Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: H7V16KCvykTzJH8k6BYBaZoJu5wib5ITGtFP5anjoD0=
Subject key identifier: C0:3F:29:38:5E:AD:06:08:CA:E7:7B:52:46:01:4A:8F:9E:32:CE:DF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3E15444B13C5B7F0ADC3733F109755A794C884FE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:46 +0000
ROA not before: Mon 26 Sep 2022 07:56:46 +0000
ROA not after: Mon 25 Sep 2023 08:01:46 +0000
asID: 59282
IP address blocks: 2400:d680:194::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:15:44:4b:13:c5:b7:f0:ad:c3:73:3f:10:97:55:a7:94:c8:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:46 2022 GMT
Not After : Sep 25 08:01:46 2023 GMT
Subject: CN=C03F29385EAD0608CAE77B5246014A8F9E32CEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:24:ed:68:df:98:bc:2c:b2:a4:7a:7c:92:
92:a9:da:6e:da:e5:f2:c9:80:af:3e:50:0c:90:2b:
40:52:33:5a:51:88:f2:b0:10:be:ba:a6:9b:bd:d8:
3c:32:c8:ff:ab:27:5a:fd:25:87:5a:02:a2:03:cb:
3b:4d:02:f4:eb:e4:60:d8:6a:e5:25:e2:d5:88:aa:
97:d7:89:6b:f6:e0:99:cc:39:00:98:17:09:ff:04:
8e:34:dd:27:18:56:8d:a9:df:8c:c9:3e:b6:c9:bd:
b5:44:ca:0f:36:e7:3b:8e:bd:ef:e0:f0:3c:12:b5:
cf:9f:a6:5b:32:db:cd:54:66:69:78:ab:7d:ee:88:
e8:ca:02:70:36:82:73:d4:7b:29:55:51:a1:59:68:
c1:12:cd:7b:28:b9:77:c9:9a:b8:4d:97:83:78:f7:
a5:74:f7:da:4f:48:f3:68:66:fd:f2:95:9d:53:c6:
8d:9d:95:b5:a5:78:27:fa:d4:fb:9d:e7:e5:0d:24:
7b:6e:9b:e5:6f:e9:e4:c0:6b:99:20:36:04:85:e9:
6d:21:1e:a8:6e:60:ef:55:38:0d:af:bf:77:35:1e:
0e:d5:6e:50:7f:cc:f2:1f:6b:b8:1c:2c:32:06:cb:
53:18:89:1c:18:92:5e:6a:95:6d:7b:83:d3:29:cf:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:29:38:5E:AD:06:08:CA:E7:7B:52:46:01:4A:8F:9E:32:CE:DF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:194::/48
Signature Algorithm: sha256WithRSAEncryption
35:ea:82:aa:0d:20:70:be:49:16:44:a9:4d:0e:46:20:a8:f2:
ca:45:60:9d:7b:86:4c:2b:bc:61:e2:24:1d:ab:0d:f0:46:5b:
68:1d:9c:7a:e3:30:2c:6b:13:62:02:f5:3d:25:42:a9:77:dc:
66:58:49:16:e3:ea:f4:b2:b1:89:45:41:51:dd:18:2c:7b:09:
2c:91:30:1f:c1:79:a2:30:86:8a:de:15:57:c1:c4:b0:76:48:
3a:4f:fc:e3:e9:95:2f:67:c0:8e:d8:cd:dd:5c:60:04:2a:67:
f9:76:27:9c:64:32:02:35:86:18:26:50:53:ca:03:26:9b:86:
94:13:8e:25:b1:7c:fe:4e:7a:9d:e8:06:44:1e:78:c1:ed:99:
b8:8a:95:c7:d2:4a:5c:c6:2b:08:00:48:27:bf:dd:ce:66:59:
10:ef:dc:2e:4d:28:20:56:5d:e1:21:84:15:61:c5:5c:6d:f6:
38:2d:80:5c:b7:62:83:0e:2a:c7:52:eb:37:25:31:60:05:08:
f5:bd:a2:08:b1:e6:6f:14:cc:00:92:25:92:0c:f3:11:d9:67:
d7:6c:cf:e7:dc:22:52:07:27:7c:90:76:d9:af:b8:15:74:08:
90:21:b1:ef:8a:d9:8a:7c:c3:74:c5:d4:42:86:b9:fd:e6:1e:
66:47:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:00:27 2025 by rpki-client