Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: RbmoAKugu851SVa8SsC3NkS8VWMqJ3sySnWtuHyhGpI=
Subject key identifier: 26:F3:24:1C:9C:FE:D7:41:B2:4C:07:A6:03:15:A8:3A:65:91:AA:F8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 508DC2D9FA5550FF9C38AC959B5B1A91980F4393
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:18 +0000
ROA not before: Mon 26 Sep 2022 07:56:18 +0000
ROA not after: Mon 25 Sep 2023 08:01:18 +0000
asID: 59282
IP address blocks: 2400:d680:189::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8d:c2:d9:fa:55:50:ff:9c:38:ac:95:9b:5b:1a:91:98:0f:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:18 2022 GMT
Not After : Sep 25 08:01:18 2023 GMT
Subject: CN=26F3241C9CFED741B24C07A60315A83A6591AAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:15:f1:6d:bf:9a:a3:74:eb:20:7d:97:3d:
8e:e5:01:8a:e1:1b:b4:df:e0:a5:3f:11:70:02:f1:
a8:18:78:b8:91:23:57:3f:87:98:2e:4d:0c:a4:66:
86:0c:d0:0f:91:0f:8e:de:cf:cb:f8:50:fc:31:c7:
c5:8a:97:28:45:18:04:e7:5c:bf:f7:d1:c3:3a:96:
4f:00:0f:34:93:ad:85:40:1b:a1:fa:6e:ce:ea:20:
75:83:7f:54:a7:f4:97:c3:46:c5:09:db:53:bc:a9:
ad:b0:d0:12:99:75:ed:5a:91:c5:f7:0c:73:ac:6d:
2d:8b:89:b1:76:05:fb:25:24:6f:db:60:34:b2:49:
76:f6:1f:16:a6:38:66:bc:7c:c8:49:a7:0e:6d:b0:
cb:fd:4c:97:26:a7:a7:5a:77:59:b0:7a:43:cb:9a:
2e:85:25:a4:32:d6:34:65:e6:91:02:4c:d3:bf:36:
28:81:97:99:1c:b4:a2:5a:d2:90:c8:dd:f0:19:08:
5f:b9:b3:76:72:d2:ee:e8:3d:22:5a:0a:1a:39:1a:
d9:21:3f:d7:d7:dd:1e:35:c3:f0:28:fc:f3:e6:ce:
4a:1f:65:a0:a8:5d:92:01:99:51:1a:1f:e9:da:11:
65:ee:17:03:11:7a:42:04:6b:b4:16:d1:38:6e:76:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:24:1C:9C:FE:D7:41:B2:4C:07:A6:03:15:A8:3A:65:91:AA:F8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:189::/48
Signature Algorithm: sha256WithRSAEncryption
c4:bf:9c:03:f3:57:76:33:0a:19:f8:2e:1e:24:0c:9e:8e:92:
c8:7f:c1:b7:a0:87:2b:09:15:9e:aa:1e:6d:30:03:12:a7:c1:
23:5c:fc:4c:35:b8:f0:3e:bb:83:61:92:0b:fc:5b:b6:25:8f:
ae:d0:bf:26:c6:1b:b9:bf:11:05:29:0b:a9:2b:92:a6:2e:24:
02:db:1b:ea:76:3a:e8:8c:6f:48:bd:27:1b:4c:1b:ff:22:4b:
10:68:a2:39:26:9a:7b:42:98:43:c2:6b:f2:29:39:1f:8e:da:
45:0f:d2:ba:9a:62:e7:9f:df:38:05:b6:4a:72:0f:98:9f:f4:
49:b5:cb:35:fe:fa:a8:cb:3e:99:ff:b1:56:2d:e7:68:f4:82:
bf:7c:b6:ac:56:5b:3e:98:9c:93:c1:7f:4c:40:44:bb:cf:c5:
f3:73:91:61:d8:a1:63:96:cc:4d:59:96:a1:dd:29:06:92:10:
2b:c4:ef:e1:83:1f:1b:e4:f3:06:d0:0a:2e:c8:12:e2:69:13:
56:8c:c1:4c:3a:1d:fc:5a:c0:b5:cd:66:63:49:53:1c:44:fe:
a4:64:bc:8d:ed:70:4b:80:54:ca:f0:d8:61:d6:01:7a:2c:8a:
96:91:13:82:d8:7d:98:6e:a5:6a:2d:22:c7:5a:f1:ae:3c:9a:
26:54:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org