Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36302e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e36302e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 5QmJS6BCXyizHN7q3J0Nw3ZHwaRVpxkIttsUYnZvNjE=
Subject key identifier: D5:55:A2:F0:D0:BC:BC:D5:27:7E:50:FE:23:2D:46:FF:5C:F9:9E:FE
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 27A253334FF6B9AF075DD6DC0975D93088E2331B
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36302e302f32342d3234203d3e203137383835.roa
Signing time: Tue 12 Apr 2022 10:00:00 +0000
ROA not before: Tue 12 Apr 2022 09:55:00 +0000
ROA not after: Tue 11 Apr 2023 10:00:00 +0000
asID: 17885
IP address blocks: 121.52.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a2:53:33:4f:f6:b9:af:07:5d:d6:dc:09:75:d9:30:88:e2:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 12 09:55:00 2022 GMT
Not After : Apr 11 10:00:00 2023 GMT
Subject: CN=D555A2F0D0BCBCD5277E50FE232D46FF5CF99EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:e6:dc:2a:b3:b9:ac:45:45:e0:41:a9:70:
29:34:e4:d2:b2:c0:3b:f7:1f:1b:3d:7f:ee:b9:07:
c5:30:43:b9:f7:e5:f2:63:82:2f:81:13:d6:12:c1:
f5:10:e5:32:91:4f:24:83:5b:ad:09:41:32:09:9c:
01:bb:19:b4:1c:70:08:6e:e8:e5:0c:a5:e5:ca:4f:
97:5f:02:69:64:23:87:e8:29:a2:e9:da:c4:0c:83:
c6:7c:7d:0b:49:ad:09:ad:b2:79:87:3d:91:24:d5:
d0:fc:5c:a6:1c:c1:9a:a0:b8:18:5c:1f:54:26:1c:
7b:dd:ec:d9:1d:c4:e7:60:97:ac:f5:3a:62:0c:80:
7d:92:16:ad:1a:66:08:2c:f4:db:b3:d5:68:43:ea:
d2:41:3d:2e:87:30:40:45:ef:c3:01:5e:ba:70:03:
7c:cc:f1:11:67:80:06:c3:c1:86:fb:14:ea:63:fc:
bb:4e:d1:b6:c7:a2:e2:03:6f:a7:58:b4:ae:51:f6:
9f:8f:08:99:54:aa:b1:54:a2:67:e4:7d:cc:fb:b9:
cf:1a:70:85:8f:70:4d:78:25:03:7e:10:10:7c:5e:
4b:d3:95:cc:4e:2b:4d:6d:05:1e:93:f0:bf:b7:94:
6c:bb:58:14:7b:10:dd:9d:c5:99:5b:af:30:a8:0f:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:A2:F0:D0:BC:BC:D5:27:7E:50:FE:23:2D:46:FF:5C:F9:9E:FE
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e36302e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.60.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b7:e4:58:34:e1:11:ec:9c:ce:8c:04:38:d1:4b:b3:41:48:
e9:65:21:6e:94:88:21:86:fd:e1:16:6b:5a:d9:ff:e1:21:e8:
8d:da:4a:e1:86:21:c2:ec:57:5e:7b:27:51:d0:05:3b:68:cd:
d2:23:af:b1:02:9b:06:a0:19:aa:ad:51:59:96:be:46:44:56:
8f:29:2b:8a:92:12:c0:41:60:99:eb:34:0e:74:6c:48:69:6b:
db:66:06:ae:27:32:14:a1:11:b4:ba:60:ed:a4:17:f1:cf:0f:
fc:9f:c4:51:ba:56:08:46:d8:17:12:1a:79:a3:25:c6:a5:d4:
f9:c7:8b:a3:91:de:05:4f:33:0b:55:16:6e:15:0c:ed:29:41:
e0:b7:a3:26:35:24:11:88:ef:7b:2d:a2:a5:28:b5:bf:b9:16:
89:e9:66:6f:30:c2:29:2e:89:8e:cd:42:0e:99:49:e2:21:e4:
06:8c:35:60:6c:ad:d7:49:7d:d3:21:2c:28:10:86:d4:d2:c2:
52:bf:dd:16:6a:01:8b:05:23:d5:49:54:8a:e6:57:29:ed:fe:
ba:c7:0c:50:05:03:80:1f:0d:21:4d:9d:a0:c1:98:60:09:26:
29:8e:19:91:a2:b1:bb:2c:e1:74:74:9b:fa:54:13:25:a1:67:
32:3d:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:22:11 2025 by rpki-client