Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ALflrKyrKnMhEsWeHj0rebZUabCAzclDifuMpnHat18=
Subject key identifier: B7:85:22:B5:2A:5C:17:E5:84:87:A0:85:98:55:79:AB:19:22:40:63
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 53680B835A63B54C8AB2434DBF81F0190D35ED74
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:23 +0000
ROA not before: Mon 26 Sep 2022 07:56:23 +0000
ROA not after: Mon 25 Sep 2023 08:01:23 +0000
asID: 59282
IP address blocks: 2400:d680:182::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:68:0b:83:5a:63:b5:4c:8a:b2:43:4d:bf:81:f0:19:0d:35:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:23 2022 GMT
Not After : Sep 25 08:01:23 2023 GMT
Subject: CN=B78522B52A5C17E58487A085985579AB19224063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:76:00:06:1d:50:6f:7f:75:49:eb:d6:e4:
ce:c7:8d:2e:d9:b9:b1:c1:ea:a2:db:7c:fb:62:f2:
e1:8f:d6:9c:5c:11:e3:5c:84:4f:f5:e6:17:7d:c6:
3f:0d:32:b8:27:2e:9d:6c:de:c0:fa:dc:c4:10:c9:
dd:51:53:16:e1:3b:0d:e8:77:64:e8:e8:ad:3e:0e:
c5:65:76:f6:d6:64:26:20:aa:8b:88:31:c6:22:a3:
4b:02:0e:1c:43:c4:48:57:aa:17:d3:6c:01:7d:ef:
ad:08:9b:ac:c0:61:e7:1d:73:33:a1:d9:ba:e9:fb:
c5:f6:fd:48:3b:d2:ef:7e:bb:98:26:c3:92:ec:06:
db:47:8f:69:fa:35:20:6a:3f:bb:16:f5:20:4f:b8:
12:14:22:60:05:a2:41:1b:07:1a:97:e3:b1:92:79:
fd:ea:5b:5f:8a:8b:d7:35:74:a4:60:bd:39:bd:8f:
0b:1c:60:16:65:a4:5c:fd:61:51:3c:ad:26:03:7a:
f2:44:8e:dd:24:25:30:2e:e1:b2:a5:70:59:40:4f:
61:26:6c:01:48:22:ce:de:1d:95:0d:27:02:61:e1:
d6:e7:3a:51:52:b8:c2:06:75:a9:f4:42:71:5c:f3:
07:b3:f7:dd:d3:f9:f4:7c:08:06:6f:66:4b:8c:f0:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:22:B5:2A:5C:17:E5:84:87:A0:85:98:55:79:AB:19:22:40:63
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:182::/48
Signature Algorithm: sha256WithRSAEncryption
31:d0:ee:f9:c3:18:4a:9d:94:76:7c:e8:b5:4b:64:fc:a4:02:
8e:36:af:c3:03:02:6f:b2:af:c2:2d:bb:10:82:3d:96:90:91:
af:e1:76:7d:c1:9a:7f:3b:40:43:2e:c3:d7:59:63:32:11:cb:
b0:b6:be:3f:b5:ec:31:b5:5a:1b:42:42:9c:b0:5c:89:82:6e:
b4:eb:9e:0a:6e:1e:54:fe:9b:af:3b:13:78:4b:a7:eb:b6:00:
bc:fa:61:a4:a8:64:74:fc:81:a1:94:a2:cb:4b:5d:48:80:d8:
75:16:5a:64:f3:c2:80:3a:3c:57:62:32:0e:1f:3f:2c:2e:ef:
23:b4:50:d5:18:de:5c:cc:ae:73:94:21:a4:17:3c:ba:8f:30:
28:97:4a:1e:8e:d5:47:a1:97:da:91:65:97:c9:89:89:c7:df:
f4:7b:04:1e:b0:d0:97:60:bf:8b:6f:e5:2d:e4:73:7b:8a:4f:
51:18:0e:ca:9b:fe:ce:23:49:36:6b:87:52:1e:c2:b9:67:1b:
8c:36:5a:71:34:d6:04:06:ca:6f:67:a2:06:7b:00:4a:d5:e9:
fe:db:d0:e6:51:11:7a:7f:20:cb:3d:69:30:ae:0f:f1:a6:e8:
d5:1a:53:56:f3:5a:3c:c7:28:bd:16:9e:f4:d1:b6:51:5d:fe:
07:58:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:06 2025 by rpki-client