Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: aeAKawqjfhMoAYEy3H5zWxnRhCMwTDEw516WafC6UEs=
Subject key identifier: DC:DD:C8:AC:38:C2:5D:91:8D:C5:7D:64:F6:72:2E:0B:8B:02:93:BE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7F9DFBC3D3477F495634E878BC4CD712FA528342
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:06 +0000
ROA not before: Mon 26 Sep 2022 06:55:06 +0000
ROA not after: Mon 25 Sep 2023 07:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:17::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9d:fb:c3:d3:47:7f:49:56:34:e8:78:bc:4c:d7:12:fa:52:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:06 2022 GMT
Not After : Sep 25 07:00:06 2023 GMT
Subject: CN=DCDDC8AC38C25D918DC57D64F6722E0B8B0293BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:33:17:c1:ad:69:a5:7d:14:00:02:3c:d0:
d0:23:e7:f8:46:6e:00:a5:10:48:64:04:e7:99:7d:
56:50:34:27:77:20:a7:7e:87:46:4f:84:9a:a6:61:
73:a1:f5:ea:c0:d0:67:b2:7b:ba:af:5f:06:fd:3d:
1f:3e:b2:c7:86:ff:c6:3b:fb:bd:47:4f:6d:27:db:
37:10:f0:c8:c7:74:22:70:cf:a8:67:74:07:e2:0a:
f9:e1:a4:08:05:24:8a:58:6a:ec:e6:39:a1:73:cf:
30:c8:ad:7f:d1:e9:7a:d6:ac:30:11:8f:4b:28:9f:
a6:10:a8:a3:ea:e7:c6:e9:d3:f1:d6:6f:5b:67:62:
9c:bb:d8:5d:4a:c6:b2:a1:62:c8:55:a4:a5:c6:aa:
42:b2:26:f6:95:55:db:66:61:72:22:2d:76:fa:62:
0c:fc:69:16:15:c5:a8:33:fa:cf:6e:4c:37:6f:7a:
04:64:9f:41:df:00:da:66:4e:0b:e9:5c:97:37:21:
e5:9f:aa:9b:1a:60:1a:a5:b6:ea:6f:1b:56:d6:ba:
3f:f2:a5:93:4b:b5:ec:1d:f2:79:7d:90:76:a2:90:
a3:e5:62:90:8b:b0:cc:7a:4f:52:d2:d5:aa:48:01:
b2:e8:18:39:7d:3f:b2:bb:33:8c:9d:0f:da:6b:17:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DD:C8:AC:38:C2:5D:91:8D:C5:7D:64:F6:72:2E:0B:8B:02:93:BE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:17::/48
Signature Algorithm: sha256WithRSAEncryption
71:67:23:97:67:96:98:13:f5:1d:9a:70:e6:5f:22:71:9f:71:
ad:ba:0d:c8:c4:b9:6b:93:89:8c:0f:3f:5f:aa:69:d2:47:73:
e5:19:a8:f5:39:0b:d5:8b:d4:c1:4d:b0:c7:fd:a2:64:98:e1:
94:90:df:45:80:78:34:cb:68:91:51:e2:c3:b9:4d:7e:23:06:
ab:48:9e:16:15:77:cc:44:e0:1f:6d:5f:50:3e:4c:3d:cd:84:
c4:d0:3a:92:8b:7b:2c:a4:b1:80:61:c6:69:d4:67:f6:9b:39:
d1:ee:50:fb:71:c1:ec:22:95:e9:fe:ed:14:48:ae:bb:21:e3:
ef:7b:f9:ca:81:f9:c1:92:fe:80:7b:68:b4:77:bf:42:b0:3b:
cf:08:9c:db:6f:36:ca:70:93:7f:91:72:4f:15:bf:68:f3:c5:
66:ac:03:8c:85:87:b7:e8:b4:a9:4a:74:02:d1:9b:6a:e7:52:
3b:3d:a2:b8:73:ee:fc:65:66:8e:57:29:a8:c7:b4:24:38:75:
36:e8:3b:4f:e7:fc:d6:25:41:e3:3b:f7:32:e2:4a:9c:d1:b1:
6c:7b:fe:cf:05:57:e8:e1:6b:9f:b5:92:77:64:76:80:e2:8e:
49:ba:ae:38:51:05:43:d3:f8:b9:a9:98:fb:17:fc:f2:14:8e:
b1:9c:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org