Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: eWvto3tV/1Ia0sjHxsT1+T0/sSRvXb9NZtAV99U2Rqs=
Subject key identifier: CA:84:1B:B0:C5:66:1B:4A:DC:D9:E4:C9:F4:A0:1E:51:DF:46:12:34
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2A58A0BF627300309ACD3C41DBA09B2B138C0459
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:22 +0000
ROA not before: Mon 26 Sep 2022 09:55:22 +0000
ROA not after: Mon 25 Sep 2023 10:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:1ae::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:58:a0:bf:62:73:00:30:9a:cd:3c:41:db:a0:9b:2b:13:8c:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:22 2022 GMT
Not After : Sep 25 10:00:22 2023 GMT
Subject: CN=CA841BB0C5661B4ADCD9E4C9F4A01E51DF461234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:8b:3b:48:58:2d:aa:6d:20:61:2f:50:5a:
63:89:a7:af:14:6b:3e:89:e1:69:bd:df:73:f4:e9:
df:d4:12:c6:8f:cb:b6:7d:5a:25:82:2d:4b:48:44:
98:17:45:4d:c0:f0:22:47:08:90:5b:6c:ff:2b:06:
69:31:56:91:6a:1a:d3:28:b4:c4:82:00:ee:9d:ef:
07:8e:51:f1:9f:fa:4f:86:2a:99:0d:0d:45:3b:01:
43:5b:b3:89:24:f1:81:0e:26:03:00:58:af:2e:9d:
03:f2:13:f1:2c:b9:a6:16:ca:a3:3d:a5:56:ee:3a:
79:54:4b:58:93:d1:4b:d7:cf:65:a4:24:b7:fc:be:
89:b9:47:6a:99:1c:a8:26:4c:96:61:30:c7:6e:fe:
dd:50:fa:54:1a:55:24:b9:e6:c5:25:36:94:d0:bf:
e2:ba:18:6d:fd:c4:75:c7:11:ae:20:cc:c3:0c:18:
8d:4b:f4:4a:74:36:9e:bb:27:88:72:9b:8d:da:ee:
84:04:7f:3d:c6:94:cb:65:75:df:aa:13:a8:2e:cd:
58:75:05:8f:6b:b4:9f:26:53:27:09:8f:43:cf:29:
2c:a9:ff:45:b2:b7:ff:5f:a2:82:c2:ba:99:aa:73:
65:cf:c0:ed:db:1c:76:6a:6e:42:ef:b5:10:b6:e0:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:1B:B0:C5:66:1B:4A:DC:D9:E4:C9:F4:A0:1E:51:DF:46:12:34
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1ae::/48
Signature Algorithm: sha256WithRSAEncryption
97:b9:fd:73:ba:33:4c:13:3c:2f:78:ef:51:1a:31:c3:b9:aa:
1d:28:e4:72:60:1a:c7:94:45:02:a9:db:0b:50:a2:55:6b:47:
6d:c0:51:75:74:c6:aa:d7:ca:70:b4:84:eb:9d:2c:d2:ad:a9:
b3:07:3e:c6:1d:5f:dc:64:34:97:6d:32:82:a7:d1:5b:39:6c:
87:fc:ff:61:4b:e5:98:a8:44:6a:57:39:d3:08:69:1c:86:fd:
c5:5e:96:c2:5e:b9:e5:f2:44:c1:7a:2e:91:ec:9c:10:ec:dc:
62:4f:99:43:1e:58:d1:69:ee:5e:c8:bc:2e:ba:93:f1:c7:e0:
60:e5:f6:f6:06:06:a3:32:b5:fe:3b:0c:f9:02:ae:b4:0c:a6:
f3:21:65:dd:bd:59:a9:93:7c:30:90:3a:70:b7:78:77:b3:f2:
b7:96:6b:7e:d1:ec:29:b5:c7:3d:6d:3f:ed:f1:10:54:79:4e:
f4:9f:78:8e:41:db:72:14:14:19:f4:f8:f4:c0:d8:66:aa:72:
dd:e4:19:c6:70:09:16:33:e8:29:4f:f9:c1:97:af:19:cd:d5:
29:9d:0d:69:20:f9:89:9c:f3:84:9b:e0:6c:9c:48:41:5c:32:
f0:cc:ef:e2:52:3e:af:96:d5:9d:d0:18:4b:c7:0d:93:f5:a3:
48:39:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org