Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36352e302f32342d3234203d3e203234323033.roa
File: 3131322e3231352e36352e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: qnuAp1J+fUC0iytqpNlPLmKFsfpbJBJSL9IARIrlYDA=
Subject key identifier: B3:E4:48:DD:BD:70:51:A2:28:A7:CD:40:4F:79:96:BD:53:C8:1E:0F
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 43CD8A6DA1F646C4D67C727BC1874467A106ECB6
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36352e302f32342d3234203d3e203234323033.roa
Signing time: Tue 05 Apr 2022 06:00:00 +0000
ROA not before: Tue 05 Apr 2022 05:55:00 +0000
ROA not after: Tue 04 Apr 2023 06:00:00 +0000
asID: 24203
IP address blocks: 112.215.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cd:8a:6d:a1:f6:46:c4:d6:7c:72:7b:c1:87:44:67:a1:06:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 5 05:55:00 2022 GMT
Not After : Apr 4 06:00:00 2023 GMT
Subject: CN=B3E448DDBD7051A228A7CD404F7996BD53C81E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:88:ed:ea:cd:42:10:b3:5d:1c:ac:e9:2a:
ef:ee:a6:2c:41:4a:26:c0:f9:e3:06:3d:67:2a:3e:
67:be:6b:0a:91:ec:04:3f:d2:69:9c:0b:80:ef:3d:
73:da:ab:08:9e:8a:36:12:fe:21:4c:23:d3:b3:0f:
59:65:ef:32:09:d2:b2:30:30:18:66:aa:11:1e:c0:
d5:89:ee:50:b2:2f:bd:97:1a:f1:c4:7c:f4:b2:31:
af:13:b5:16:69:82:77:f0:4d:f1:9b:2a:b7:10:5c:
78:c0:ad:d9:40:55:24:62:26:12:99:51:1e:b0:2a:
16:f1:9a:8b:5d:3d:e9:61:6d:c1:d5:d6:92:be:14:
12:69:cc:e1:4d:a7:42:1e:fc:81:b3:33:a4:b0:fa:
b2:fb:ba:13:51:97:f1:b8:92:34:f7:c8:5e:2a:21:
0b:a6:dc:6d:fe:bf:f7:bc:55:8e:f3:54:48:2b:64:
a4:0e:cb:8d:fc:e2:c0:30:7d:fe:df:35:a8:bf:58:
e9:34:81:52:ec:b6:e2:d4:e3:dd:2c:ae:0c:f1:54:
fd:6d:2c:d7:01:57:76:15:ac:af:99:60:4e:88:08:
08:03:49:64:c1:0b:6d:3e:3a:3c:43:06:f8:3a:2a:
69:e5:5a:7f:14:fd:3e:bd:da:37:27:18:a0:2f:3f:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:48:DD:BD:70:51:A2:28:A7:CD:40:4F:79:96:BD:53:C8:1E:0F
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e36352e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ef:51:e8:75:15:93:94:30:4e:3a:35:b8:65:92:d7:ca:68:
73:55:be:c9:87:ea:dd:1b:df:76:1f:65:3e:74:7e:8e:a0:2f:
bc:63:03:ba:9d:99:be:2c:d9:09:60:90:bb:40:54:cb:11:a1:
f8:fd:fe:99:58:55:f0:8c:b9:e8:7b:71:e9:7d:ec:3a:27:f5:
c2:a6:a3:2c:54:a8:75:83:9c:8d:ff:79:e8:60:65:f5:b8:64:
82:b1:17:37:5e:b6:2e:71:d2:14:2b:56:de:a6:31:39:19:97:
d8:fb:b5:86:73:e7:da:4c:f2:ad:a3:f7:65:9b:54:ee:0d:e8:
0b:12:3f:3c:ac:96:f9:25:f3:8a:50:c4:a1:01:53:7c:ac:78:
9b:dd:22:92:d4:47:93:a6:ba:8c:de:6f:6f:96:20:fd:78:3d:
58:bc:d0:ce:14:a1:79:54:80:08:9b:07:45:ad:33:35:ff:14:
14:3d:69:70:f7:f6:ec:7e:37:3e:c9:5e:cb:47:79:a6:69:9c:
b9:88:43:27:2e:ac:5e:3f:6f:dd:fa:af:41:e8:c9:f2:d2:1e:
80:2b:40:6b:d5:85:98:85:03:9a:64:8e:f4:40:af:67:a9:db:
c5:84:0d:6c:24:6d:0d:7b:74:0b:95:25:56:51:90:28:a6:00:
17:9f:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:30:10 2025 by rpki-client