Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33352d3335203d3e20313430343233.roa
File: 323430363a323063303a343030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier: dkD9q6AVjXWsbMoYIar0O00so/p5skXLRfvtbkR3uts=
Subject key identifier: F3:C0:4C:C1:EC:C4:86:40:F4:BA:23:AE:D4:35:A1:64:63:F4:7F:0B
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 0422D5ECF3EB6CB2AFAEFE6F98BE454FC56D80DF
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33352d3335203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:27:55 +0000
ROA not before: Thu 08 Sep 2022 04:22:55 +0000
ROA not after: Thu 07 Sep 2023 04:27:55 +0000
asID: 140423
IP address blocks: 2406:20c0:4000::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:22:d5:ec:f3:eb:6c:b2:af:ae:fe:6f:98:be:45:4f:c5:6d:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:22:55 2022 GMT
Not After : Sep 7 04:27:55 2023 GMT
Subject: CN=F3C04CC1ECC48640F4BA23AED435A16463F47F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:57:4d:8c:f4:b7:59:4f:2f:59:18:0f:f7:
a3:11:e1:4f:fb:2f:6d:d4:9e:50:20:42:cc:01:65:
31:81:a2:76:1d:53:bb:34:4e:31:6a:e0:05:ff:cf:
5a:5a:fc:2a:4f:8f:c2:be:38:30:c8:c3:5d:6a:c1:
fa:8f:42:75:4d:0a:90:ba:f2:a3:b7:fc:66:42:50:
ec:12:ec:3e:4d:83:69:4c:1a:35:c9:fa:c8:67:19:
91:9c:2f:cd:19:99:2c:0d:1c:40:61:df:b9:11:6d:
03:55:62:6c:bf:4f:7b:52:ab:a6:1d:a8:49:25:06:
8e:2b:75:11:09:d9:62:a3:e4:84:0b:ed:ff:4e:97:
ae:80:db:0b:f1:0d:78:8c:06:e2:7a:be:05:2e:8d:
63:4c:41:95:92:6d:7a:06:63:70:6f:05:d2:ef:8b:
4b:b5:8f:46:75:4c:65:35:d3:6b:b0:87:96:ed:0a:
00:c2:6a:71:8a:d6:f1:fc:56:c4:9b:78:b1:b8:e4:
60:b8:4f:d3:f1:b8:0b:8c:06:db:74:31:73:18:8e:
15:a8:2d:a7:12:74:e4:d1:b1:58:90:21:cd:58:4f:
31:2f:80:51:bb:4d:db:17:97:e6:6b:13:bf:07:1c:
98:cb:ee:9d:2e:5d:62:21:23:7a:96:d0:ad:4e:8d:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:4C:C1:EC:C4:86:40:F4:BA:23:AE:D4:35:A1:64:63:F4:7F:0B
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33352d3335203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:4000::/35
Signature Algorithm: sha256WithRSAEncryption
be:a4:6f:ca:66:77:e3:b0:e8:22:be:db:aa:4b:96:01:4b:a6:
72:bf:a8:03:f4:40:47:63:56:73:93:77:04:74:f7:a3:de:92:
6c:70:18:8f:28:91:17:fd:c6:d2:a6:53:0b:2b:d4:0c:9f:56:
bc:81:e6:ea:fb:f5:3f:93:2a:af:bd:5c:b1:25:1d:3c:e8:53:
e8:b3:a4:73:22:3c:7e:b9:07:64:b9:e8:8e:52:e5:a1:bf:c4:
c3:a0:fd:0c:15:10:4c:d8:bb:d2:52:52:1c:38:ee:1c:c0:ee:
16:f1:02:77:cb:61:f3:33:be:37:da:93:29:75:65:88:91:c4:
4d:4a:31:e9:d0:d6:6c:b5:8d:1d:6e:f0:06:11:26:4c:7c:43:
c0:ba:1f:a4:8d:59:7e:7a:d6:fe:33:f7:ce:83:a0:e8:61:e5:
b3:51:9d:cf:bb:40:a5:32:d2:ce:3b:46:2d:71:5c:f2:ce:bd:
42:14:75:b3:a5:a6:9f:44:b4:91:b2:82:7b:61:b6:97:31:3a:
fd:74:16:54:d1:ee:e6:72:c4:56:39:4e:f5:28:70:85:b6:23:
08:5a:6a:78:27:10:fa:06:cf:02:c9:e0:cd:4c:ab:2a:b6:d5:
ee:dd:53:7b:ac:32:28:69:d8:c6:d6:a4:1e:b8:8c:1e:54:0d:
99:9d:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org