Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3334203d3e20313430343233.roa
File: 323430363a323063303a3a2f33342d3334203d3e20313430343233.roa (raw, json)
Hash identifier: MijtQBbNan68Yw6202o3pCaLVtadIn/HoPT/5zjfOPA=
Subject key identifier: C0:F7:A0:DC:4D:85:F9:A6:D1:EA:26:18:87:04:87:96:BC:C1:83:31
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 7A03EDD735438F1DBBFFEBF1E9F56131CCD03FE2
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3334203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:27:03 +0000
ROA not before: Thu 08 Sep 2022 04:22:03 +0000
ROA not after: Thu 07 Sep 2023 04:27:03 +0000
asID: 140423
IP address blocks: 2406:20c0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:03:ed:d7:35:43:8f:1d:bb:ff:eb:f1:e9:f5:61:31:cc:d0:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:22:03 2022 GMT
Not After : Sep 7 04:27:03 2023 GMT
Subject: CN=C0F7A0DC4D85F9A6D1EA261887048796BCC18331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:1d:2d:a0:1c:4b:4c:58:d5:a4:9c:ab:93:
f2:96:15:da:0b:1f:61:dd:61:6e:53:ef:90:2c:70:
d6:60:e9:7d:ee:6e:db:05:eb:39:bc:2a:db:d4:85:
62:16:aa:42:f0:99:d4:fd:ee:ec:26:f5:78:12:52:
93:20:71:e6:c6:4a:d7:b8:9b:a2:a6:df:e0:0f:fd:
f6:b1:d2:5b:21:ac:1a:c4:94:50:d5:c0:9e:03:d6:
f1:3f:b2:c7:e2:12:30:03:ff:b5:1a:c5:90:6f:ec:
04:87:67:22:3b:cb:23:86:0d:dc:9f:43:61:3d:88:
36:a8:1c:77:88:8b:b6:85:24:4c:ac:00:91:b8:c8:
16:0c:d2:1d:62:5e:7d:ef:8f:74:2c:d8:ed:8b:e2:
d6:59:a4:bd:ea:16:05:50:3f:91:8c:71:b7:33:32:
eb:e0:77:80:f6:bc:9b:eb:71:31:ce:26:e2:09:cf:
19:9a:bf:a3:a6:36:b7:33:06:98:a5:f3:8d:6c:b9:
91:30:13:21:54:f3:f2:e9:7c:f4:6f:eb:13:a8:85:
51:06:60:0a:68:5e:0c:f5:2b:10:c2:ec:b9:5e:64:
b5:cd:29:bc:cf:29:44:1b:f0:02:b7:c9:c3:97:77:
46:ca:ee:96:40:1d:33:b1:e6:8d:61:c1:ea:58:63:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:A0:DC:4D:85:F9:A6:D1:EA:26:18:87:04:87:96:BC:C1:83:31
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33342d3334203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0::/34
Signature Algorithm: sha256WithRSAEncryption
8a:bd:4f:f2:14:0d:86:22:aa:35:0e:65:76:fc:af:35:c5:56:
ba:7a:09:cc:69:c8:98:33:79:58:45:f4:0a:1b:cf:93:04:b0:
15:0e:4c:d4:49:cb:a5:d8:0a:a7:0f:88:41:4a:43:05:13:a0:
42:d3:b9:4e:f9:25:08:a4:42:7d:0d:14:d8:03:6e:36:0e:ef:
d7:69:95:90:9a:e9:d8:35:51:ee:1b:93:c5:41:b3:27:a2:97:
20:b3:e8:01:18:a4:e6:ef:d0:5a:b5:71:bc:bd:80:15:a1:57:
27:9b:e1:f3:df:90:9a:f4:3d:5c:08:4f:0b:3c:0e:5e:b8:ee:
7b:67:6a:76:30:75:a1:15:67:f9:ef:3e:bd:99:0f:53:81:c4:
2a:50:bd:5e:4f:7b:14:3f:7f:26:70:e0:2a:63:68:8f:af:ee:
08:50:de:94:3f:fb:4d:b3:03:2e:12:0f:94:66:40:6a:24:c0:
e8:61:d6:24:21:a2:06:78:7a:18:23:79:23:37:38:7a:21:dc:
c6:0c:43:c3:e4:70:6c:1d:dd:a8:2f:13:15:7a:b3:ed:9b:0e:
e1:fa:43:92:85:80:97:9c:00:c5:33:f8:ec:28:bd:af:83:4a:
48:9c:20:d4:eb:e2:71:67:ba:54:1a:96:3c:ed:a0:6e:21:58:
4f:5e:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org