Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e35322e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e35322e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: VvzbE7Br7euz46zwqaV2ozwhbjFqjEAC8w1AqAC1WEE=
Subject key identifier: 42:7C:EE:C3:87:8E:E1:FE:28:3F:8B:F6:86:E8:5C:1C:2D:31:68:9E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7B4BA2E8A6716BD29C46F62F87C180923B4FE51F
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e35322e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 09:00:05 +0000
ROA not before: Tue 12 Apr 2022 08:55:05 +0000
ROA not after: Tue 11 Apr 2023 09:00:05 +0000
asID: 17885
IP address blocks: 121.52.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4b:a2:e8:a6:71:6b:d2:9c:46:f6:2f:87:c1:80:92:3b:4f:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 08:55:05 2022 GMT
Not After : Apr 11 09:00:05 2023 GMT
Subject: CN=427CEEC3878EE1FE283F8BF686E85C1C2D31689E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:2d:9f:f5:b6:08:ec:72:d7:d3:96:db:f1:
b3:86:bc:a0:a9:5f:91:18:1e:ad:6a:90:a0:ad:d5:
ce:09:c9:d2:e0:1b:1f:b5:06:1f:92:a6:ef:9b:32:
0f:ca:92:1e:98:ea:f3:d5:3b:21:e3:81:c5:9f:f0:
53:2f:99:fd:34:db:dd:b9:f9:94:d1:ff:d9:29:d8:
34:aa:4b:b5:d6:7a:8f:57:37:60:d3:53:e0:42:b7:
16:e6:79:a6:12:6d:32:3e:df:bf:98:7f:08:b1:fa:
e8:96:ec:19:c1:d2:3b:48:dd:39:4f:6f:67:34:cd:
b3:56:d7:d4:00:cf:e8:76:55:2d:7d:dd:c9:e8:60:
5e:47:e5:8e:55:62:b7:db:88:a1:f7:ef:81:8e:4d:
a6:19:55:cb:b8:f1:7f:cd:28:ca:e2:09:af:c8:d6:
55:12:5f:37:81:c6:1f:5b:36:17:fe:e1:9d:31:fe:
d6:b0:f2:37:bc:a5:a6:e0:60:54:ad:9b:f9:38:e8:
ab:33:a0:3e:44:bd:99:0e:71:ec:61:de:01:95:68:
43:78:86:ee:b4:d3:a0:cc:24:e9:6d:80:ac:97:51:
44:33:a4:29:fc:9d:cb:e9:06:70:a2:e6:3a:e0:d5:
58:84:5d:b1:08:fb:20:c4:bb:42:86:3a:1a:6a:e2:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:EE:C3:87:8E:E1:FE:28:3F:8B:F6:86:E8:5C:1C:2D:31:68:9E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e35322e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bb:a0:45:09:3a:f5:d6:31:60:c1:6f:24:c8:ae:22:48:88:
90:e4:cd:b1:73:ef:14:5d:40:bc:24:f1:3d:4b:64:de:36:74:
89:6b:3c:af:62:60:c6:28:c1:da:00:2e:f0:6b:91:87:9a:93:
5a:cc:fe:75:94:53:a7:f1:a9:e4:b9:47:ce:01:a5:39:99:40:
4f:8b:f1:89:59:e9:ec:25:5b:4e:85:92:b2:58:63:78:d1:58:
5b:da:de:44:3d:58:91:ec:09:ce:dd:18:e4:2a:4c:5e:c0:d3:
8f:78:0e:ee:36:fe:22:cb:00:7d:3f:bb:ac:c1:7d:9b:cc:48:
55:b8:1b:9d:1d:fb:d7:8b:3a:23:4f:15:19:38:79:5c:3d:85:
e7:58:ae:b9:d9:3a:eb:8e:ab:b0:12:53:f4:ba:5b:f2:0a:12:
dc:bf:bb:c3:37:68:f5:d1:47:c4:82:46:f5:8d:c2:9b:1f:3d:
d9:ad:fb:6c:17:84:58:1a:71:f9:9d:ff:fc:00:e5:6d:66:ad:
49:0a:4a:c7:d2:fd:0c:68:cc:4e:bf:db:5c:dc:55:d9:b7:62:
92:27:96:05:b6:a0:a4:1e:fd:a8:43:35:3f:90:f5:22:fe:b9:
02:ff:a1:7f:4f:83:5c:7b:fe:c4:5d:5a:e5:63:63:bc:fb:f9:
33:5d:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:58 2025 by rpki-client