Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3163663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: uwe5NrKdXnxIATGPkt+AS5FlwflI5IRsIrleXyZtZA4=
Subject key identifier: C3:0B:2B:77:C1:CC:8C:8C:6F:5D:C8:74:C9:25:F7:58:CC:4F:AA:74
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7E6868D00E82045E623828D8B5F193E048EE467B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:23 +0000
ROA not before: Mon 26 Sep 2022 09:55:23 +0000
ROA not after: Mon 25 Sep 2023 10:00:23 +0000
asID: 59282
IP address blocks: 2400:d680:1cf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:68:68:d0:0e:82:04:5e:62:38:28:d8:b5:f1:93:e0:48:ee:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:23 2022 GMT
Not After : Sep 25 10:00:23 2023 GMT
Subject: CN=C30B2B77C1CC8C8C6F5DC874C925F758CC4FAA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:06:35:16:fb:05:cf:2b:ff:16:a6:55:2a:
7d:a0:ad:d3:72:c1:55:9d:28:73:22:f5:c1:d4:ac:
eb:7c:89:95:0a:98:de:32:af:a4:df:ef:86:c2:0e:
4f:6d:b1:cd:b3:21:a3:a3:e4:c6:2e:3b:00:b3:ef:
64:04:2c:71:77:8f:be:3b:cb:cf:de:51:9b:f9:5d:
a7:ee:a8:16:97:5f:37:40:7f:41:42:d9:25:86:5f:
ca:f6:1f:9e:df:1b:fe:8a:93:93:51:bf:08:ca:91:
1e:9b:20:3b:c1:b2:5b:fe:f5:64:ed:63:64:b5:21:
0e:d5:e7:c0:38:3c:a8:a6:5d:cd:91:86:3d:d0:04:
35:ec:62:ae:05:23:05:c0:c4:7a:6a:bd:5d:24:9a:
39:ac:48:fc:17:44:f9:31:0b:75:2f:5f:f0:c9:38:
70:d9:13:8d:df:96:c4:13:b2:97:a1:75:98:e3:2e:
46:2a:07:55:43:63:22:9b:b6:55:d6:ca:90:38:8d:
07:03:c8:f4:8d:ee:5b:95:4e:6c:45:9c:e0:5d:13:
29:50:a5:3b:21:55:ad:1a:c8:01:d0:0a:5b:d5:f3:
61:2c:56:44:20:d0:ea:b3:c5:b4:38:54:10:4e:c5:
e0:db:5b:0c:d8:10:19:24:a9:28:4d:9c:c2:c0:db:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:2B:77:C1:CC:8C:8C:6F:5D:C8:74:C9:25:F7:58:CC:4F:AA:74
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1cf::/48
Signature Algorithm: sha256WithRSAEncryption
c4:ef:2a:fc:46:c8:ed:b3:ff:32:52:d8:2f:01:c0:93:80:af:
d0:f0:9d:c6:3d:2b:fa:37:12:fa:7d:b7:f4:55:67:32:39:99:
d6:8a:b0:90:d6:5a:06:4e:10:7d:f9:15:08:ae:67:ae:6f:97:
f6:23:e8:03:19:21:2b:1a:bf:2e:79:f6:5f:85:b0:34:5c:d9:
bc:f8:5a:5a:53:28:db:8f:63:d8:ab:02:3c:a4:47:39:0e:d6:
09:60:14:ef:ed:9f:ac:e5:b1:fd:ea:5c:4e:a5:90:8a:81:1f:
bd:e3:b6:65:0a:a9:4d:41:25:78:eb:4a:0b:aa:89:1c:e1:1b:
44:0b:27:3c:b7:e9:1c:dd:4b:6b:7f:a9:f0:37:f2:60:19:10:
52:45:04:5f:24:94:81:15:af:87:d2:e1:4a:99:8d:98:fa:79:
ad:63:13:26:16:b9:59:41:88:8e:2b:90:bd:4d:02:f0:08:9f:
7c:42:1b:e9:a1:d1:6e:e2:32:e7:ec:8c:60:31:4a:b0:a8:ce:
77:66:79:ae:95:d0:d6:cf:3d:24:c4:cb:a4:fb:54:1d:1a:ad:
05:20:c9:d0:9e:22:7f:be:48:17:90:64:5f:b9:50:f1:1c:6a:
94:16:4b:c7:7f:df:e2:2f:0a:1d:28:a0:47:fb:43:c6:71:57:
03:08:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:17 2025 by rpki-client