Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Wl03x1HH5nDXUYnGZyM5ChhVJoWXM624AAP0yJX39gw=
Subject key identifier: B8:1A:8B:A2:F1:2E:A8:F8:69:40:2F:FA:47:FD:B7:30:22:D7:A1:93
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0865F3A6974215FCFFE7D4B5C5D70F3DD77F43A4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:15 +0000
ROA not before: Mon 26 Sep 2022 09:55:15 +0000
ROA not after: Mon 25 Sep 2023 10:00:15 +0000
asID: 59282
IP address blocks: 2400:d680:1d9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:65:f3:a6:97:42:15:fc:ff:e7:d4:b5:c5:d7:0f:3d:d7:7f:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:15 2022 GMT
Not After : Sep 25 10:00:15 2023 GMT
Subject: CN=B81A8BA2F12EA8F869402FFA47FDB73022D7A193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:8c:1a:46:26:f8:48:f5:e0:d5:84:0d:53:
53:af:4b:c8:fa:c3:4d:2d:9b:04:c9:50:97:fc:72:
7d:b5:f7:ef:a0:c9:e7:be:6a:ab:b9:95:37:a3:17:
88:33:fc:88:54:1d:2c:4f:7c:80:16:fc:d3:f8:80:
be:73:1e:70:d1:37:12:fb:58:6a:a7:20:8b:8c:92:
57:88:cf:30:77:56:4c:c3:d8:59:6b:d0:e9:15:95:
b4:97:c8:0c:26:2a:24:16:4c:e0:b4:6d:3b:46:07:
01:32:38:a6:89:b4:68:7e:14:d8:d3:7a:c9:90:cf:
56:29:b1:5a:8a:0e:fa:41:d8:d1:e7:33:8d:c6:d9:
67:8a:39:1a:08:a2:63:69:1d:2d:80:4d:8f:11:dc:
e7:50:c1:9e:18:ba:b6:ed:bb:fa:08:82:9f:65:79:
e9:12:14:53:52:bd:9b:51:6c:1b:75:5b:94:8a:6e:
1c:f9:eb:40:41:ff:7d:84:c6:16:a8:dc:71:44:a6:
3e:e3:f5:6a:1e:63:85:0c:8b:06:7d:15:83:08:13:
da:b1:42:2b:57:2a:6e:3c:38:af:f1:9e:60:ec:2d:
e4:9f:fa:32:3d:c4:9f:45:6f:18:44:31:57:b2:d0:
20:d6:de:0f:f8:9c:c6:1f:39:94:66:c1:fb:7c:83:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:8B:A2:F1:2E:A8:F8:69:40:2F:FA:47:FD:B7:30:22:D7:A1:93
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1d9::/48
Signature Algorithm: sha256WithRSAEncryption
78:83:97:58:e3:e2:59:40:56:2e:81:54:c5:d3:27:4e:c5:c7:
ba:8a:d0:d2:f8:ff:a3:bd:91:1d:81:55:17:64:23:7c:cd:48:
2e:83:44:d4:07:95:1d:bd:90:c9:61:2c:99:89:cd:a0:fb:24:
fd:6b:ed:1c:4f:94:96:d9:70:18:42:19:6d:70:a4:98:52:d3:
b6:da:f7:04:ed:98:79:bf:10:62:e7:3e:ec:86:f0:78:49:cb:
76:f2:0a:14:7e:d3:70:70:a1:ca:ad:e9:3c:d0:e6:1a:e0:23:
9e:c4:04:fd:2c:26:17:13:50:24:b8:33:66:af:65:80:af:13:
75:bb:2e:51:e5:c2:03:92:8e:64:4b:b4:fe:ae:7a:cd:af:64:
d9:cf:d6:8f:76:3c:fa:c2:13:ac:36:80:11:83:1e:d0:6f:26:
a7:ad:1d:5d:6a:c9:b5:68:1c:44:6d:bc:4e:bb:e3:2e:db:dd:
dd:c9:ce:a4:66:ad:5e:65:cf:68:d3:f0:c4:48:78:8e:c7:3b:
a0:89:ef:48:56:6f:fa:11:a4:b2:42:7a:40:cd:00:73:f2:7a:
f8:ab:5a:38:c5:23:04:1c:10:e6:87:ed:a5:59:fd:0d:20:d3:
de:bb:75:48:6c:e9:eb:ce:3e:1d:af:5c:85:a4:0a:d0:e3:46:
e1:8f:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org