Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37382e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e37382e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: S3yshCAroGH6LpTLyWZoUoG8qWvPDv7xDyJtuE3ml5s=
Subject key identifier: 35:AA:E8:FF:47:A7:76:2B:F3:24:65:2B:92:6B:C2:5F:26:07:B0:F1
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 3494B9B8745A720AE365AF72AA567E0B299EB35E
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37382e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 04:00:00 +0000
ROA not before: Wed 13 Apr 2022 03:55:00 +0000
ROA not after: Wed 12 Apr 2023 04:00:00 +0000
asID: 17885
IP address blocks: 121.52.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:94:b9:b8:74:5a:72:0a:e3:65:af:72:aa:56:7e:0b:29:9e:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 03:55:00 2022 GMT
Not After : Apr 12 04:00:00 2023 GMT
Subject: CN=35AAE8FF47A7762BF324652B926BC25F2607B0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:29:66:dc:90:05:cd:2c:38:e8:8c:e0:57:
bd:91:95:f8:6f:b6:b8:81:84:6d:6f:5b:81:33:1e:
3e:46:fe:72:a8:f5:62:8c:32:82:1b:f6:1f:57:7a:
69:37:4d:ea:e7:8f:15:40:79:9c:fa:68:59:68:d7:
da:54:90:ea:1c:54:c0:ac:6f:4c:2b:86:03:a1:0b:
e9:93:bc:88:25:73:34:c1:23:37:fc:a4:b8:be:e9:
c1:cb:4d:ee:04:d6:3a:db:38:3d:63:6c:19:52:08:
4e:eb:c4:29:0c:58:0f:6a:79:4b:a1:1e:46:a4:9c:
e8:03:54:f7:12:fd:67:9f:27:e2:3a:e9:01:e4:47:
fd:3b:0b:9b:d4:c4:a9:21:41:93:b1:25:6d:cb:4e:
8f:93:c3:4b:6e:64:f5:40:27:0c:89:bd:be:3e:bf:
40:1f:0b:80:22:4f:35:fd:d4:14:31:e1:f3:12:a8:
70:db:49:11:da:55:80:15:f2:23:d8:e8:15:1c:e7:
11:74:55:30:a5:d5:89:28:54:ae:86:2b:02:b9:6a:
9d:73:52:2b:b7:0a:37:1e:86:01:b7:d5:b4:1a:e8:
2e:58:d5:f8:cf:3e:7c:1e:46:4b:96:f8:ff:02:b2:
0d:95:e7:3b:ed:0c:8b:37:7e:44:57:c5:6d:d5:fc:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:E8:FF:47:A7:76:2B:F3:24:65:2B:92:6B:C2:5F:26:07:B0:F1
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e37382e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.78.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ea:2c:f7:60:61:f2:a0:4d:08:5e:c3:d3:67:d7:9e:fd:e2:
57:4a:3d:d4:ca:94:0b:db:2d:c7:18:00:ef:8b:cb:48:5f:3a:
2a:21:4f:16:83:5f:6e:79:8d:bd:ec:6e:bc:51:a3:5a:36:95:
87:34:6c:22:7e:11:3a:0b:5f:43:42:fc:f3:34:ec:a0:21:70:
42:a6:22:5f:97:44:76:fa:d0:a8:ac:0a:dd:ec:01:c0:11:ba:
54:ee:98:47:72:20:51:4a:3c:10:c4:0b:c9:48:87:d4:a7:f6:
71:dd:c2:f9:d9:d3:b2:81:72:0d:26:51:1f:77:30:54:1e:e0:
9e:c3:44:ad:0b:48:a3:26:5b:14:3e:61:41:47:39:9a:5a:c0:
f4:6b:72:c6:fe:fd:85:cf:17:d2:1e:c6:cd:f1:04:f4:cf:a0:
a7:6b:8a:37:8b:a0:aa:d0:d6:ee:06:e8:f2:e0:e3:aa:4e:f2:
3f:c3:8c:f3:d5:5d:06:d9:70:54:31:a7:f3:20:ab:40:3f:47:
86:b0:b9:f6:d4:b4:0d:bb:5b:bf:e0:3b:6b:fd:77:9e:6c:28:
bb:3e:67:f8:1b:32:27:ba:f1:17:51:7d:ea:2a:00:3c:9c:9b:
2b:a8:04:d0:d0:9c:62:e7:a1:b9:90:8e:e6:e8:f5:25:a8:a3:
88:4a:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:20 2025 by rpki-client