Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: J8uPudiNB/dGrSbuFcJh0r4b2lI2/HWlROPuST/Xteo=
Subject key identifier: 03:63:19:21:86:D1:CA:32:65:71:14:18:19:B3:C8:16:74:E5:7A:A2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4C1F8D5E345F06D9DB92DF5768796EFB99155BE4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:56 +0000
ROA not before: Mon 26 Sep 2022 07:56:56 +0000
ROA not after: Mon 25 Sep 2023 08:01:56 +0000
asID: 59282
IP address blocks: 2400:d680:187::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1f:8d:5e:34:5f:06:d9:db:92:df:57:68:79:6e:fb:99:15:5b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:56 2022 GMT
Not After : Sep 25 08:01:56 2023 GMT
Subject: CN=0363192186D1CA326571141819B3C81674E57AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:c4:33:5a:e1:c0:f0:1e:ce:b4:bb:df:16:
70:b0:4a:59:a1:16:af:a6:23:41:09:ba:55:bd:e8:
4f:44:4e:59:51:a3:ac:f3:84:c6:08:75:f5:07:b2:
6b:98:6f:d3:44:c9:b3:ca:a1:03:07:b0:f0:af:b8:
84:a8:b7:8d:80:bb:52:00:a3:df:bd:a6:21:da:87:
0b:ba:be:f0:8b:5a:16:80:9b:cc:ae:a1:72:e8:12:
ff:3d:9e:39:e9:f3:f7:20:db:79:33:ea:8c:9a:a2:
0a:18:b6:ae:f1:ef:c3:f6:a6:f9:60:6b:79:1f:d1:
96:ce:68:8d:55:5d:7c:e2:c4:85:ae:6a:18:71:5a:
10:11:6e:4d:ee:b4:fe:8a:9c:7b:7a:2b:9c:e9:0c:
6d:a6:9c:46:98:d6:85:fe:20:bd:95:46:c0:e0:27:
60:cb:8c:02:42:9a:1d:62:1b:4b:f7:46:31:fb:0b:
18:b9:6e:c2:28:c9:e7:e6:a5:64:52:dd:5b:c7:9b:
95:89:b1:44:2d:49:62:0f:00:8c:5c:5a:7b:9f:da:
17:60:ce:2b:44:57:e2:1d:63:2e:28:71:88:f8:40:
cf:d7:4a:5b:84:bc:c2:53:21:61:77:8c:e9:05:9e:
2f:9d:c8:c1:a9:0e:e0:6d:b1:70:a8:a0:c9:83:ae:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:19:21:86:D1:CA:32:65:71:14:18:19:B3:C8:16:74:E5:7A:A2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:187::/48
Signature Algorithm: sha256WithRSAEncryption
c8:30:5a:9f:1c:3d:a7:4d:eb:e5:f8:12:ae:97:93:e5:dc:58:
07:a7:61:bf:2f:13:f6:4a:ac:c4:e2:b3:be:c7:5d:f9:e5:64:
85:b4:62:f2:23:f3:ac:d2:4a:49:91:ef:1f:7a:a8:28:63:08:
0f:b7:cc:f1:ce:77:e6:43:cc:2c:ad:fc:4f:58:55:59:aa:aa:
fd:c8:17:90:60:73:e4:72:18:83:72:cb:86:70:ed:82:58:63:
38:5f:7f:af:29:cc:a9:e4:d7:df:a7:fd:63:4d:11:32:26:fe:
ba:e7:35:ad:94:5f:1f:1c:40:d9:93:65:c7:5a:10:d6:58:11:
ac:39:9f:16:a7:25:8f:03:c6:a2:79:4a:a8:67:cd:4e:62:b5:
05:56:8a:33:9f:38:b3:96:fb:72:d0:5e:d4:6b:00:21:5c:a4:
72:2b:0f:1a:4b:85:53:ca:13:e4:fd:52:dd:c4:25:9c:1e:e3:
1e:25:86:a5:b6:73:d9:40:af:75:9c:49:ec:6c:eb:13:ff:26:
d9:d3:a5:f1:e5:3e:78:36:3c:a2:cf:2d:c2:46:89:4e:24:bb:
39:16:d4:3c:e5:00:06:51:02:84:45:f5:18:ef:0c:67:0d:15:
42:f9:45:c9:fd:ec:24:bc:00:4b:0d:8a:cd:04:d3:01:d7:b3:
39:20:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org