Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132332e302f32342d3234203d3e203234323033.roa
File: 3230332e37382e3132332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: Ss8YOFW1E2ZO+eJBUY4hKKHakczb5LZzUPJQPj5UK7w=
Subject key identifier: B7:31:50:47:EF:E6:D8:E7:44:63:05:6A:44:8C:C0:D8:BA:E6:3F:EE
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1857E945805273D69C8238D33C4E3DC66C89648D
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132332e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:01 +0000
ROA not before: Thu 07 Apr 2022 07:55:01 +0000
ROA not after: Thu 06 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 203.78.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:57:e9:45:80:52:73:d6:9c:82:38:d3:3c:4e:3d:c6:6c:89:64:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:01 2022 GMT
Not After : Apr 6 08:00:01 2023 GMT
Subject: CN=B7315047EFE6D8E74463056A448CC0D8BAE63FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:11:d5:02:65:bb:13:7e:4a:a9:25:df:ad:
f3:d7:54:91:94:25:e1:5d:ad:2f:70:cf:9d:2b:9b:
39:f7:1e:16:25:88:a8:01:61:01:c3:ee:00:9f:c3:
2c:0c:97:69:1f:3a:f4:01:76:1c:bd:39:e5:7b:47:
ae:94:a9:f2:e7:98:ec:e4:a8:84:28:ad:bd:81:24:
6d:d6:73:53:b5:af:07:65:85:65:a7:c2:df:41:2f:
00:9c:b2:c2:5a:54:49:9a:ae:0d:78:45:38:85:11:
2b:02:9c:a6:85:8d:ef:0e:6b:7f:d7:d5:34:18:bf:
15:c6:d7:dc:88:5d:b8:90:cb:f2:eb:9d:71:58:5f:
1c:c2:96:c4:a1:a5:22:75:51:30:9b:ba:57:4c:9c:
fe:a1:41:2d:a1:30:a7:f1:33:39:6b:89:82:b3:70:
e3:e8:c6:b0:57:0b:c0:dd:e5:4f:dc:5e:ab:83:5c:
72:ff:17:68:74:39:95:1b:3f:df:43:a3:f3:ae:27:
0d:8d:45:bb:09:f3:58:88:8f:01:87:e5:1d:81:e5:
db:3e:56:2d:11:81:e5:c1:a8:dd:1e:4e:4c:d4:48:
21:12:8a:d7:1a:19:f6:84:af:fa:b1:38:0c:b7:68:
7b:26:cb:7e:16:03:81:c3:28:87:89:da:a5:81:b9:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:50:47:EF:E6:D8:E7:44:63:05:6A:44:8C:C0:D8:BA:E6:3F:EE
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:87:e2:2f:4b:e5:93:f9:27:5f:a5:d3:0f:50:68:51:22:37:
bf:20:51:c8:16:d5:df:ae:4b:c8:11:ed:7a:69:39:8c:31:67:
0e:92:2f:cb:ce:11:d2:45:e8:e5:06:e4:d6:62:1a:52:e6:ff:
8a:8f:4e:bb:2c:55:57:fa:95:b5:f5:a7:d6:c2:70:6c:ef:eb:
a6:0b:40:b7:af:0f:8c:10:7b:e4:d1:0d:ab:d5:ff:86:6a:7e:
b3:3f:70:f9:cc:10:dc:44:b4:1e:db:df:e7:dd:0f:9c:6b:27:
50:55:5b:0d:1f:70:26:95:a5:68:76:b2:ec:1e:89:0a:34:9b:
77:b2:29:b2:96:80:eb:53:2b:49:dc:19:6d:13:00:68:e5:dc:
b9:33:98:ce:9f:58:6e:2f:7f:66:7a:58:79:68:88:f0:d8:4f:
ae:af:81:19:4b:34:6f:8d:04:83:02:22:09:5f:b6:b7:9f:cd:
02:9a:14:5e:00:e2:09:25:f5:74:f4:75:d5:cd:ec:04:80:b3:
46:46:a7:4f:5b:ad:23:5c:5d:7f:18:ea:d3:51:9c:11:9d:d2:
2f:4d:d8:9c:3f:f7:72:1a:d9:0e:10:cd:24:14:7b:1b:a3:be:
87:4b:34:50:dc:07:44:80:ff:25:cb:8a:58:ca:8a:2a:d5:fa:
bb:d3:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net