Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +YaLl4Kugd0Gs5w5mgIDrqPYWI/n9ys57CajWFgU5/4=
Subject key identifier: B0:95:77:AA:83:90:07:98:57:CD:C1:74:9C:45:A8:DD:5F:D4:34:2C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5B6EA398742DA445B1BCA5DA50983E4C1C9DB7CC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:03 +0000
ROA not before: Mon 26 Sep 2022 07:57:03 +0000
ROA not after: Mon 25 Sep 2023 08:02:03 +0000
asID: 59282
IP address blocks: 2400:d680:184::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6e:a3:98:74:2d:a4:45:b1:bc:a5:da:50:98:3e:4c:1c:9d:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:03 2022 GMT
Not After : Sep 25 08:02:03 2023 GMT
Subject: CN=B09577AA8390079857CDC1749C45A8DD5FD4342C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:37:74:18:f5:6b:c4:fe:10:16:10:1c:82:
57:03:e4:fb:b9:31:dc:2e:1e:66:5c:33:77:e2:cf:
ea:94:4c:e2:b6:6b:c5:36:85:89:cd:d4:7c:a3:68:
bf:d0:f8:17:fb:93:64:c6:0e:5e:f3:63:1f:28:1c:
37:e9:43:e0:74:37:48:da:c3:3f:a8:af:02:59:2a:
79:59:d3:10:63:72:53:c9:25:48:23:73:00:2b:5f:
64:14:f1:14:0a:47:3e:4a:62:02:d2:96:6c:d8:b9:
f5:b5:1c:40:22:42:3c:93:ca:2a:b0:ef:3e:6a:db:
fd:68:df:e0:bf:a2:b8:07:db:30:fe:97:70:36:39:
f7:89:4d:57:36:4e:1e:b1:cc:43:51:39:d7:b5:ec:
2b:00:98:4e:09:07:4c:22:3c:b5:23:5b:dd:bc:93:
e7:f4:c3:32:8e:f2:be:39:a0:fb:ec:6b:ef:31:6a:
96:76:74:3a:b1:30:22:c5:d2:4b:04:14:1f:49:2b:
6f:6f:2c:06:1d:ff:d1:3f:5b:d5:08:ed:2c:f6:51:
e6:6c:fc:ff:85:63:d1:4c:d2:ec:ad:80:e6:96:b4:
0c:cb:ad:44:20:ec:5b:b6:e0:c0:18:c8:50:fd:1c:
22:4b:6a:88:53:da:e9:42:80:0a:f3:0b:8b:1c:d6:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:77:AA:83:90:07:98:57:CD:C1:74:9C:45:A8:DD:5F:D4:34:2C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:184::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e6:cf:76:bf:cb:f9:69:77:2e:77:02:a3:05:4c:92:ae:92:
ef:b9:4f:1b:55:7d:47:82:56:3e:c0:51:bd:66:81:c9:0a:c1:
7e:46:2e:be:a8:6e:68:70:11:d2:9c:95:4a:12:e3:eb:d4:47:
8f:d1:59:f3:26:ea:9b:28:92:7b:2b:db:ed:68:dd:c5:5d:cd:
3d:d9:db:b4:65:22:1e:4b:a3:d6:58:78:9a:3c:07:14:13:84:
7c:91:1b:62:a4:07:ff:cd:11:34:ec:72:a4:fe:95:e3:0d:ac:
11:7a:d1:11:f4:97:b7:b7:9b:04:2a:0a:26:c8:67:ab:08:b4:
ec:91:97:7c:5f:3c:85:1b:df:ea:81:b1:8a:67:fa:5e:bf:c1:
fe:a2:26:1e:78:bc:92:c9:4f:04:96:4b:23:9f:48:cc:c8:ee:
01:ff:6d:e0:36:27:b7:57:66:81:67:c3:24:ed:20:6f:d4:fb:
e5:2f:68:15:ac:24:d4:90:a8:c5:60:bd:d2:0a:0f:e8:64:bb:
92:02:a8:81:18:b3:3b:ad:1c:2d:ee:c2:14:26:9a:41:ad:7c:
47:56:3c:a8:ca:ef:1f:a8:74:eb:8a:9d:ee:41:68:97:85:91:
39:e0:8d:02:b2:3b:a7:31:c4:28:73:10:d8:a0:34:78:b9:07:
b4:83:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org