Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3137363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: JdWGcYSTZrRy06GgU/vhofPfxguCMeNHH06kUiYLZP4=
Subject key identifier: 39:23:E8:BD:E2:7E:FC:FF:0C:8A:06:07:9F:60:F9:16:78:16:06:36
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 19B18B659FDA8F0D3F7837F7CF40F24CE182CD03
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:25 +0000
ROA not before: Mon 26 Sep 2022 07:56:25 +0000
ROA not after: Mon 25 Sep 2023 08:01:25 +0000
asID: 59282
IP address blocks: 2400:d680:176::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b1:8b:65:9f:da:8f:0d:3f:78:37:f7:cf:40:f2:4c:e1:82:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:25 2022 GMT
Not After : Sep 25 08:01:25 2023 GMT
Subject: CN=3923E8BDE27EFCFF0C8A06079F60F91678160636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:ec:2f:36:ea:b1:ca:7f:00:0d:52:6e:04:
59:86:46:cc:db:06:be:f0:0b:34:9a:57:b7:1a:79:
75:92:62:e1:59:98:b2:73:53:d7:57:36:03:45:1d:
c1:3b:7c:04:9b:a3:87:c5:51:89:6d:cd:0f:d9:cf:
5c:99:ce:e3:d3:b5:96:94:9f:80:d0:ae:b1:d3:13:
3f:e5:a4:ea:85:22:06:9a:a1:ff:1e:20:43:c4:e0:
e8:c7:2d:ed:8a:b2:9c:aa:43:be:24:5c:00:48:c6:
18:dd:f8:ec:1b:50:29:31:1c:7a:44:83:54:08:3a:
bc:59:39:0b:af:0d:a4:16:10:1a:da:a9:fd:d1:4f:
60:f0:d1:ee:e1:e6:54:a8:87:d7:76:c5:8b:5b:85:
3c:67:9a:07:8c:fb:0b:1f:3e:af:10:ab:db:5e:9b:
04:03:32:78:f1:1e:42:dd:57:21:06:22:0e:21:b5:
ec:f5:c8:88:7a:d0:7b:af:d6:f1:cd:60:4e:06:74:
50:5e:e1:5d:2b:34:f8:b0:a3:2a:d8:15:b1:1b:44:
d5:ab:71:4d:17:94:4d:a2:32:50:a0:99:01:24:04:
63:24:07:62:72:c6:83:ad:63:a6:d3:e8:29:86:43:
fe:0b:82:22:3d:f0:02:40:bf:62:5e:29:f9:d0:e3:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:E8:BD:E2:7E:FC:FF:0C:8A:06:07:9F:60:F9:16:78:16:06:36
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:176::/48
Signature Algorithm: sha256WithRSAEncryption
44:e6:7b:37:9e:30:32:85:73:79:3c:bf:f6:5d:22:39:91:53:
aa:02:5b:5b:32:b9:26:c7:3a:88:f1:41:64:f6:d0:f7:0b:6e:
76:71:ac:e9:15:ab:fb:a1:38:92:3d:6a:dd:72:69:7b:04:7f:
de:66:57:6e:96:ed:09:d9:d2:62:a7:7a:58:de:b6:2c:ad:70:
8c:9b:2a:ce:0f:62:56:71:7a:7f:6e:24:2b:22:1f:6d:55:3a:
78:81:eb:f2:a9:eb:b0:75:04:29:a7:93:b2:0e:7d:cb:ed:d0:
b5:70:ba:b4:4d:e7:98:36:8e:ed:3f:cb:98:1d:6d:1a:3e:bf:
88:55:9d:e3:6c:23:43:55:05:10:e6:1d:7e:b7:c6:bd:00:c1:
bd:b2:78:fb:dd:5c:8d:20:3d:b1:7c:96:02:e6:35:f9:b5:da:
fc:c5:72:72:e4:1d:f2:e1:ab:e2:58:50:94:19:45:a6:a2:79:
5d:48:46:1f:68:d2:a8:1a:26:73:27:a2:5d:42:b1:53:3a:b2:
84:b9:7b:19:5a:aa:36:bf:76:e3:d0:ab:8b:d1:df:b3:be:5c:
65:e0:e5:7d:53:3a:c3:54:9d:44:4e:64:7c:2d:bf:fd:e3:83:
50:e0:87:2d:a7:2d:39:16:18:1f:ae:46:c2:a8:cd:23:47:7f:
1f:fa:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org