Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 4ixu7FK7D5EphjxoL7DLcXGyH1sPUqm71hBIpPfwhX0=
Subject key identifier: 01:2A:2B:F9:8A:60:47:D3:B7:53:DF:C6:87:0A:48:DA:05:B9:3D:4D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 228A466C3C18EDD81CFB02299E4260F9C338AFD3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:24 +0000
ROA not before: Mon 26 Sep 2022 07:56:24 +0000
ROA not after: Mon 25 Sep 2023 08:01:24 +0000
asID: 59282
IP address blocks: 2400:d680:183::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8a:46:6c:3c:18:ed:d8:1c:fb:02:29:9e:42:60:f9:c3:38:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:24 2022 GMT
Not After : Sep 25 08:01:24 2023 GMT
Subject: CN=012A2BF98A6047D3B753DFC6870A48DA05B93D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:4f:66:b7:9e:e1:f9:f3:0b:92:de:08:ae:
22:82:5a:ff:5c:c9:b7:ff:7b:73:cb:5b:8a:87:54:
7e:b6:bc:2a:2f:cf:9d:70:f3:5c:69:4f:93:04:07:
55:ef:49:36:3f:ec:0c:6d:c0:bc:97:6b:4c:1d:f5:
92:d7:7e:59:18:6b:7a:8f:d7:cf:8d:d9:1e:6b:21:
f4:fa:d1:a8:b7:92:39:96:e5:b3:2f:15:ee:40:dc:
37:ef:22:64:1d:74:f3:0b:c0:91:dd:c1:5d:6b:5c:
49:6c:84:b7:12:78:c8:4a:9b:7e:d2:4b:0e:a3:08:
82:20:6b:6c:81:5d:ec:22:9e:a6:8f:66:d6:13:c0:
3f:83:f3:3f:69:ee:e4:10:7d:c7:49:d3:a6:3b:fb:
58:0d:16:50:01:e7:5a:db:64:b3:9a:80:97:b3:69:
1a:07:ff:29:61:3b:dd:35:65:fa:2f:9a:15:5f:a4:
d4:6b:06:99:b1:06:d0:79:9f:88:ef:c3:6d:28:36:
2b:56:f0:2a:3c:d8:77:71:18:12:ae:9c:e9:b6:eb:
fd:ad:8f:5b:06:5e:4f:94:3e:63:0c:ae:94:57:d7:
55:e0:d1:8c:32:82:14:f5:fb:16:44:0f:0b:5d:1f:
34:f5:7f:00:59:e0:50:ca:7f:30:53:de:a0:bd:78:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:2B:F9:8A:60:47:D3:B7:53:DF:C6:87:0A:48:DA:05:B9:3D:4D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:183::/48
Signature Algorithm: sha256WithRSAEncryption
02:a1:a6:48:f4:a6:37:25:8f:be:f2:6c:db:03:5e:b2:5a:47:
1b:6e:2a:e9:29:07:ba:58:ce:f6:cb:0f:bc:56:fd:84:4b:3c:
be:eb:94:db:29:b0:82:63:15:db:a1:a7:d5:51:12:90:0c:4b:
69:da:05:38:2c:58:dc:bc:d7:56:33:91:f2:e9:93:4a:04:45:
5c:c2:8b:bd:32:25:6e:ec:d9:58:48:1e:e3:1b:48:49:e0:5b:
25:d3:ee:ce:9d:07:d0:db:14:39:0f:37:ce:cf:6a:22:a7:9f:
d0:1b:67:94:05:ef:a6:49:39:85:42:02:06:1b:f5:38:fc:24:
0c:82:c3:a3:b5:06:0f:56:a3:c6:64:8c:b0:a9:8b:b1:06:19:
2e:5d:46:9d:5c:b0:81:84:9f:68:03:98:04:54:4b:3a:0f:ad:
ea:c4:35:be:cf:e9:31:ad:9c:60:5f:57:51:43:cd:47:ca:a8:
99:e4:8b:00:a7:02:cc:13:68:ec:58:cd:7d:75:73:77:0c:ea:
a7:d6:b2:f9:ef:e1:16:5a:9c:72:d6:7e:a8:b9:21:8a:c2:c8:
e0:e9:45:57:ad:4d:b4:d1:b4:1d:dd:a6:9c:10:08:d3:ba:00:
c9:00:a8:c5:0f:f1:b7:86:4d:06:d9:68:bc:5b:57:c8:4d:55:
90:04:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org