Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 3p2lbzjm7APHScjmZY7GmJ1DllU0CnoYh4RqtvLXTeI=
Subject key identifier: 54:7E:12:63:A3:23:93:1B:CF:E3:41:C7:BF:FC:29:C7:DB:56:71:6E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 49D13D784210BEE802457126567F38BA2D198809
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:59 +0000
ROA not before: Mon 26 Sep 2022 07:56:59 +0000
ROA not after: Mon 25 Sep 2023 08:01:59 +0000
asID: 59282
IP address blocks: 2400:d680:199::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d1:3d:78:42:10:be:e8:02:45:71:26:56:7f:38:ba:2d:19:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:59 2022 GMT
Not After : Sep 25 08:01:59 2023 GMT
Subject: CN=547E1263A323931BCFE341C7BFFC29C7DB56716E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:04:c2:35:22:d9:90:db:e9:5c:bf:5b:99:
95:42:5f:da:44:0e:46:6d:99:c2:2a:ab:12:5b:b2:
97:7a:03:f5:91:62:ba:d8:28:bc:89:55:c5:83:4c:
9c:d6:4a:48:ce:98:e9:eb:f2:f1:ce:2e:4f:61:2c:
b9:a5:67:54:25:45:57:2a:03:10:8a:93:bc:0b:0c:
e4:df:c5:c0:c7:95:d6:5f:3e:3b:c5:9b:0c:7a:f8:
4a:f4:0b:d7:30:d2:78:39:36:8b:52:fd:b4:d3:6b:
9f:43:77:64:f4:dd:77:0a:e7:fb:d3:d0:a2:5b:c6:
07:c3:36:2f:ca:31:ae:10:be:c8:9b:f8:82:e1:10:
31:cb:23:57:b8:f5:52:90:15:db:6e:2f:ed:00:1f:
da:58:bf:2d:48:85:74:87:08:f1:dd:74:0d:b4:0d:
26:7f:8a:61:6e:d6:3a:ff:da:e0:2e:94:28:39:ac:
21:10:b5:27:b4:c5:3a:63:5c:a6:c6:5b:55:b9:de:
48:c7:5a:b0:4f:67:c2:a3:ef:a6:7e:79:b1:e8:15:
b0:0c:e0:28:36:3a:26:83:0a:17:ce:2d:7b:34:a7:
38:f6:31:67:a3:b1:c1:9f:dd:39:30:a9:b2:bf:cd:
cc:70:39:da:3d:af:ec:a9:fd:91:2d:1a:14:6b:d8:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:12:63:A3:23:93:1B:CF:E3:41:C7:BF:FC:29:C7:DB:56:71:6E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:199::/48
Signature Algorithm: sha256WithRSAEncryption
10:2c:42:8b:bc:fd:3f:6e:4b:74:43:35:c7:11:73:95:2e:80:
4b:09:20:de:dd:50:ac:60:1f:6d:d2:48:ca:81:1d:b3:20:07:
e1:5a:85:13:d5:d5:78:f7:94:cb:6f:a6:10:18:74:be:f8:e5:
01:a7:01:cf:a8:49:3b:e6:2d:7a:fd:2d:ca:c2:8e:d6:3a:59:
62:ab:db:cc:c6:93:98:22:2c:4e:09:88:31:f4:53:ec:98:52:
ce:88:de:a8:c5:bc:74:b9:b2:0e:9a:45:98:99:df:83:8d:00:
be:1c:ff:99:e2:01:ba:6a:b1:07:68:fa:ce:13:dd:77:d2:3f:
17:b6:75:d9:60:59:b3:a4:90:66:50:5b:43:43:55:6e:62:1c:
b7:2d:8e:ac:d7:af:6b:f0:18:54:8c:f4:ac:19:ab:f7:ad:b7:
b9:69:d2:e2:4d:fc:b4:48:81:91:74:d2:12:cf:9a:b0:9b:01:
1c:c2:76:6c:a7:5f:8b:8f:4d:53:d3:03:8a:cd:89:c5:c8:e2:
59:df:c9:ea:ff:6c:cc:69:10:f5:41:d6:c5:4b:fb:24:16:fc:
0b:d7:a9:c6:6e:0d:3a:a3:83:8d:f6:58:3d:dd:6d:8f:65:79:
5c:dd:13:a1:ba:7f:f7:e3:1a:5f:2a:e6:f3:9c:5f:41:e1:17:
09:67:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org