Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3a2f34302d3430203d3e20313339393439.roa
File: 323430353a616163303a3a2f34302d3430203d3e20313339393439.roa (raw, json)
Hash identifier: 2Nx5B07bey23co4AWsu4YhoNjEbm4eeKNfQGttmy3IM=
Subject key identifier: EC:27:13:D6:59:31:9A:B0:27:30:AB:08:93:02:17:15:A6:9E:34:71
Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial: 7FEDCCDDF5D2CD9884BC128E3CE1B104B460F8C4
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3a2f34302d3430203d3e20313339393439.roa
Signing time: Sat 17 Dec 2022 20:24:11 +0000
ROA not before: Sat 17 Dec 2022 20:19:11 +0000
ROA not after: Sat 16 Dec 2023 20:24:11 +0000
asID: 139949
IP address blocks: 2405:aac0::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ed:cc:dd:f5:d2:cd:98:84:bc:12:8e:3c:e1:b1:04:b4:60:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Validity
Not Before: Dec 17 20:19:11 2022 GMT
Not After : Dec 16 20:24:11 2023 GMT
Subject: CN=EC2713D659319AB02730AB0893021715A69E3471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:0e:6c:52:0b:ec:88:88:fd:74:b0:45:8a:
67:1b:02:06:bc:2c:a2:4f:03:f8:d6:64:f8:82:89:
c5:57:5c:cb:3b:b6:47:92:06:45:77:65:54:2e:ef:
e0:6e:77:2f:cf:f4:7e:5a:5b:6e:15:5e:e5:dd:8e:
63:1d:0d:2d:18:05:74:05:f7:9f:56:62:57:c6:0a:
5d:2f:b0:fd:75:f6:62:a2:ff:8c:d9:e6:a7:30:7a:
3f:17:13:df:36:c4:4f:ad:4a:a9:9c:4e:a9:94:28:
6e:75:b3:4f:f4:bf:f4:5c:14:39:04:65:2f:a5:aa:
28:cc:f7:b9:84:67:74:82:02:6a:f3:41:10:ea:56:
c6:9a:ee:c9:de:ea:af:4d:e7:ec:de:dd:c0:db:e0:
f2:21:b0:eb:86:f8:b5:5b:10:cb:30:fa:ea:e4:a6:
21:d2:4c:be:45:1a:9a:99:4d:42:64:a5:a6:9c:b5:
06:6a:af:a1:6f:8e:95:4e:31:ef:47:da:55:02:7a:
e9:89:7c:79:10:c9:c8:d3:bf:e9:2f:d1:c9:d1:11:
bd:3c:b7:ff:43:e7:69:5b:cc:ff:68:11:5a:3c:60:
27:d7:b3:16:5c:10:10:e0:d0:18:eb:bb:7e:c0:21:
06:a4:f1:a0:48:ef:4e:12:14:07:b8:f2:e7:ce:06:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:13:D6:59:31:9A:B0:27:30:AB:08:93:02:17:15:A6:9E:34:71
X509v3 Authority Key Identifier:
keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3a2f34302d3430203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0::/40
Signature Algorithm: sha256WithRSAEncryption
43:6f:fd:c6:c9:f4:eb:fe:20:05:8f:69:2b:6e:f7:9e:35:3e:
ca:bb:b0:cf:b2:4e:3b:37:88:65:a3:51:7e:df:f4:df:b0:75:
ba:c6:8e:1e:76:09:6c:b1:f3:a3:f3:d1:71:75:74:7e:06:0c:
4f:14:36:d6:78:2f:b8:59:76:14:55:fe:a7:91:40:d1:5f:31:
f0:ae:08:57:23:76:a6:ca:f2:6c:5b:32:e3:46:f8:78:f3:27:
5d:a0:56:47:1d:61:b2:de:b1:dc:86:95:9c:0c:51:5f:49:9b:
ec:09:69:75:3e:d8:25:67:38:86:6c:7c:f5:3d:ab:85:f0:8c:
fe:19:3b:2d:58:b2:17:67:9a:d3:94:1a:d6:a1:b3:e8:22:33:
ce:cc:be:f2:ff:c0:d9:52:e1:90:a6:49:2f:bf:74:bc:9c:80:
3a:7d:82:fc:ee:51:75:e5:51:c4:fc:df:88:8f:08:27:c9:9a:
0c:ef:3d:c4:32:bb:47:1c:0c:92:24:b7:04:38:ac:c6:37:43:
9d:f5:b9:81:b5:42:1d:83:86:19:09:e8:bc:d9:80:dc:02:a5:
b3:46:6d:eb:fa:28:39:d0:f0:05:42:bc:d7:83:da:14:06:f6:
18:95:63:87:e2:e3:09:25:35:fa:a2:24:27:e4:99:62:99:c2:
dd:7b:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org