Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: vGy4QQS5w1hNTqDGiv5r662UDZqxem68lGhanQ4nzSw=
Subject key identifier: 5A:25:23:25:5E:EB:B6:7F:5A:81:F6:A1:26:DE:91:5A:04:DC:4B:D6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3E23C7BE1FFC445BF37C420BEA28816FDF8DBE88
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:42 +0000
ROA not before: Mon 26 Sep 2022 07:56:42 +0000
ROA not after: Mon 25 Sep 2023 08:01:42 +0000
asID: 59282
IP address blocks: 2400:d680:149::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:23:c7:be:1f:fc:44:5b:f3:7c:42:0b:ea:28:81:6f:df:8d:be:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:42 2022 GMT
Not After : Sep 25 08:01:42 2023 GMT
Subject: CN=5A2523255EEBB67F5A81F6A126DE915A04DC4BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:93:2c:b6:21:7f:92:cc:5d:bc:90:a4:99:
19:a1:34:e1:c6:2e:59:f1:d7:26:a5:5d:b3:75:41:
ef:28:21:43:17:30:12:22:06:0e:9c:e5:0b:cf:0a:
cb:3b:02:92:cc:8f:40:cb:a8:b0:49:f2:a2:3e:3a:
d6:79:8b:b2:21:2b:9e:fe:5c:00:d1:0d:f0:92:af:
29:a4:56:02:df:60:48:42:a2:87:dd:6f:2c:0f:b8:
4d:13:97:a0:5f:60:03:ea:f9:1e:f8:04:aa:bb:bd:
af:7c:01:63:46:30:52:05:d1:4f:e3:89:01:e2:1c:
81:f4:5f:a0:87:54:1c:24:a7:69:29:11:a4:9b:d7:
68:8e:75:4a:26:bd:ab:3f:6e:f4:83:20:ae:91:35:
16:a7:53:5c:a5:e3:4b:34:e7:fe:75:0b:6b:02:bd:
da:0f:23:2c:53:09:b8:ea:5d:d7:3d:3d:5e:47:27:
15:5b:12:1a:8e:04:00:68:fd:f6:f7:42:1f:e1:b9:
bb:7d:6c:e2:c7:d9:47:94:c1:7f:62:f7:01:c2:00:
2a:1d:bb:90:22:7c:93:08:7e:7d:08:b2:0f:28:02:
3a:1c:1a:db:b7:71:f4:57:12:a3:b5:3b:5a:f3:8c:
95:98:80:b1:ae:69:ad:db:17:8e:cb:20:1b:da:62:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:23:25:5E:EB:B6:7F:5A:81:F6:A1:26:DE:91:5A:04:DC:4B:D6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:149::/48
Signature Algorithm: sha256WithRSAEncryption
33:77:e2:29:57:ef:1b:99:81:37:d3:27:cc:9a:84:92:60:4f:
f4:9e:f6:6f:e1:30:8f:f9:cb:90:68:43:b1:f5:e1:05:12:ca:
6c:15:41:7b:21:7c:78:83:f7:34:5a:95:af:d1:04:a7:3c:8e:
4e:a9:a2:5a:07:a6:da:6d:c4:c1:52:77:0b:ff:6f:18:22:23:
85:2f:8c:32:d4:ee:0c:51:07:9e:d2:ea:de:48:28:f4:e7:c1:
21:0e:57:a0:ab:ad:f6:2b:39:ec:90:e2:70:86:3a:e7:2b:87:
74:e5:ed:50:58:4e:2a:dd:b4:35:e7:3a:1a:26:51:8b:38:ff:
eb:35:97:e0:65:8d:7d:57:72:c5:59:c3:95:9d:97:00:f3:62:
fe:83:e6:a3:ec:22:13:a1:f4:fb:64:80:76:ac:a0:1a:f5:32:
e3:9e:01:1d:cc:23:43:db:0a:58:f4:e5:de:1e:9d:6e:35:5b:
ca:27:f4:9a:d5:36:1c:e3:b4:3b:d3:ec:f5:fc:1f:33:e1:32:
af:33:16:27:08:48:88:d7:a9:f9:b5:ea:ac:21:89:1e:ee:8b:
01:26:9d:25:7b:35:8d:ef:65:ed:35:37:28:27:c3:ae:9e:4a:
d5:4a:5c:d1:6b:da:60:17:f9:62:07:6e:8a:59:a3:3e:81:de:
81:4d:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org