Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: QvRFO+WJjoAbBarijUB23PqhaZxCx5qozbUYeEOiAbI=
Subject key identifier: 59:23:82:79:92:EE:57:E1:75:EE:8B:9F:45:E1:43:E6:CA:F0:EB:84
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5B2830C35B8D39D3EA6891DA1AD7A0AAAE6DC542
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:03 +0000
ROA not before: Mon 26 Sep 2022 06:55:03 +0000
ROA not after: Mon 25 Sep 2023 07:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:28:30:c3:5b:8d:39:d3:ea:68:91:da:1a:d7:a0:aa:ae:6d:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:03 2022 GMT
Not After : Sep 25 07:00:03 2023 GMT
Subject: CN=5923827992EE57E175EE8B9F45E143E6CAF0EB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:39:b1:07:40:ef:ff:1c:8a:a2:73:7f:d4:
17:16:0e:fc:4d:a3:59:0c:66:a9:c1:ae:81:f7:b9:
ce:0f:5c:26:02:f9:8f:2c:17:0d:2a:d0:40:ec:1c:
ea:4d:47:ac:1c:75:e7:ce:81:8d:c6:70:e9:c4:c5:
9f:41:37:ed:4b:72:15:a0:3f:2c:97:4d:d1:9c:9f:
e0:af:9b:0b:29:1c:6e:42:4d:e6:61:e7:48:53:5d:
7f:3d:66:3f:75:a6:12:76:75:44:66:a7:f2:a6:14:
33:10:94:24:7c:84:64:ce:b1:93:a1:bf:48:4a:6b:
b8:f4:df:a1:21:fa:ce:13:f5:52:bf:18:12:ac:85:
b3:d4:c7:00:14:ee:68:10:6a:81:a5:f0:6b:ab:8b:
4d:d3:cc:c5:31:90:8f:53:7a:1c:b9:cc:03:d2:70:
51:4d:86:b6:f5:8a:91:ce:8d:c9:fb:81:22:0b:e5:
7c:36:60:48:44:a7:e3:bf:e2:f0:fd:ff:00:e4:7a:
4d:5a:b0:d0:9f:1a:77:20:78:3b:88:7a:bb:b8:56:
fb:f7:35:cf:8a:96:7c:01:cb:7d:b0:6f:85:01:72:
f7:e7:e6:24:ba:42:43:54:13:7d:20:53:d1:68:68:
be:99:aa:0f:8f:78:0d:59:6e:7d:99:d8:bb:3e:87:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:23:82:79:92:EE:57:E1:75:EE:8B:9F:45:E1:43:E6:CA:F0:EB:84
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:12::/48
Signature Algorithm: sha256WithRSAEncryption
2f:d3:4e:30:39:49:f8:0f:d3:6f:6f:08:d1:b4:ea:a1:f8:9a:
40:0c:4d:8b:e4:d8:b0:df:04:e4:8e:54:f3:16:79:c1:a2:17:
84:41:57:cc:26:63:11:89:be:5a:24:5f:8e:1e:05:60:e2:b1:
24:28:46:b1:ba:97:37:c2:a4:8e:a2:7e:80:87:4c:b3:4a:03:
5f:d1:0f:d7:0a:c1:c6:6f:fc:18:b9:28:ad:99:b4:5a:7c:2c:
f8:bc:79:1a:c8:e6:36:db:9f:5e:9a:38:18:94:d5:38:cb:1b:
e4:f1:4a:8d:49:93:4d:80:ce:c1:fa:63:e6:59:8f:8e:c0:80:
6a:ea:3c:0e:30:da:a9:15:98:de:7d:13:59:c2:ae:2c:74:8c:
17:f0:c0:09:5e:b3:a3:7d:5f:f6:b5:88:c3:0b:99:a9:39:86:
4a:72:6f:d3:a1:8d:39:89:2e:8d:5f:52:c9:51:6c:b9:cc:fd:
9a:f9:09:73:e9:85:17:70:f0:0d:0b:31:9a:83:3e:dd:a9:e8:
a7:cd:b2:f0:5a:4f:64:ee:5d:23:ae:58:fa:c3:08:7c:74:4c:
37:46:0d:7a:3c:b2:6b:2d:66:16:c0:1c:bb:18:6f:95:ab:95:
12:b6:01:4f:65:55:53:96:8f:36:fc:b6:74:f5:39:79:99:d2:
89:aa:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org