Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: O3W9N9f6G+4CrqdaUDS9WB34QW3dhRYYSUSpoNT6QdY=
Subject key identifier: 99:C0:76:07:DD:E0:B6:23:1C:27:0A:A6:DA:99:6E:7D:84:55:53:11
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 306A6CD8BF715D4B1CE8A1D5558F85F13EB59857
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:17 +0000
ROA not before: Mon 26 Sep 2022 07:57:17 +0000
ROA not after: Mon 25 Sep 2023 08:02:17 +0000
asID: 59282
IP address blocks: 2400:d680:18d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6a:6c:d8:bf:71:5d:4b:1c:e8:a1:d5:55:8f:85:f1:3e:b5:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:17 2022 GMT
Not After : Sep 25 08:02:17 2023 GMT
Subject: CN=99C07607DDE0B6231C270AA6DA996E7D84555311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:7a:2a:39:f6:92:d5:a5:2c:42:d7:60:33:
0c:a8:04:7d:24:4d:6f:15:79:75:9f:7e:33:09:40:
61:08:0b:56:22:cc:18:6d:21:6c:f6:5c:c3:3e:db:
96:1c:32:6f:ce:25:20:f5:3c:4f:47:aa:f8:8f:30:
fc:27:40:48:6a:9a:0d:11:ec:25:71:80:23:6b:56:
c7:8e:1e:d4:fe:2d:b1:a9:f4:42:44:83:fe:ef:6f:
cb:7f:e4:25:c4:e0:df:1c:5a:3c:7a:32:09:99:96:
ff:46:74:28:4f:51:9b:2d:5a:12:91:70:cb:a7:24:
8c:c7:a3:03:90:de:a6:e0:76:aa:47:e1:8b:64:68:
aa:a7:89:00:b5:9a:f6:c8:5f:8a:18:de:e0:fc:d7:
75:fc:45:81:e9:48:59:87:6b:02:11:ce:50:37:8c:
71:d9:09:85:1b:82:a2:8b:36:ef:68:1f:45:09:2a:
40:77:b9:6d:9d:94:71:a7:66:46:7f:0d:aa:44:d4:
7e:27:85:b2:35:40:27:13:f0:79:63:fa:4f:91:24:
10:2c:ab:e3:cc:ce:96:41:b1:d0:e1:4d:9c:7d:3f:
53:cd:53:b3:d2:00:72:c6:76:f7:95:bb:4e:e1:ee:
e8:ab:8d:bc:98:86:1e:96:6e:5e:9d:b1:50:32:e6:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C0:76:07:DD:E0:B6:23:1C:27:0A:A6:DA:99:6E:7D:84:55:53:11
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:18d::/48
Signature Algorithm: sha256WithRSAEncryption
68:3d:01:10:ef:21:4f:a1:d6:0f:a4:3f:22:5a:28:ec:ef:db:
88:02:ec:5b:c7:2e:de:d2:c0:99:5b:66:1d:01:3c:78:39:39:
96:c6:9c:ef:b2:3e:e1:6b:71:23:9c:07:0c:5f:bd:f2:53:a8:
90:0a:3f:72:21:e1:66:78:e2:e4:d5:75:41:0e:91:03:4d:8c:
8e:43:61:a6:ab:6d:5e:7a:4c:c4:64:a7:39:8f:93:93:22:6c:
da:76:f9:c8:fe:3f:84:f8:fc:9d:a7:19:ed:5c:bb:9d:b3:f4:
b2:22:3b:90:f8:d5:d0:d7:eb:9d:b3:c3:e7:c8:cd:53:0c:67:
d3:43:51:f3:d5:db:bd:e8:b3:1b:9f:23:72:88:3a:6e:b0:69:
be:08:ca:11:cb:7c:2e:71:da:6a:a5:1f:6a:08:51:ea:a0:47:
ce:f9:f7:76:a4:fb:6a:21:cd:2f:5d:45:0b:33:7c:96:4d:ef:
03:e9:8d:2f:83:4f:60:4b:c9:21:70:f0:f3:a5:37:ba:34:78:
d3:02:84:a3:15:fc:7c:ed:95:65:96:22:ed:9b:91:91:19:fe:
65:26:45:73:d9:7d:23:6c:80:e9:9e:d9:bd:04:cf:c2:0b:67:
97:d6:3f:c5:bb:dc:1b:ad:3a:4b:3b:e1:20:14:d0:33:13:83:
02:28:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:49 2025 by rpki-client