Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38372e302f32342d3234203d3e203137383835.roa
File: 3132312e35322e38372e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: Ek3SeR0R7vbDqrsVNmJUMRpBctFjeZIh6nW4uxBkIo4=
Subject key identifier: 97:29:2E:F6:CD:D3:83:45:75:5C:FB:4A:41:F0:0D:72:D8:27:F2:93
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6950586ABD93CBCAAE962B1ECF5622880E09DAE4
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38372e302f32342d3234203d3e203137383835.roa
Signing time: Wed 13 Apr 2022 06:00:00 +0000
ROA not before: Wed 13 Apr 2022 05:55:00 +0000
ROA not after: Wed 12 Apr 2023 06:00:00 +0000
asID: 17885
IP address blocks: 121.52.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:50:58:6a:bd:93:cb:ca:ae:96:2b:1e:cf:56:22:88:0e:09:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 13 05:55:00 2022 GMT
Not After : Apr 12 06:00:00 2023 GMT
Subject: CN=97292EF6CDD38345755CFB4A41F00D72D827F293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:9b:9b:47:e8:4d:8f:eb:2d:24:76:76:b1:
b6:9b:49:0e:30:05:d1:b6:bc:68:d9:32:8a:66:30:
8f:44:1a:2d:f5:27:8d:c9:7c:60:15:70:90:26:b0:
e7:14:e9:fe:25:c5:e7:b7:88:5e:2c:7e:9f:cd:88:
fe:19:43:15:b9:a5:e7:29:a1:fd:28:3c:a3:11:5f:
95:8c:11:9e:fa:aa:19:bd:a6:8f:2b:f1:5d:fc:06:
44:f8:84:e6:e7:82:06:14:a0:3e:51:69:ad:04:d7:
be:92:4f:28:4d:e2:3e:21:85:21:2e:fa:31:c8:31:
6f:00:73:ee:fb:ff:4d:23:bc:bf:08:51:5a:1c:ac:
25:c2:7f:c9:a7:d1:93:d9:77:27:d5:94:27:43:d8:
56:a9:51:35:99:a7:5c:f3:d4:ce:a3:e2:be:e9:ac:
df:09:a1:53:bd:21:67:38:68:e2:3a:86:57:17:de:
14:62:e5:91:40:ab:27:90:33:6f:78:50:4b:92:a4:
11:d5:79:14:17:f0:bc:47:d6:7f:a5:6c:ff:f9:c4:
59:a5:b5:c7:81:42:31:6c:57:e3:99:81:f5:44:48:
7c:56:30:46:38:eb:b3:4b:84:e0:54:3e:46:51:38:
03:43:f7:41:8d:d0:9c:2d:39:47:18:ad:48:87:e8:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:2E:F6:CD:D3:83:45:75:5C:FB:4A:41:F0:0D:72:D8:27:F2:93
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3132312e35322e38372e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.52.87.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0a:b8:d2:85:fd:2c:2d:67:35:c5:9e:03:6a:37:5c:58:16:
dd:d2:bd:be:de:7d:19:a7:94:7d:5b:98:ff:03:3f:24:ef:62:
6c:a6:7b:e3:75:88:42:80:7b:77:15:2a:ea:ff:b1:49:b8:71:
33:b8:bb:5f:02:a8:0b:67:9f:29:55:5c:c1:4d:1a:cf:d0:a8:
d2:ef:f8:4b:24:51:0e:84:22:09:9f:97:5f:c2:c1:40:a4:2b:
95:cc:6d:45:34:f8:b2:03:fc:4c:e0:6b:96:ba:be:74:52:82:
cd:42:16:67:d8:12:3b:d8:b9:4b:05:a3:3f:8d:23:7b:1f:c5:
85:c9:e3:f5:f6:84:01:db:2a:c0:eb:4f:a7:8c:d2:e8:88:31:
48:f5:af:e3:8e:fe:42:8c:0f:2d:8b:cb:29:b4:23:dc:50:36:
59:5d:65:9b:47:f0:ea:cf:55:fb:7c:43:a6:45:a7:9a:df:f9:
86:c8:0f:c1:04:39:b9:a1:54:b4:d3:f6:f3:44:d2:cd:92:ce:
19:d2:3a:98:d2:97:37:54:10:1e:be:cb:4e:2d:93:37:27:c1:
36:84:96:f2:47:46:3f:7e:25:c3:05:fd:0a:09:61:8c:15:81:
aa:39:39:dc:c3:86:f8:d7:30:21:35:8a:0a:d6:d0:d6:44:5f:
cf:4f:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:46 2025 by rpki-client