Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3163363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: NC0Rib2g4yT+WtGkiZe0eoE1BIfX9XZid6mnimNpx3o=
Subject key identifier: 7A:4E:B1:4B:A6:AF:0C:58:E7:9A:30:6A:FF:A0:9A:FE:13:26:77:DA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3A35A2A3969ADD5327554DBF5085AD6A31E0F8C3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:11 +0000
ROA not before: Mon 26 Sep 2022 09:55:11 +0000
ROA not after: Mon 25 Sep 2023 10:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:1c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:35:a2:a3:96:9a:dd:53:27:55:4d:bf:50:85:ad:6a:31:e0:f8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:11 2022 GMT
Not After : Sep 25 10:00:11 2023 GMT
Subject: CN=7A4EB14BA6AF0C58E79A306AFFA09AFE132677DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:c6:30:2a:d9:ae:7b:11:07:92:fb:f6:a0:
09:93:6a:32:5e:72:d9:3c:37:2b:67:5c:4a:b7:97:
c2:3c:ca:d2:53:2b:4e:ac:ee:e7:80:4f:c4:7f:43:
28:41:da:4b:c9:7f:74:ae:c7:29:13:16:b2:60:3b:
90:e2:67:e1:0d:48:70:d7:b3:21:ec:ed:18:fe:db:
e0:cf:66:13:b2:c5:01:ef:cd:4f:3d:39:6b:62:36:
d0:e3:0b:6e:3e:73:fa:c2:9a:ee:7d:c3:54:73:6e:
20:9c:53:74:1c:fe:a8:5b:93:6e:07:de:e8:64:d4:
57:a1:14:59:8c:92:09:12:b1:7e:ac:b1:48:0b:73:
c6:03:79:dd:9f:56:95:43:6f:de:96:8e:07:64:e7:
80:2e:92:20:2f:4e:35:c8:fa:14:84:2c:d3:fa:51:
79:9f:a5:9f:53:ca:62:2f:3c:3e:73:ef:22:22:45:
98:94:5c:80:ef:e6:f1:43:a3:2f:c0:80:a3:f0:c8:
b7:5d:e1:bf:f2:6b:7f:08:08:87:b3:03:d6:55:70:
c3:7c:72:c5:23:4d:af:9a:c1:73:6f:dd:da:04:db:
9b:2c:ff:de:d1:f0:e4:a1:ca:9a:fc:a8:c3:de:c6:
35:d3:52:aa:87:f0:b5:42:1d:8f:74:d2:6d:55:ea:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:B1:4B:A6:AF:0C:58:E7:9A:30:6A:FF:A0:9A:FE:13:26:77:DA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1c6::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ba:ba:e3:c0:8d:be:30:79:e2:4f:33:51:47:9f:13:d8:c9:
f8:ea:90:68:8d:08:be:e2:b0:fa:f9:14:05:51:f7:58:31:66:
c5:e4:2b:4c:6c:a7:c1:ea:3f:18:8c:81:8e:e9:0b:5b:c7:8d:
7d:14:24:ff:66:07:fe:1d:7d:da:fa:5a:f6:2e:8d:df:89:a9:
c0:a2:0e:d4:6c:1b:4f:5f:1d:0f:31:e6:c9:0e:75:ab:a7:94:
11:78:a2:41:54:6d:64:af:a8:ed:84:e7:82:7a:16:e0:ab:70:
d3:91:dd:95:22:cb:94:14:a6:3d:95:69:b0:7f:a6:08:01:36:
96:34:77:88:d0:93:25:ad:f8:18:b8:79:39:12:55:06:eb:69:
6a:d8:97:10:ce:2e:82:43:fa:22:38:7e:02:b8:f7:6d:33:ff:
8d:f9:5b:f6:26:51:dd:74:2e:91:26:04:23:8a:78:9d:c1:70:
60:e2:45:2d:03:09:05:fc:a1:d2:a3:4a:28:d3:7f:94:b1:f8:
f7:4c:fa:7a:c5:ab:17:71:46:bf:ff:97:c9:5c:cb:8e:8f:f9:
f1:e6:c9:d4:cf:fb:59:bd:fd:57:1f:e8:60:9f:88:95:e2:42:
76:8c:12:a9:0a:0a:61:7d:7c:2a:06:c5:15:ae:af:e1:90:f4:
62:e8:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org