Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa
File: 323430323a326134303a3a2f33322d3332203d3e20313336383733.roa (raw, json)
Hash identifier: X8ihdU3bujuaBEN6j6tHWLgSrnCrcHvt02WdvvrDo1E=
Subject key identifier: E6:4A:14:47:6E:B1:83:18:31:27:98:5B:0A:8D:31:AC:B6:9C:FF:75
Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222
Certificate serial: 107A51961BD060BE5891652E25B6BBF98D64A2D2
Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa
Signing time: Sun 28 Aug 2022 23:09:01 +0000
ROA not before: Sun 28 Aug 2022 23:04:01 +0000
ROA not after: Sun 27 Aug 2023 23:09:01 +0000
asID: 136873
IP address blocks: 2402:2a40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7a:51:96:1b:d0:60:be:58:91:65:2e:25:b6:bb:f9:8d:64:a2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222
Validity
Not Before: Aug 28 23:04:01 2022 GMT
Not After : Aug 27 23:09:01 2023 GMT
Subject: CN=E64A14476EB183183127985B0A8D31ACB69CFF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:dd:49:5e:a6:05:94:e6:00:46:72:87:b6:
38:5f:43:56:b5:01:fc:26:5f:28:b9:ca:86:95:eb:
08:83:82:25:14:e4:de:e4:41:4f:be:b0:f6:0b:06:
55:c4:5e:90:1c:68:1b:ed:8a:f4:c2:80:83:40:0a:
ef:29:3e:9c:b8:f9:d7:49:bb:b6:ff:ec:d4:4e:d5:
26:35:60:dd:60:d1:f1:52:df:15:03:dc:12:b4:8e:
89:45:91:c3:36:87:1f:eb:82:0d:ef:19:2f:61:8d:
10:ff:ac:07:49:c0:7f:16:23:c4:94:43:23:da:c4:
08:4f:c0:d1:cd:e8:38:39:93:50:e7:43:d5:b0:21:
f7:c2:4c:b5:b9:59:cc:82:48:e9:5c:a1:16:69:1d:
c0:1f:aa:de:01:3b:cb:9c:f7:f7:0f:5f:1b:94:41:
e8:96:42:e7:3a:3d:66:46:57:80:80:c1:2e:18:5e:
dd:32:47:b9:cc:7c:26:ee:05:c8:2a:cf:13:78:2b:
e2:70:c2:25:8b:c4:19:98:1c:f8:bc:0d:57:ea:5b:
d0:d1:71:25:ad:3a:d6:ef:d4:b5:bc:80:c1:dc:3d:
e5:27:08:e6:80:38:ca:a1:f2:4d:82:c3:0c:01:60:
b8:2d:d0:56:e2:5b:24:6b:58:15:0f:82:48:5c:b6:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:14:47:6E:B1:83:18:31:27:98:5B:0A:8D:31:AC:B6:9C:FF:75
X509v3 Authority Key Identifier:
keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
5e:b5:5b:b1:5d:2d:61:8c:1b:5c:c8:85:77:ab:b0:82:0f:79:
01:df:7c:dc:bf:c2:d8:f7:3d:a4:b9:df:5b:12:eb:25:a4:33:
35:42:9f:51:71:2a:3d:7f:de:7c:6c:d6:f0:89:e3:df:35:96:
cf:b1:41:e3:e1:3b:d0:46:3c:13:63:a6:9f:74:dc:fb:70:ba:
89:44:69:52:12:fb:63:ca:94:99:6d:90:5f:e0:f1:28:ae:af:
24:bc:81:18:ce:8c:70:b6:82:8f:af:86:d7:55:0c:a7:84:9f:
91:e7:b7:d9:68:61:5c:cc:18:e7:59:e8:8d:8a:24:00:dc:73:
7c:b0:53:4c:d4:a4:b6:20:1e:6e:3c:dd:50:09:3d:da:db:37:
5b:95:8b:97:49:a8:2d:9e:5c:12:88:4a:45:5f:7c:a2:1c:7d:
8b:9c:85:dc:0e:1e:a1:30:18:1b:d8:5b:9c:7c:58:7c:68:9a:
29:fe:c8:7f:70:92:f8:fb:48:f9:c8:9b:26:fc:88:ec:dd:db:
9f:58:eb:f3:07:d3:a1:92:ba:bd:f4:1b:90:3a:87:4c:96:04:
53:b5:e3:62:23:fc:4c:a7:40:84:e5:3d:88:50:9f:e8:ab:92:
9a:27:c0:4b:72:5d:ea:bb:2b:a0:31:e1:3e:4b:4c:ec:d9:6a:
f8:8e:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org