Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3163393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DFx9kCj3YKpnOKbDlPID3uFh/RLGjoGeAbOocqHOPn4=
Subject key identifier: BA:3A:F0:52:74:BE:03:7C:0D:1E:24:AE:A1:2C:AE:52:7B:47:A4:91
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2A11406C65CF4E092F31BD81D9F5AA7873CFA213
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:07 +0000
ROA not before: Mon 26 Sep 2022 09:55:07 +0000
ROA not after: Mon 25 Sep 2023 10:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:1c9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:11:40:6c:65:cf:4e:09:2f:31:bd:81:d9:f5:aa:78:73:cf:a2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:07 2022 GMT
Not After : Sep 25 10:00:07 2023 GMT
Subject: CN=BA3AF05274BE037C0D1E24AEA12CAE527B47A491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:c1:47:56:93:dd:61:1f:91:39:92:5e:e9:
f4:11:9c:4e:7d:c6:fd:37:87:3b:62:85:1e:cb:bb:
c7:4e:02:27:94:78:b7:b2:5f:00:18:6f:c3:1c:79:
ca:20:16:8d:9d:57:a8:3a:3e:e3:ff:d3:30:45:00:
c0:e6:47:42:a6:35:dc:df:07:f5:6d:b5:ab:87:ab:
13:a8:b3:12:81:8d:a0:41:89:6a:ff:12:be:74:69:
83:0e:13:75:68:6b:4d:d0:ee:8a:a9:ee:a8:e0:aa:
3b:1c:9e:59:a0:13:44:94:a8:31:5b:c7:4e:96:b3:
32:c5:f2:19:fb:9c:a1:cb:dd:7e:d7:47:60:22:2c:
c4:e7:f9:e5:1b:ea:67:19:76:b9:01:c5:7c:5b:45:
20:d3:6a:cf:2c:9c:cd:1e:ba:90:90:24:55:bc:42:
89:f1:e6:98:68:7b:52:19:81:31:ff:a2:96:a1:44:
04:1d:d5:b6:a5:6b:cd:9b:4b:11:05:79:a6:d5:f9:
5b:da:87:4e:18:b0:11:f9:9b:cd:be:62:a8:33:fa:
44:f7:fa:6b:63:6d:f8:a7:1b:37:39:9a:0e:78:46:
eb:dd:ec:a1:b0:91:ed:2e:ce:c0:da:69:2f:36:52:
5c:6c:f6:2f:21:0b:70:2f:2d:a1:44:59:b9:7e:35:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:F0:52:74:BE:03:7C:0D:1E:24:AE:A1:2C:AE:52:7B:47:A4:91
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1c9::/48
Signature Algorithm: sha256WithRSAEncryption
0e:24:13:a6:19:c9:d1:1d:7d:77:5b:ee:07:99:46:21:51:93:
54:a9:e4:9d:45:90:ad:cc:40:01:d9:e2:8b:de:60:6e:01:86:
b6:87:87:81:df:1f:47:c7:14:f5:c8:3a:ca:95:8d:9c:73:a2:
20:10:53:0b:35:bc:ae:3a:73:01:3e:7c:91:7f:15:1e:bb:98:
5e:35:0e:34:1b:62:3a:b3:ca:c5:b5:7a:09:43:91:36:24:91:
4c:19:84:fd:7a:e8:35:48:2d:0a:45:e1:9d:de:e9:12:ba:f2:
5b:38:4a:c3:b6:25:40:54:e9:a7:f2:76:37:00:3e:89:43:48:
52:1e:c1:45:d5:19:45:36:10:9a:90:60:07:99:fc:01:d6:54:
69:22:50:63:8b:e9:4a:74:28:9b:74:1e:76:e8:45:80:8f:ae:
2d:1a:17:18:ed:38:38:9b:8b:10:de:03:f6:01:3a:70:5d:c1:
6f:49:ea:7a:3f:fd:44:31:dd:da:53:69:39:f8:b8:cb:73:ce:
20:75:03:c5:0e:da:3f:7f:f2:8a:34:43:e4:63:e9:22:18:09:
2e:49:49:a2:58:23:bb:95:cd:a6:3c:55:8f:89:81:ea:d2:94:
b8:12:82:9b:1a:c5:5e:71:04:e4:c8:14:cb:55:8d:98:9e:5d:
a8:94:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org