Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: kVEFuGtuEIMbwtrYFtKJOQXnQwssk3ZexYNONkAIm74=
Subject key identifier: 5C:82:0D:9B:C0:0E:6D:94:09:FA:E1:27:57:D8:EC:C6:2D:EC:D5:4E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 52C69EA1EF60AD4CC3A0F78CCEB436936117AD5A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:58 +0000
ROA not before: Mon 26 Sep 2022 07:56:58 +0000
ROA not after: Mon 25 Sep 2023 08:01:58 +0000
asID: 59282
IP address blocks: 2400:d680:161::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c6:9e:a1:ef:60:ad:4c:c3:a0:f7:8c:ce:b4:36:93:61:17:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:58 2022 GMT
Not After : Sep 25 08:01:58 2023 GMT
Subject: CN=5C820D9BC00E6D9409FAE12757D8ECC62DECD54E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:4a:87:ab:8c:14:ba:83:56:cd:df:b4:0b:
ca:7c:8f:0f:dc:7e:28:a1:3d:67:1f:67:d4:a1:9b:
64:db:04:c5:0b:2b:1b:28:e0:9c:63:a9:77:6b:76:
d8:ca:6d:31:3e:55:11:84:1b:33:2c:ec:96:23:83:
c0:cd:84:69:aa:4f:d4:f3:12:d7:ef:47:ac:48:63:
17:f3:89:03:b3:80:f2:bb:3f:8d:84:c5:76:74:9e:
2d:94:49:26:a6:3f:bf:6c:59:8a:53:9d:81:dd:d8:
d3:02:ff:19:d4:1d:c6:7f:b0:ef:c9:bc:71:38:5c:
92:b7:0c:a8:18:02:61:1a:53:30:36:36:c5:9b:fa:
61:9b:7c:c3:e0:97:b3:b7:7c:8f:93:96:e7:56:8d:
f6:b4:e8:7b:ed:e4:03:ca:5d:1f:d5:ea:9c:fa:2e:
ce:67:06:12:f5:03:68:56:93:5c:79:0a:1b:02:26:
84:4e:8d:38:48:e5:5f:6e:f4:99:a3:0b:4e:5b:11:
52:c3:52:39:8f:58:e9:b2:4a:fd:57:34:e1:51:5d:
41:ec:57:5a:c7:69:27:0b:66:22:38:34:c9:00:50:
e8:ed:4d:28:ff:c2:e0:3e:39:d1:bd:3d:e6:69:c3:
ce:2b:d1:ea:a7:e4:82:e1:bd:42:73:d8:c3:7d:28:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:0D:9B:C0:0E:6D:94:09:FA:E1:27:57:D8:EC:C6:2D:EC:D5:4E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:161::/48
Signature Algorithm: sha256WithRSAEncryption
9c:0e:78:9a:8a:2f:fa:5e:a7:17:ca:e7:f6:69:5c:fc:a0:a7:
f1:be:1b:cb:a6:dc:bb:71:58:d1:f3:16:0b:ee:99:d5:16:16:
0f:8d:dc:a3:68:1e:ec:e7:fd:9e:ed:49:6c:00:36:81:18:32:
17:0a:fd:cd:7e:3e:1b:fc:92:c8:0a:0b:ac:06:74:11:65:08:
34:3e:5a:b6:bc:33:b4:b8:24:7f:4f:b7:59:ac:21:59:7d:fc:
c5:df:a8:37:82:4e:6b:6b:70:af:7d:60:f5:44:28:65:d3:ba:
c1:5a:8e:a0:8b:89:43:d0:08:35:3d:d9:08:c4:40:58:54:33:
b6:8f:0b:e2:3a:ce:b6:d7:89:20:e8:77:1a:aa:3b:56:32:8a:
d8:a3:b7:c3:fd:b0:e1:a6:d2:89:05:3b:71:12:ab:71:58:0f:
35:34:f1:31:89:5c:69:7d:c1:fb:f6:c7:1d:6f:67:c5:4d:b9:
89:cf:03:b4:a4:15:4b:8d:8b:69:c5:25:40:3c:71:c2:3e:87:
24:fb:46:b0:7d:8e:9e:cb:6f:4f:a8:7b:92:96:17:c0:27:8b:
95:9b:ad:3b:f0:d3:6f:e6:e3:fe:43:5d:50:87:5b:60:bd:ca:
a5:e3:62:d2:f6:5f:26:4e:f8:48:99:cb:80:dc:a2:2f:9d:ac:
d4:60:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:22 2025 by rpki-client