Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38322e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e38322e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: 4tKYTPKngzRrcXXWnc4iFE2aSyeI1byVmDOJROnjLHQ=
Subject key identifier: 22:B5:E8:C3:64:4F:32:E2:45:2B:75:C2:71:72:99:20:04:CB:35:D3
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 0816542E421B1BE7F19B042BEA33F23FC3CF6926
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38322e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 06:00:00 +0000
ROA not before: Wed 13 Apr 2022 05:55:00 +0000
ROA not after: Wed 12 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 121.52.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:16:54:2e:42:1b:1b:e7:f1:9b:04:2b:ea:33:f2:3f:c3:cf:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 05:55:00 2022 GMT
Not After : Apr 12 06:00:00 2023 GMT
Subject: CN=22B5E8C3644F32E2452B75C27172992004CB35D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:4d:1c:8e:4c:2f:38:cd:b2:fa:8a:8b:4c:
0d:64:0e:e6:13:1d:a5:60:7d:6f:f9:b5:3f:2a:51:
03:7e:fb:35:9c:93:5c:b4:32:89:55:52:bf:b7:e9:
78:60:ed:d7:18:fa:be:b9:1d:23:38:ab:3f:be:ea:
7b:6c:dd:61:82:53:da:54:ef:ec:0f:44:0b:48:74:
ee:e4:2e:19:4c:37:8c:4f:ad:af:7c:3f:26:36:69:
d8:4a:1e:bd:65:02:41:92:ec:b8:dc:e1:d5:7f:60:
3f:0a:a2:3e:c1:38:fc:e9:b4:de:3a:5c:bf:ca:29:
1d:51:14:2d:f6:24:a2:51:ef:a9:e1:e2:00:98:38:
b6:8b:8c:4f:e9:b3:ff:0e:50:e5:1a:5c:b0:f1:80:
45:ad:83:42:d7:2e:74:cb:b4:b0:bb:1f:d2:8b:25:
a6:84:77:84:41:15:0f:57:ef:ae:9c:5b:17:ef:8b:
b4:05:28:8a:f7:28:8e:54:73:8e:00:15:5a:79:a3:
b7:72:c2:fa:66:97:0a:77:b8:8f:5d:57:12:70:63:
4f:5a:4a:46:b4:ac:ae:06:b5:47:15:52:25:6c:d9:
cf:2b:57:6a:86:7b:6b:dd:0e:34:37:da:be:f9:5b:
04:2b:69:0e:1f:11:9d:7d:bd:47:ae:b4:66:30:37:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:E8:C3:64:4F:32:E2:45:2B:75:C2:71:72:99:20:04:CB:35:D3
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38322e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.82.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a5:18:81:f8:26:49:96:40:5e:fc:71:30:40:1e:92:b1:f5:
10:56:91:76:e4:20:13:a0:79:69:7c:85:80:bc:2c:89:f3:b5:
1e:9b:c6:9e:b5:92:9c:d1:8e:e1:af:5d:2a:cd:07:f0:5f:44:
48:fd:c9:b7:50:b6:e4:65:fe:e4:05:ad:6e:c1:8a:75:cf:bf:
bf:be:65:7e:29:77:74:33:b4:ec:cb:8f:61:37:56:6e:74:b5:
11:6b:86:3b:ac:1f:3d:ab:aa:7c:30:cf:f0:d0:36:ac:93:12:
cb:86:36:f3:6c:c3:26:49:23:dd:f8:b8:d5:9d:e8:2a:cf:1b:
42:41:0c:4c:6d:1b:5c:b0:39:8e:35:5d:4b:10:9b:9d:4a:07:
e6:2f:45:ff:07:79:7d:6c:74:25:17:2b:3c:40:3c:6b:6c:f5:
29:5a:f1:98:2d:5e:cd:b9:64:99:c7:a4:a8:fb:d4:55:d8:b6:
2f:51:de:d7:ec:8a:ba:0a:ed:99:28:7d:44:9a:cf:a8:02:a0:
1b:91:f4:de:24:86:16:25:98:86:21:fc:f2:09:75:59:c4:c7:
37:db:d1:6a:e9:05:6b:41:b4:8c:fa:4c:b5:68:5b:1c:e8:2b:
e5:83:d2:ac:0e:90:d2:54:ab:67:df:52:1b:99:df:ff:2f:7e:
ef:6d:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:36 2025 by rpki-client