Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3134633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LrXmgwE34j+P0KnC7aCPdoAI70q6B50f+vrldVHKCJQ=
Subject key identifier: 11:0B:FC:37:50:ED:DC:E0:BD:D0:02:70:12:10:CA:3E:DC:6E:6A:45
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 23FEBEBE4874B8855A75C9E883543F568EADA9E1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:37 +0000
ROA not before: Mon 26 Sep 2022 07:56:37 +0000
ROA not after: Mon 25 Sep 2023 08:01:37 +0000
asID: 59282
IP address blocks: 2400:d680:14c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fe:be:be:48:74:b8:85:5a:75:c9:e8:83:54:3f:56:8e:ad:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:37 2022 GMT
Not After : Sep 25 08:01:37 2023 GMT
Subject: CN=110BFC3750EDDCE0BDD002701210CA3EDC6E6A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:79:34:71:65:37:66:29:c5:af:cd:05:35:
c4:05:e1:ea:6c:aa:bd:c3:ec:b5:66:88:d3:3f:fb:
88:cc:ad:76:9c:bd:6e:e1:68:d1:e9:e7:f7:43:28:
7b:b2:ef:53:e4:be:0f:de:89:dd:33:26:a9:f3:3d:
5a:2a:82:45:b8:a5:7e:71:d4:e2:b8:27:92:07:c2:
57:10:30:9a:e9:02:65:ad:00:89:bc:0e:70:a6:e0:
17:77:1b:9b:32:2b:c9:6c:8b:22:ff:d7:eb:b2:67:
16:78:c2:5a:47:bc:0e:ce:93:a9:4a:84:37:e8:4b:
87:e9:f3:9e:b2:8a:f9:ca:8b:3b:23:58:78:87:b5:
db:c8:9a:0f:11:a2:0e:d4:d5:f1:48:b7:d8:11:76:
3b:e6:23:70:bb:6b:ea:51:06:40:4c:bc:f4:c2:78:
c0:da:71:37:5a:5c:db:da:d9:3a:b2:3b:59:07:90:
c9:28:b7:06:e8:0f:c2:57:6b:dd:cf:e3:0a:e0:02:
87:32:83:a3:a8:32:7d:ea:83:e8:82:2a:af:a2:93:
a4:8b:67:77:4b:6f:7a:fa:3b:d2:0b:44:17:d1:11:
6f:a4:ec:34:83:b5:c6:17:ba:7b:98:58:58:ed:c4:
9c:42:97:ee:c3:94:81:9f:eb:eb:8b:59:21:d9:2d:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:FC:37:50:ED:DC:E0:BD:D0:02:70:12:10:CA:3E:DC:6E:6A:45
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:14c::/48
Signature Algorithm: sha256WithRSAEncryption
aa:e4:d9:e5:c7:24:fb:bc:2d:ab:ce:e6:73:99:04:cf:3e:52:
59:64:c9:29:e5:cd:2c:5b:45:13:6d:58:29:b1:c9:d5:1d:bd:
fc:95:03:7a:3a:c6:d9:6b:43:38:e3:6f:24:7e:fc:65:e7:53:
a2:e3:d5:3e:59:bb:f6:84:69:e4:75:5f:c9:b6:c2:4f:42:48:
09:8e:bc:11:ec:c3:9b:9a:46:33:5d:65:c8:ba:c7:62:93:29:
ef:4c:1d:ee:f2:88:d1:51:45:76:6e:83:24:6a:da:9e:62:87:
e4:b6:74:f7:31:1f:6e:37:4d:98:52:f3:c7:74:6d:89:15:68:
50:8d:10:ed:ba:73:b0:04:7e:7e:80:e6:21:c9:25:26:82:33:
57:6c:e3:49:f7:d6:82:4e:24:cd:e5:db:25:df:c6:c6:7f:2d:
08:fb:4c:e7:1c:8d:22:5e:af:56:35:06:2e:2f:82:3e:3c:8a:
d6:c3:11:bd:39:bb:eb:44:d3:90:df:e9:8a:81:78:8d:bb:22:
f9:5b:5d:38:62:f5:0f:d9:17:ea:d4:d1:45:4c:32:5f:62:04:
48:d7:67:f7:ee:03:c3:8b:5b:97:4d:c2:fd:9b:23:e9:05:ba:
ba:75:c1:71:11:5b:dd:87:5b:fe:6b:56:d6:c6:9b:ba:0a:39:
5c:13:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org