Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132342e302f32342d3234203d3e203234323033.roa
File: 3230332e37382e3132342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: Gy9BbC5+8jKk+Ge4zkuLZHWHp6VTCSrKSjHAAxTNBOw=
Subject key identifier: DE:9F:3C:2C:C4:61:DC:4C:5E:7C:CB:31:89:E9:3A:C3:6D:9E:59:E3
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6B707187D6A1012E103E1621DD0DABCA527790E0
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132342e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:02 +0000
ROA not before: Thu 07 Apr 2022 07:55:02 +0000
ROA not after: Thu 06 Apr 2023 08:00:02 +0000
asID: 24203
IP address blocks: 203.78.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:70:71:87:d6:a1:01:2e:10:3e:16:21:dd:0d:ab:ca:52:77:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:02 2022 GMT
Not After : Apr 6 08:00:02 2023 GMT
Subject: CN=DE9F3C2CC461DC4C5E7CCB3189E93AC36D9E59E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:24:c5:36:c3:42:36:0c:fe:2f:0b:e9:f6:
e1:c0:22:f8:ce:d4:54:8a:fc:e8:27:51:51:96:d9:
ba:71:c5:e1:ab:8a:41:fe:fe:7a:de:3a:51:a2:5c:
79:da:c6:73:1a:76:cd:44:49:7a:11:1d:f1:3e:78:
03:15:75:4f:5b:59:5a:a7:10:3a:fc:7d:d3:5f:bd:
d5:88:32:7a:f1:fb:8e:ee:3f:b2:c3:6e:68:41:86:
34:9e:bd:b4:5a:ae:fa:6a:94:21:5e:b5:f2:e4:37:
41:84:1c:64:fa:1b:ef:23:a4:cd:62:43:34:2a:ee:
91:dc:0e:7e:40:7b:94:76:48:44:00:64:dc:c8:da:
d4:32:16:59:5f:51:21:06:11:6f:23:67:67:41:c0:
f0:91:9e:4b:98:67:9f:17:6a:3f:ae:97:c1:66:86:
3c:1b:f4:eb:19:ef:dc:d4:08:b9:84:de:f4:c8:7d:
1e:1f:be:e9:48:b8:93:ef:0f:5b:2a:e9:cb:48:15:
12:fc:cd:bf:65:78:25:b4:88:dd:72:fd:55:3e:e1:
7f:81:ca:86:c8:fa:5f:eb:d3:58:82:5e:12:48:25:
25:91:c8:e0:7b:84:b6:b4:65:22:67:00:08:df:18:
be:0d:69:66:94:ee:e6:4e:fd:05:4a:7e:8e:ff:0e:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:3C:2C:C4:61:DC:4C:5E:7C:CB:31:89:E9:3A:C3:6D:9E:59:E3
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.78.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d8:85:96:cf:4d:b5:05:77:02:24:26:1b:59:06:0b:54:49:
d0:58:b9:38:34:67:3a:a4:74:8b:5c:94:41:d7:17:71:ca:21:
63:7b:52:77:8c:a4:7b:40:b0:b6:a3:7c:0a:54:78:f2:b8:9e:
31:b2:67:9a:4b:6c:a8:14:c9:26:22:70:16:4f:1e:b3:78:e4:
32:2f:9e:22:80:47:a1:2b:2c:16:83:97:04:05:a4:6e:b6:d9:
fc:3a:6c:f1:05:ae:3e:a1:19:7b:f2:21:dd:3f:e4:95:b2:b8:
97:7d:a6:96:e1:04:3c:ac:a1:b2:a6:df:1c:bc:95:dd:45:1e:
78:fc:d8:7d:a1:73:de:8a:13:7f:0d:5b:08:1a:2d:60:30:4e:
ab:d5:61:1d:a6:03:82:5f:80:3c:93:ec:3c:82:7b:0d:1a:41:
77:bf:c7:e6:4f:e4:3b:04:fa:5a:87:dc:ad:25:04:62:42:19:
bd:cb:54:a1:4b:e4:87:4d:5c:e9:a8:5e:0d:b6:02:a8:99:e5:
55:5a:d4:d0:3f:d3:ae:d9:41:eb:00:85:f2:a4:b1:4a:e2:b4:
7c:78:0d:82:c3:e6:78:d6:cd:0a:e9:dc:54:e9:e2:65:14:1c:
fc:8d:c1:ee:8d:c4:e7:60:de:8e:26:7a:17:73:c8:5f:22:75:
62:38:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net