Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a633a3a2f34382d3438203d3e203234323033.roa
File: 323430303a393830303a633a3a2f34382d3438203d3e203234323033.roa (raw, json)
Hash identifier: tm5ePKO7O3oFO+PPQmJx4IeLSBhIvu1z5To6ewuOSkI=
Subject key identifier: 4F:C8:0C:AD:B3:EA:39:3B:14:45:8E:8B:AC:89:30:F7:2C:83:2B:6E
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 36CF271C14982BD6B272446F58F36DAC3F65FEC0
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a633a3a2f34382d3438203d3e203234323033.roa
Signing time: Fri 14 Jan 2022 07:03:06 +0000
ROA not before: Fri 14 Jan 2022 06:58:06 +0000
ROA not after: Sat 14 Jan 2023 07:03:06 +0000
asID: 24203
IP address blocks: 2400:9800:c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:cf:27:1c:14:98:2b:d6:b2:72:44:6f:58:f3:6d:ac:3f:65:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Jan 14 06:58:06 2022 GMT
Not After : Jan 14 07:03:06 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:2a:2a:bc:d5:e7:46:ca:5f:47:b5:95:c3:
49:61:10:a8:81:e3:50:26:de:5f:e4:49:52:88:ee:
46:b2:8d:42:5e:6f:cf:80:d6:9d:00:82:34:3b:0a:
8d:f9:7d:9f:cf:05:3a:1e:a6:1b:97:03:ae:9b:e2:
b9:4c:b6:ba:18:08:0f:ba:19:18:6c:01:26:f1:06:
9f:30:1e:d4:b2:11:b4:b5:fb:fe:7c:09:b9:ac:e6:
a1:7e:2a:c0:52:6a:bc:9e:68:2a:80:3b:4d:7c:af:
0f:20:1f:dd:b6:15:77:4f:cb:52:5f:8a:78:e1:ba:
83:88:8f:f1:4a:ac:43:67:16:21:22:d1:21:5c:45:
f0:45:c2:81:f8:06:af:dc:5a:6b:ef:9f:4c:49:d6:
6e:85:22:f0:53:e8:60:4a:6c:a5:49:f2:31:fb:d5:
4b:18:18:87:03:da:21:c9:88:db:3b:69:09:b9:f0:
94:99:de:77:95:c0:aa:49:42:17:e5:ef:33:00:5e:
e2:9d:db:93:27:18:ec:5b:c1:59:cb:fd:06:e0:86:
30:e8:7a:5e:c8:b5:e8:48:24:e1:b5:21:41:eb:76:
f8:6d:00:58:b9:ad:19:07:b0:48:14:0a:64:6d:52:
10:fb:af:f9:b9:b7:d0:de:6e:b6:82:c1:11:5c:d2:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:0C:AD:B3:EA:39:3B:14:45:8E:8B:AC:89:30:F7:2C:83:2B:6E
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a633a3a2f34382d3438203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:9800:c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:95:8d:fa:0b:a0:ae:99:b8:bf:f1:43:08:ce:2b:d7:24:a2:
07:29:b6:bb:35:dc:19:df:e0:3d:e8:dd:a5:72:e0:a8:a7:77:
99:6f:40:8c:9d:74:b5:93:f1:40:2a:0a:b8:3e:8f:58:5a:40:
65:2e:8d:0e:c8:00:50:19:25:cd:a0:fe:e1:9b:db:6c:3b:fa:
c4:38:5f:19:81:20:3a:d7:e2:9b:bc:47:4d:05:1f:e1:a6:e5:
88:cc:8d:79:93:d8:bf:38:49:b2:e4:ff:b7:f2:4e:43:78:c1:
5c:15:74:f5:65:a5:40:c3:33:39:a1:8d:1c:1d:6d:c6:6c:28:
99:00:e0:f7:9b:f8:b6:7d:e6:52:66:59:46:f4:fb:2e:43:01:
3d:7d:91:3a:5d:99:b9:6a:9c:a7:47:02:2b:4a:02:1c:43:21:
ba:3c:ed:53:b9:b5:fa:03:9d:0a:e6:c0:eb:df:b5:d8:05:6f:
df:2f:53:e3:dd:9a:81:3c:f4:8c:16:66:77:d8:88:b3:5e:81:
2f:0a:16:1f:fb:c3:92:00:52:bb:aa:78:56:db:1f:0a:50:f0:
6f:0b:f2:51:56:61:ec:0c:0e:a2:68:7c:90:2b:3a:e2:41:c6:
11:ab:bd:1e:34:7d:5d:a6:44:08:f3:a4:46:d4:eb:f7:b4:9e:
4c:1a:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:49 2025 by rpki-client