Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MX/N8WdYFdf6F5yrArDYNHwu+qHyGXL0raR8eyTNlYU=
Subject key identifier: A5:BC:88:B8:FD:2A:97:2A:5D:A0:C8:EB:2E:AA:12:6B:69:62:90:78
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 46A2C817A1E5E74B2C59FE284583E9D034E4EF6F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:16 +0000
ROA not before: Mon 26 Sep 2022 07:57:16 +0000
ROA not after: Mon 25 Sep 2023 08:02:16 +0000
asID: 59282
IP address blocks: 2400:d680:16e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a2:c8:17:a1:e5:e7:4b:2c:59:fe:28:45:83:e9:d0:34:e4:ef:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:16 2022 GMT
Not After : Sep 25 08:02:16 2023 GMT
Subject: CN=A5BC88B8FD2A972A5DA0C8EB2EAA126B69629078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:3d:69:a3:68:7d:06:18:fb:c5:7b:ba:e9:
40:0f:cc:04:23:4d:5f:be:d4:de:32:f6:42:09:a3:
65:8f:3b:bd:d9:c3:cf:13:c3:14:14:a1:99:25:53:
1a:ab:22:36:aa:a6:dc:4b:4c:20:47:48:d5:29:d3:
d7:0b:e6:a5:fc:fd:2d:93:61:63:16:70:dd:7f:2c:
77:73:1d:75:ab:57:1b:9a:de:e6:8c:ac:71:85:16:
35:fa:13:0d:48:d3:21:8e:6f:a3:85:85:ec:c1:d6:
40:48:b0:29:fa:72:d1:30:91:e3:59:36:bf:54:f9:
94:aa:fa:1e:4b:56:ef:57:20:86:3f:f1:93:e7:f7:
22:74:7d:e5:49:ea:36:7d:6c:18:9f:4d:03:19:73:
ad:5a:8c:98:b7:81:64:89:24:51:00:ab:c4:64:1f:
6f:2a:b0:f2:cd:ff:8c:25:9a:ba:12:83:f6:8d:34:
fd:f9:ee:a5:99:50:59:23:f7:35:c7:46:b7:2e:ea:
e8:8f:94:6c:0c:a4:83:26:49:50:6a:97:a2:32:95:
24:4b:31:7d:c7:03:f2:fb:a8:d6:3c:27:fb:2c:fd:
20:94:ba:79:45:65:b1:80:03:79:f6:25:e2:9d:f9:
7c:ca:3d:78:8a:0d:c7:da:03:f4:33:e0:c8:40:44:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:88:B8:FD:2A:97:2A:5D:A0:C8:EB:2E:AA:12:6B:69:62:90:78
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16e::/48
Signature Algorithm: sha256WithRSAEncryption
64:6f:20:a2:bb:3f:5f:de:5d:2c:c9:7f:a7:f0:d5:06:54:99:
2e:7f:85:ee:11:30:92:80:4f:f2:41:7a:49:7a:2d:f2:92:1a:
75:0d:7d:37:62:e4:ab:ca:6c:5a:bf:7a:48:fe:1a:1a:ff:86:
d4:c0:38:8c:36:9a:58:61:8d:06:15:13:3a:62:cb:dc:ae:ea:
62:1a:64:0d:e9:88:4e:7d:25:72:94:de:24:d2:d6:da:79:50:
1a:59:f3:20:ba:4c:e4:cd:12:53:cd:19:eb:0f:ea:23:1e:8b:
67:a6:18:7c:34:1a:0f:14:ac:0a:5f:5f:85:72:a8:92:f3:6a:
15:57:5b:65:ba:84:fb:41:bd:77:a6:a8:10:2a:6c:c2:a9:3c:
db:8c:03:e4:8e:12:f8:65:96:c8:38:58:f4:90:37:43:a8:cf:
d7:d6:8f:15:38:5c:55:0a:d2:3f:86:13:63:95:38:1d:d0:55:
2c:25:fd:13:9e:ae:36:a9:87:4d:88:cb:43:ff:10:7e:4b:d7:
b8:ad:48:6c:6a:75:3d:ba:63:36:25:07:67:8d:2a:a3:4f:18:
0f:e1:31:38:cd:ed:5f:dc:c8:85:65:f0:94:0d:fd:fb:2a:c1:
f6:5d:2d:ca:25:3a:78:2d:11:71:43:9c:3d:72:bb:f8:ae:86:
1d:c4:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org