Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132362e302f32342d3234203d3e203234323033.roa
File: 3230332e37382e3132362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 6LTj/7zmc7GN9H7A+OYpE3Ch1QKsoHWScKoG9nHMG9o=
Subject key identifier: 56:6A:D0:30:C5:A6:32:C7:B5:C5:68:4E:A9:B6:86:22:08:9A:10:BA
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 728A61EEEACAAE7D4C0CF993994CF9C1F7B375C4
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132362e302f32342d3234203d3e203234323033.roa
Signing time: Thu 07 Apr 2022 08:00:01 +0000
ROA not before: Thu 07 Apr 2022 07:55:01 +0000
ROA not after: Thu 06 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 203.78.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8a:61:ee:ea:ca:ae:7d:4c:0c:f9:93:99:4c:f9:c1:f7:b3:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Apr 7 07:55:01 2022 GMT
Not After : Apr 6 08:00:01 2023 GMT
Subject: CN=566AD030C5A632C7B5C5684EA9B68622089A10BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:6b:f7:a1:de:a2:18:ff:c3:e0:eb:db:d9:
8c:1b:50:38:c6:0c:db:5e:f4:25:59:cb:0f:4b:d3:
90:0f:ad:5f:11:96:ac:00:e5:f1:5f:b5:eb:ad:dd:
79:08:29:e2:44:a8:d5:66:d9:8e:b2:b2:0a:6c:2b:
90:a0:bc:18:e6:c6:82:17:46:08:4f:59:37:56:5a:
ae:cf:9b:af:6c:98:3f:f4:13:35:50:88:75:20:5a:
25:a7:dc:7a:ee:2e:27:f4:31:12:e7:d8:ab:99:50:
fe:6d:92:ef:f7:81:ae:0e:8a:8a:77:dd:46:d2:41:
40:18:b0:26:5a:ca:2e:51:9c:f7:09:fc:19:3b:17:
d3:c0:eb:97:c0:64:a3:d5:3b:c5:33:ee:d9:dc:a1:
51:5d:d9:d6:fb:cc:18:24:7c:71:2c:37:d5:31:7a:
68:1b:67:4b:fc:f0:c2:b8:b2:7a:19:6c:82:a1:29:
a9:86:fc:2d:dc:56:91:a8:9d:66:e1:89:2f:8c:74:
fd:a4:6d:79:f2:26:b5:de:42:94:98:07:44:18:82:
01:9a:dd:e5:a8:30:30:e6:40:20:c4:07:fe:40:c5:
3b:83:f6:77:d7:28:23:bb:26:2b:7e:00:9c:6c:60:
ea:7b:ac:17:d8:05:ec:40:0d:fc:05:ee:91:82:bf:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:D0:30:C5:A6:32:C7:B5:C5:68:4E:A9:B6:86:22:08:9A:10:BA
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3230332e37382e3132362e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.78.126.0/24
Signature Algorithm: sha256WithRSAEncryption
40:90:5e:99:e1:56:31:42:96:5d:f2:ee:7a:99:ec:55:d2:7e:
2a:95:b5:7d:b2:75:98:61:a4:0a:e6:cc:82:42:5e:8e:b0:22:
9d:53:90:51:02:09:16:31:65:39:d5:f6:7a:5f:73:44:c2:ce:
59:e8:be:cb:1c:9e:83:2f:e8:67:18:45:9c:94:24:30:e3:31:
c6:0b:9c:c1:17:01:ae:a9:b8:17:c9:27:fd:30:73:57:6e:95:
b8:09:8c:88:72:ca:a1:ea:e4:5b:6a:30:ab:b1:2b:c5:e1:f4:
f7:f4:d5:08:16:6b:b0:93:5e:77:1a:3f:eb:e1:bd:21:ab:5e:
21:d0:21:cd:4d:8f:52:57:9f:ae:95:78:0c:ab:a2:e9:ee:60:
37:f3:57:13:97:49:d6:e2:dc:47:b6:df:14:48:36:a7:c9:93:
03:f1:3f:31:26:64:45:17:4a:7d:03:30:17:6d:a6:15:51:cb:
72:dc:07:d2:c2:80:50:8f:92:d5:f5:a6:81:01:f9:c4:1d:75:
91:99:0b:43:df:d8:aa:3e:ff:3b:58:f4:4d:46:af:55:03:81:
67:94:43:6c:7b:c6:b0:ca:fd:56:af:02:f3:c4:ea:01:37:d6:
58:c7:98:37:34:61:66:fe:5b:2f:84:44:dc:7b:b2:4c:3b:d3:
03:cd:60:5c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcoph7urKrn1MDPmTmUz5wfezdcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjA0MDcwNzU1MDFaFw0yMzA0MDYwODAwMDFaMDMxMTAvBgNV
BAMTKDU2NkFEMDMwQzVBNjMyQzdCNUM1Njg0RUE5QjY4NjIyMDg5QTEwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdr2v3od6iGP/D4Ovb2YwbUDjG
DNte9CVZyw9L05APrV8RlqwA5fFfteut3XkIKeJEqNVm2Y6ysgpsK5CgvBjmxoIX
RghPWTdWWq7Pm69smD/0EzVQiHUgWiWn3HruLif0MRLn2KuZUP5tku/3ga4Oiop3
3UbSQUAYsCZayi5RnPcJ/Bk7F9PA65fAZKPVO8Uz7tncoVFd2db7zBgkfHEsN9Ux
emgbZ0v88MK4snoZbIKhKamG/C3cVpGonWbhiS+MdP2kbXnyJrXeQpSYB0QYggGa
3eWoMDDmQCDEB/5AxTuD9nfXKCO7Jit+AJxsYOp7rBfYBexADfwF7pGCvyc/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVmrQMMWmMse1xWhOqbaGIgiaELowHwYDVR0j
BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG
MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2
ODdEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8wLzMyMzAzMzJlMzczODJlMzEzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtOfjANBgkqhkiG
9w0BAQsFAAOCAQEAQJBemeFWMUKWXfLuepnsVdJ+KpW1fbJ1mGGkCubMgkJejrAi
nVOQUQIJFjFlOdX2el9zRMLOWei+yxyegy/oZxhFnJQkMOMxxgucwRcBrqm4F8kn
/TBzV26VuAmMiHLKoerkW2owq7ErxeH09/TVCBZrsJNedxo/6+G9IateIdAhzU2P
UlefrpV4DKui6e5gN/NXE5dJ1uLcR7bfFEg2p8mTA/E/MSZkRRdKfQMwF22mFVHL
ctwH0sKAUI+S1fWmgQH5xB11kZkLQ9/Yqj7/O1j0TUavVQOBZ5RDbHvGsMr9Vq8C
88TqATfWWMeYNzRhZv5bL4RE3HuyTDvTA81gXA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:49 2025 by rpki-client