Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137362e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e3137362e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: qg9Gd3rGmeYAzBYEX6+yVzj8oeZ91eVyX6s415N+ddk=
Subject key identifier: 22:14:C3:6C:46:0B:13:0E:9C:34:F1:87:35:D4:FD:E8:98:AE:24:EE
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0384F441E75DEA456C9D62AADC3A99DF87FDAFD4
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137362e302f32342d3234203d3e203137383835.roa
Signing time: Thu 07 Apr 2022 17:00:02 +0000
ROA not before: Thu 07 Apr 2022 16:55:02 +0000
ROA not after: Thu 06 Apr 2023 17:00:02 +0000
asID: 17885
IP address blocks: 112.215.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:84:f4:41:e7:5d:ea:45:6c:9d:62:aa:dc:3a:99:df:87:fd:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 16:55:02 2022 GMT
Not After : Apr 6 17:00:02 2023 GMT
Subject: CN=2214C36C460B130E9C34F18735D4FDE898AE24EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:4f:93:f0:cb:cb:35:66:bb:e7:a0:92:ae:
23:e2:2b:55:b0:0c:b8:c0:90:ef:de:46:e7:88:cc:
a7:21:67:5c:b2:2c:20:ec:20:5b:74:8b:d2:df:6f:
13:64:99:1e:21:1d:62:c1:37:ad:a5:72:ba:d0:62:
03:e2:13:f7:9a:e2:d9:ae:0f:8d:cc:51:91:e7:13:
c0:5f:84:d3:b8:6a:89:0f:cd:c0:5e:46:7c:86:5c:
04:22:49:f2:f7:5b:76:5f:2f:28:f4:28:77:c0:6e:
89:36:04:ba:c6:3b:a8:4b:ae:03:29:a3:c8:3d:72:
fc:37:3c:a6:d0:7e:e2:f4:b8:09:46:be:35:8c:97:
04:4e:b9:53:13:61:71:99:65:08:e6:07:46:dc:bb:
ae:1f:43:a2:ea:7e:e0:54:2b:6b:47:de:17:c7:09:
49:10:cf:62:9a:ab:1a:43:bc:b3:22:76:5e:8d:ce:
a7:e3:26:17:4a:b1:8e:a8:4b:4e:35:1a:5c:32:f2:
ce:2a:7e:90:06:bd:f9:ba:84:a9:22:bf:d7:38:93:
4b:bb:6e:11:32:b3:85:3c:0b:6d:bd:3f:db:21:0f:
0c:96:34:dd:62:f8:64:e0:f3:7a:c1:0a:84:20:c8:
ee:8b:0e:60:f3:74:57:f6:ec:f9:28:83:e0:64:b2:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:C3:6C:46:0B:13:0E:9C:34:F1:87:35:D4:FD:E8:98:AE:24:EE
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3137362e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:db:3c:42:ab:e6:3d:1b:bb:9b:12:fd:62:2c:39:de:b5:bd:
c1:a9:74:e6:3b:24:1b:6a:79:51:ad:49:29:00:cc:c9:97:4a:
da:af:1a:59:53:34:f0:6c:c2:57:d6:a2:6b:25:32:bc:f1:c8:
ae:13:fa:9f:9c:30:9f:69:ea:98:25:54:93:3e:be:bf:b1:dc:
b6:47:53:d7:98:49:df:94:e2:05:51:3e:5b:8e:4d:18:54:8f:
ab:d3:b2:96:99:5c:4d:33:f4:ff:0f:02:f0:7a:38:a3:94:44:
9a:88:cb:8f:3f:4e:e4:96:87:41:0b:6d:8a:89:39:da:47:d4:
43:7a:9d:90:f6:b8:3f:65:cd:28:0c:11:e4:ea:11:ab:48:1c:
b8:70:05:8a:e1:7c:7d:0a:0f:3a:7d:2a:70:ec:e6:43:a8:0f:
9a:cb:40:c2:b0:a7:1f:db:c3:b2:09:cf:4b:59:12:2b:3d:1c:
9d:03:e2:2c:6f:15:80:6e:53:fa:06:1a:33:a3:0f:9e:06:8c:
1c:d2:2d:ab:2b:fa:7d:c8:e5:ad:ea:0b:f6:a0:ec:4d:39:5e:
06:37:14:a4:67:44:b3:ab:ba:28:07:6f:5c:f6:d2:91:21:13:
c7:20:95:26:bf:70:d2:4f:cb:b9:08:a1:ca:66:2d:c3:c3:21:
6c:f4:5d:31
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUA4T0Qedd6kVsnWKq3DqZ34f9r9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDcxNjU1MDJaFw0yMzA0MDYxNzAwMDJaMDMxMTAvBgNV
BAMTKDIyMTRDMzZDNDYwQjEzMEU5QzM0RjE4NzM1RDRGREU4OThBRTI0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTL0+T8MvLNWa756CSriPiK1Ww
DLjAkO/eRueIzKchZ1yyLCDsIFt0i9LfbxNkmR4hHWLBN62lcrrQYgPiE/ea4tmu
D43MUZHnE8BfhNO4aokPzcBeRnyGXAQiSfL3W3ZfLyj0KHfAbok2BLrGO6hLrgMp
o8g9cvw3PKbQfuL0uAlGvjWMlwROuVMTYXGZZQjmB0bcu64fQ6LqfuBUK2tH3hfH
CUkQz2KaqxpDvLMidl6NzqfjJhdKsY6oS041Glwy8s4qfpAGvfm6hKkiv9c4k0u7
bhEys4U8C229P9shDwyWNN1i+GTg83rBCoQgyO6LDmDzdFf27Pkog+Bksrj5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUIhTDbEYLEw6cNPGHNdT96JiuJO4wHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMxMzEzMjJlMzIzMTM1MmUzMTM3MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcNewMA0GCSqG
SIb3DQEBCwUAA4IBAQA92zxCq+Y9G7ubEv1iLDnetb3BqXTmOyQbanlRrUkpAMzJ
l0rarxpZUzTwbMJX1qJrJTK88ciuE/qfnDCfaeqYJVSTPr6/sdy2R1PXmEnflOIF
UT5bjk0YVI+r07KWmVxNM/T/DwLwejijlESaiMuPP07klodBC22KiTnaR9RDep2Q
9rg/Zc0oDBHk6hGrSBy4cAWK4Xx9Cg86fSpw7OZDqA+ay0DCsKcf28OyCc9LWRIr
PRydA+IsbxWAblP6Bhozow+eBowc0i2rK/p9yOWt6gv2oOxNOV4GNxSkZ0Szq7oo
B29c9tKRIRPHIJUmv3DST8u5CKHKZi3DwyFs9F0x
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:49 2025 by rpki-client