Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38352e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e38352e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: lY5mJOuqEVo8O9T2m+gTJPjC0ddrlW3x5R0hrNLOe3I=
Subject key identifier: 41:46:A7:D4:47:A9:5A:BB:BA:27:A3:4D:C8:81:65:A8:5A:40:BF:27
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 7D0A4AC4C715670054D41D6AD0B4268BDF3E36A2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38352e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 06:00:00 +0000
ROA not before: Wed 13 Apr 2022 05:55:00 +0000
ROA not after: Wed 12 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 121.52.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0a:4a:c4:c7:15:67:00:54:d4:1d:6a:d0:b4:26:8b:df:3e:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 05:55:00 2022 GMT
Not After : Apr 12 06:00:00 2023 GMT
Subject: CN=4146A7D447A95ABBBA27A34DC88165A85A40BF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:a6:af:2e:ac:eb:ab:e0:5b:04:5a:e0:45:
c3:1a:01:fe:04:51:09:b0:5b:64:11:3e:40:d3:0c:
72:35:07:91:dc:4e:07:34:9d:a3:55:d0:da:e5:e3:
72:3a:79:fa:5c:52:31:f6:65:5d:17:1f:19:8c:15:
9e:22:ba:ef:48:21:2e:a8:d7:e2:a7:8a:dc:5e:75:
25:d8:e6:84:17:e4:6c:e6:e8:10:7a:c7:6a:78:9e:
36:0c:58:9a:bb:df:87:08:e2:7e:68:28:fd:55:b7:
29:c9:89:55:7c:0f:0e:f1:37:16:10:1b:37:a9:d7:
25:4a:23:9e:83:bd:e7:99:cd:89:93:26:19:21:d1:
47:d1:58:18:80:2b:29:35:fe:aa:f9:f4:90:61:b6:
88:52:a8:89:fa:26:58:2d:cf:87:37:ae:a2:45:12:
dc:cd:a4:89:a2:83:4d:37:94:e0:18:1a:d8:d7:70:
f8:8a:87:ef:5c:8b:35:12:2c:44:ff:59:9d:d8:86:
ec:fa:d7:5d:78:4d:56:11:91:c5:a0:bb:8d:82:13:
e8:b6:97:2d:4b:c8:5e:09:f1:a4:95:8e:45:db:0f:
40:a2:af:86:32:a1:f3:df:05:d0:cd:ad:29:81:6f:
d0:15:59:ce:ca:3d:06:7d:f2:23:bc:db:71:a6:26:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:A7:D4:47:A9:5A:BB:BA:27:A3:4D:C8:81:65:A8:5A:40:BF:27
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38352e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:17:22:e3:7f:35:27:56:81:92:cc:93:2b:c8:d7:33:be:ff:
89:a6:66:6f:af:95:b3:b8:73:7f:0e:4a:ab:0b:b4:16:ac:db:
40:6a:50:3d:5d:54:cd:72:29:4f:2d:e6:99:eb:6f:e3:9e:47:
e3:1c:60:1f:a6:85:6e:a2:9b:d4:a4:2c:60:bf:67:a9:fc:cb:
68:0b:61:60:0a:ae:6a:69:8e:a7:e5:27:7f:e6:5b:63:cc:f5:
93:9f:7d:54:a8:31:c6:72:75:6e:ff:62:9d:4d:a1:cb:ff:53:
31:f7:dd:09:51:33:da:7d:5e:db:d4:6b:77:82:f5:89:40:ab:
f7:dc:1b:c0:ab:9e:d2:c1:78:60:46:50:a6:b2:ee:ae:cf:10:
75:34:a6:ad:29:27:e5:47:16:09:62:3f:e1:09:5f:4d:a5:65:
34:a0:51:6f:b5:49:2e:b4:6a:a2:0e:ce:12:e2:9f:cd:db:40:
83:1f:2d:e9:f8:dc:b9:fe:0b:0a:d4:11:81:5e:4d:3f:46:be:
da:a2:9c:72:ab:54:ce:30:ca:e7:8d:5d:80:81:d5:e0:b0:ba:
86:59:f0:8a:1d:f6:3c:95:e8:5c:19:60:98:15:93:e6:80:d2:
f2:b6:cc:62:78:13:81:03:fa:db:15:4e:08:b5:47:ef:53:39:
4c:fc:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:22:21 2025 by rpki-client