Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: iL9pPNnXXXQMx7oAglB43pyfilo87Fe+Cm3sRNGz2H4=
Subject key identifier: 9F:A3:6F:1E:0E:8B:DC:18:35:3F:D9:9D:6E:5A:35:45:8B:5A:E6:9D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1376E39CAE123221859E9A1F8D826D7F3EA8F37B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:20 +0000
ROA not before: Mon 26 Sep 2022 07:56:20 +0000
ROA not after: Mon 25 Sep 2023 08:01:20 +0000
asID: 59282
IP address blocks: 2400:d680:195::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:76:e3:9c:ae:12:32:21:85:9e:9a:1f:8d:82:6d:7f:3e:a8:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:20 2022 GMT
Not After : Sep 25 08:01:20 2023 GMT
Subject: CN=9FA36F1E0E8BDC18353FD99D6E5A35458B5AE69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:90:c1:a1:5e:f7:cb:b3:32:f2:1b:63:82:
ab:4d:c2:c2:d7:f7:26:ef:5c:61:53:55:e7:c3:46:
32:f5:92:dd:2c:2e:b4:c9:09:d6:68:17:b6:40:b6:
7e:e4:d1:b0:d4:4d:73:fc:c6:20:1e:47:76:16:2c:
5b:3a:9d:ef:e1:4d:98:9d:ae:ac:7c:49:2b:e4:07:
60:7d:f4:06:e7:11:12:40:a4:c7:7e:e6:18:1e:ac:
09:6d:8e:04:00:9d:6e:59:8b:78:d6:7b:a2:2d:b3:
3a:e2:04:7a:fa:18:99:fc:48:6d:fc:d4:1c:6a:fb:
66:88:d9:66:15:5b:2a:db:06:44:5c:c6:2c:27:53:
93:59:1c:3f:8c:83:3b:0b:20:80:01:d3:e8:54:30:
54:a0:3e:f7:48:8d:cf:7b:f6:c7:08:50:25:8c:f4:
28:b3:9d:94:bd:56:08:26:84:69:d0:48:b5:0d:fa:
27:c1:57:1a:51:2b:5f:ea:93:f1:96:ad:80:bb:28:
dc:6a:71:2f:1a:ba:6a:15:41:3c:2e:38:f1:f9:fe:
ea:6d:c9:bc:20:2d:e4:e7:ae:4b:5f:ed:62:b7:c5:
28:72:54:c0:66:ea:39:b8:1f:d3:b6:79:d6:18:09:
66:08:79:c3:22:95:37:4a:25:e6:89:c4:9a:60:ac:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:6F:1E:0E:8B:DC:18:35:3F:D9:9D:6E:5A:35:45:8B:5A:E6:9D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:195::/48
Signature Algorithm: sha256WithRSAEncryption
15:8b:93:87:3d:61:63:fe:1c:07:ca:cf:87:fe:b1:11:c7:64:
13:a1:6c:76:69:92:e8:cf:80:16:13:7e:7e:c7:09:97:0c:f1:
bc:5d:e3:11:13:d7:79:0b:7b:be:74:0a:b9:3e:9d:62:d4:70:
2a:dd:c2:06:e8:d0:85:48:7e:00:de:cc:46:91:f9:bd:5a:12:
75:9b:3e:5e:8f:b3:ba:ea:26:76:18:6f:a7:60:57:69:f5:5e:
19:fe:9e:8e:3a:eb:65:65:7b:38:bf:ef:c1:52:84:9f:cb:50:
e4:ec:ca:52:6f:ac:99:66:15:ca:ad:2d:c9:74:98:f4:ee:fa:
93:76:47:7d:34:45:e3:9f:30:82:ef:99:50:ac:b3:d2:97:10:
0d:56:08:0d:8a:b8:33:2f:12:c6:34:d5:7f:ed:38:b9:94:8e:
aa:2b:ca:54:17:e9:8b:8a:42:23:aa:55:81:d2:ce:5d:a9:10:
15:fe:4b:0c:03:ba:f2:83:ac:8e:9d:f4:88:e8:fe:6f:5d:6a:
b3:0a:a8:54:04:9a:49:c9:df:d9:fc:94:e0:13:eb:5f:4b:f3:
7c:6a:ad:db:97:af:95:8f:9f:3d:4e:9d:06:e0:a1:38:0a:2c:
a3:11:5c:d1:8e:91:4c:9d:b4:b2:37:fa:fc:c0:52:30:50:e3:
90:1c:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org