:95:e8:50:3b:79:5f:a4:
4a:a9:2f:c7:9c:35:7e:12:39:0d:60:84:d6:bc:3a:8b:27:ad:
cb:ac:99:31:a3:dd:30:c8:55:81:fa:2c:e5:60:1b:7a:41:b2:
f3:4d:ad:a2:e3:90:1b:b6:ea:8a:d1:33:27:30:49:8a:1c:fb:
58:e6:43:4d:35:df:c2:20:c6:13:2f:d6:e0:d7:97:1e:f0:02:
b6:e2:2f:2b:3c:0a:4d:bf:0c:12:de:21:ea:ec:67:98:d6:85:
0e:24:1d:08:5b:d7:a6:e5:93:5e:b5:a7:a5:10:72:32:53:51:
5f:e1:2a:c9:64:38:6d:43:e7:f5:af:18:43:fd:c8:4b:0d:13:
aa:d0:58:78:00:93:14:3f:4d:f6:7b:93:b8:e0:84:cf:52:60:
27:36:4d:45:6b:76:7b:7f:f2:ef:b9:82:6f:b0:a2:00:b5:26:
1d:1e:d0:4f:3a:19:f1:9f:a9:e1:70:bb:25:a4:64:9f:73:a9:
e8:30:99:c8:cf:a2:ec:dc:c0:d7:4f:7c:6c:2b:cd:bd:3f:0e:
91:70:27:c5:4c:d4:b4:85:9a:f7:27:27:31:5f:d2:59:90:f1:
21:40:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net