Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e372e302f32342d3234203d3e203137383835.roa
File: 3131322e3231352e372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: dNZJMLMqCZu0/l04goSqBYCrEgRQdadddW4bSU6fDUw=
Subject key identifier: 5D:6E:CB:D4:E8:36:7F:FD:AA:FF:6C:C6:1B:03:74:4D:D4:58:BE:91
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 1AE070F5A9B8262AD441C845860D1F844F2312B2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e372e302f32342d3234203d3e203137383835.roa
Signing time: Fri 01 Apr 2022 21:00:00 +0000
ROA not before: Fri 01 Apr 2022 20:55:00 +0000
ROA not after: Fri 31 Mar 2023 21:00:00 +0000
asID: 17885
IP address blocks: 112.215.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e0:70:f5:a9:b8:26:2a:d4:41:c8:45:86:0d:1f:84:4f:23:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 1 20:55:00 2022 GMT
Not After : Mar 31 21:00:00 2023 GMT
Subject: CN=5D6ECBD4E8367FFDAAFF6CC61B03744DD458BE91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:c6:52:70:67:3b:15:04:9f:4d:dd:21:fc:
e8:c6:ac:22:9e:73:36:eb:7d:9d:bb:2c:b9:c4:2f:
09:86:ab:d2:3b:b6:d4:82:a5:37:2d:e5:4a:da:35:
bb:25:e7:55:a1:7d:1f:eb:3c:aa:38:76:f1:5e:73:
80:19:3e:40:d9:aa:a3:c7:18:d7:f4:ea:07:67:fe:
91:cd:63:31:95:b4:c8:7e:ee:62:1b:ad:d8:cb:21:
a0:03:4f:f2:dd:e1:88:d5:7a:51:bb:13:6d:18:ce:
98:96:d7:a6:dc:89:78:8b:78:d2:a7:44:38:23:1c:
db:01:e9:6f:06:c9:e6:72:e5:a9:4c:ec:a6:c9:56:
a9:4c:59:b0:d8:78:87:05:ce:08:2b:fb:67:ed:c0:
c9:6b:f4:59:56:22:62:8b:4c:92:f8:65:8e:e9:04:
81:d8:b2:e0:51:b2:c9:c0:34:10:bd:94:b4:e9:e5:
52:1f:b7:67:3f:de:ad:3c:16:30:63:8c:9d:09:cb:
29:1b:a7:16:33:e7:12:fd:fa:18:ea:5e:11:4c:80:
c1:05:7c:60:92:d1:f2:ea:5e:9c:06:f1:e1:c2:e7:
50:ff:d9:13:c3:27:05:8e:de:de:53:3a:0f:db:a2:
60:f7:ad:9b:d6:a5:95:24:57:98:87:49:d1:ee:55:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:CB:D4:E8:36:7F:FD:AA:FF:6C:C6:1B:03:74:4D:D4:58:BE:91
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.7.0/24
Signature Algorithm: sha256WithRSAEncryption
95:36:b3:75:c3:60:03:ce:6e:53:f2:ad:40:19:b4:ae:2e:a1:
cb:90:38:10:86:19:11:bc:25:66:5a:d6:fb:24:32:67:b5:8b:
b2:ff:2d:12:98:9f:69:bf:82:05:64:c8:13:61:93:42:27:61:
f8:f1:2f:fd:a0:e9:df:7b:6d:59:71:78:64:17:04:6b:ac:a2:
f8:4e:ce:ad:2a:5f:23:f6:dd:8e:33:d4:6e:09:5a:50:59:aa:
0b:45:7d:1e:dc:c2:46:f4:94:22:c4:55:78:f5:52:b9:1e:43:
25:d3:2c:63:6e:5f:1d:46:53:4b:6c:03:b3:28:2b:73:9b:6d:
02:28:8f:99:50:d8:12:02:c3:ac:5b:2e:3a:66:5c:fe:a9:bd:
fa:96:4e:3a:86:5a:5a:6a:6c:61:c2:ef:2e:02:ce:37:6b:9c:
de:37:79:b5:05:8b:06:8a:60:8b:4f:1c:27:ed:00:00:a4:47:
f5:e3:31:1e:27:78:bb:d2:a4:c1:d4:39:97:94:30:d6:6c:ca:
ea:6e:24:e9:fb:b7:98:6e:e0:b1:50:0d:bd:a3:51:78:31:8f:
38:63:96:d5:92:e4:75:ee:e1:3b:68:ab:03:a3:e6:58:ac:ef:
eb:58:3a:6f:f3:a3:e0:ff:c7:45:d9:16:b4:3b:8b:26:f8:d8:
53:7d:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:25 2025 by rpki-client