Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Xx1dlSCeTFOwTSL3n6lkgB1pXUgfqxb2HDaYhCsMp1U=
Subject key identifier: 45:C0:D4:5B:1D:4B:81:2F:B0:25:F5:75:CA:FD:5B:F2:DF:9B:D6:AC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 10A0C03F8096BDB8C951DC783E37D2D3F5A33C37
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:12 +0000
ROA not before: Mon 26 Sep 2022 09:55:12 +0000
ROA not after: Mon 25 Sep 2023 10:00:12 +0000
asID: 59282
IP address blocks: 2400:d680:1a6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a0:c0:3f:80:96:bd:b8:c9:51:dc:78:3e:37:d2:d3:f5:a3:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:12 2022 GMT
Not After : Sep 25 10:00:12 2023 GMT
Subject: CN=45C0D45B1D4B812FB025F575CAFD5BF2DF9BD6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:07:35:ca:de:59:f0:f5:6e:6f:70:f5:df:
f2:9c:30:dc:a2:f6:ea:47:0e:11:57:03:6e:3e:83:
99:cc:c7:67:30:ee:2a:d6:06:4d:bb:0a:53:29:c4:
c9:bd:d7:90:48:0a:83:4b:68:98:81:74:13:70:75:
48:59:a7:51:d9:e3:08:57:98:1d:52:12:df:b9:b6:
4d:1d:39:51:3f:8d:48:9c:d6:47:4a:84:00:98:2e:
e1:1c:52:d3:e8:3b:5d:2f:e6:b6:2b:9e:b2:c2:a9:
2b:0f:cd:5e:a5:f5:1e:23:d5:2a:a9:9c:4b:95:4e:
f6:63:b9:c3:fd:cd:14:d1:4a:18:89:cd:c4:d4:4b:
d5:59:e7:f1:0b:5f:97:18:18:01:3d:56:83:c3:6f:
d3:4e:d2:ab:6d:7c:76:c0:f5:5e:13:31:21:40:0c:
af:69:e5:ab:3e:ce:76:fe:3f:d6:74:ad:f5:de:29:
d0:67:5c:d6:58:b6:fa:01:f2:2d:12:f8:51:61:c7:
5b:1b:24:60:e2:f6:38:e0:df:c4:58:fb:c6:c6:da:
4a:40:29:f8:19:de:4a:c2:dc:58:a1:54:a6:ff:6f:
d3:28:e4:90:1d:cf:44:6a:b8:3b:e6:50:b2:f8:ff:
e9:f6:8a:b3:ce:79:25:25:ee:3c:1d:fc:92:4b:11:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:D4:5B:1D:4B:81:2F:B0:25:F5:75:CA:FD:5B:F2:DF:9B:D6:AC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1a6::/48
Signature Algorithm: sha256WithRSAEncryption
92:d9:72:c1:9c:b1:1c:68:54:f3:3b:b6:19:29:fe:34:1f:ea:
a5:68:5f:67:d9:fc:68:04:23:bf:3d:a2:ec:4f:60:88:b6:72:
10:d7:35:02:55:d9:08:e0:09:f4:e1:df:ed:8a:0d:e2:b0:e1:
04:b1:a3:30:51:94:4d:37:e9:fa:46:d3:c5:fc:8c:f5:12:a9:
28:35:08:cf:8a:1f:a8:8f:f0:ab:8a:93:60:d8:79:0f:d7:5f:
e4:8d:06:3f:52:f4:fa:85:40:e2:6a:d8:11:ae:3b:c7:2a:26:
2c:7b:e4:19:0e:39:54:97:51:6b:b6:a0:8c:d5:4a:51:fe:38:
d1:8f:ab:06:49:10:ec:ab:ec:f5:41:e8:65:56:0b:65:64:6f:
a3:48:f7:28:78:8c:9c:f9:8c:bb:b2:20:ee:c3:65:de:2e:b6:
45:3a:13:c3:4d:76:d9:98:a2:85:cb:af:78:4f:01:66:a4:51:
09:fc:c9:7b:76:68:16:2e:e6:ee:41:64:98:be:df:4c:99:30:
b0:a4:82:f2:56:c8:0f:c5:9d:b2:30:39:e8:37:be:7e:57:0b:
ae:a8:58:9b:df:f2:37:b2:6a:b3:af:23:33:ef:11:29:1b:bb:
81:eb:ee:d6:84:03:89:4d:f5:69:af:f7:60:c8:d0:4b:a5:cc:
3d:ef:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org