Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 24lUC+rW2p85ym7JQBLp9MbMLXMKrdFCksBxuYDBNTw=
Subject key identifier: F3:5F:53:3F:92:7D:22:C8:01:3D:84:38:FB:FB:23:3E:61:65:97:DA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6D1C6F86C5F38FE35147FA69B4B1A602391D45BD
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:32 +0000
ROA not before: Mon 26 Sep 2022 09:55:32 +0000
ROA not after: Mon 25 Sep 2023 10:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:1ac::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1c:6f:86:c5:f3:8f:e3:51:47:fa:69:b4:b1:a6:02:39:1d:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:32 2022 GMT
Not After : Sep 25 10:00:32 2023 GMT
Subject: CN=F35F533F927D22C8013D8438FBFB233E616597DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:ec:a4:90:74:84:85:19:48:3c:55:35:4a:
5f:ec:a2:19:01:36:03:62:47:37:5d:f7:2b:49:f2:
62:11:f0:44:ee:39:20:ec:9e:1d:e4:7f:46:97:a6:
a3:c9:37:85:d2:05:dc:cc:28:d4:b7:50:74:73:c7:
4d:b4:61:e6:c8:ed:b8:4b:13:41:81:37:29:1e:0e:
c0:2b:5d:70:3b:ef:1a:56:54:d4:66:35:cf:7a:a8:
14:3d:d3:b2:34:e6:78:05:0d:0b:70:28:e0:73:d8:
f3:77:8e:b9:dc:33:8f:a3:dd:6a:93:d5:f6:02:db:
0f:52:46:86:78:20:0e:9d:f7:5b:99:b9:b7:d9:62:
07:68:23:7b:bd:ad:a4:30:89:db:c9:90:a2:c0:90:
dd:72:1e:e8:62:3e:be:b7:38:6f:b3:e9:fe:ad:b4:
d9:fa:9f:59:e8:3e:a0:bf:0d:52:99:05:b2:e8:49:
1c:64:bd:93:ca:41:cc:18:36:a9:14:e1:0c:cc:f1:
10:77:18:00:a7:21:90:fb:c3:58:11:65:8c:2b:f7:
6e:a7:46:e6:91:4b:11:b6:42:10:0c:9c:b1:04:20:
53:ba:e5:f3:7d:f9:c2:cf:a4:23:4a:fa:0a:5a:33:
f4:3a:19:a9:79:58:27:68:9d:9b:5b:9c:41:c2:e6:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:53:3F:92:7D:22:C8:01:3D:84:38:FB:FB:23:3E:61:65:97:DA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1ac::/48
Signature Algorithm: sha256WithRSAEncryption
b6:c4:a6:8c:5b:cf:98:ce:a7:9f:6e:ab:00:e2:f2:cc:e2:c2:
33:f4:95:9b:e7:10:7e:ba:99:ff:77:6c:29:fd:b1:78:9d:25:
90:b4:64:3a:6a:43:b1:59:3e:9b:f8:9c:ea:fc:92:ec:ac:4b:
7c:31:c6:55:8f:5c:46:77:82:ce:b8:4e:8d:36:ea:c2:1b:a7:
8d:9a:98:f3:59:f3:cc:c9:d6:98:84:0d:9c:6c:48:c7:7c:33:
67:91:52:6b:ec:59:91:c4:76:6c:6d:56:fd:5b:ca:b0:d3:d6:
9d:25:0a:12:d2:c9:26:88:af:b5:8f:08:6c:69:9e:dc:40:4f:
54:90:5b:d9:40:c5:53:e2:0d:56:43:62:c3:5e:ee:e7:d5:2a:
65:15:14:80:75:8d:12:b0:16:ce:d5:40:46:04:c5:6c:67:f3:
40:9d:6c:70:2b:a9:a9:83:23:91:fc:52:14:87:c2:5d:d8:82:
1f:8f:89:72:55:db:9a:8b:f1:c6:0c:1c:6f:d3:19:a6:a8:81:
3e:6c:75:e1:45:3d:da:f4:f8:ba:3b:52:84:2d:7b:8d:af:5f:
af:c5:c6:e6:79:23:81:29:90:f9:56:0c:dd:f2:44:68:20:bf:
7b:db:ae:09:62:93:68:95:70:4a:4d:ef:03:76:b9:4c:f0:b5:
33:de:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org