Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: VCuZ2QufGaxW3xtW4iBl6bnow5GpXKEpUiSrQpcoFdY=
Subject key identifier: 83:A9:16:C1:D6:85:A6:0C:53:AE:72:10:EC:72:7C:48:DE:70:69:72
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 779142F339286E049029C16D5FE322807A3A7C4C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 09:00:00 +0000
ROA not before: Mon 26 Sep 2022 08:55:00 +0000
ROA not after: Mon 25 Sep 2023 09:00:00 +0000
asID: 59282
IP address blocks: 2400:d680:1f9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:91:42:f3:39:28:6e:04:90:29:c1:6d:5f:e3:22:80:7a:3a:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 08:55:00 2022 GMT
Not After : Sep 25 09:00:00 2023 GMT
Subject: CN=83A916C1D685A60C53AE7210EC727C48DE706972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:9f:1b:b8:57:09:b6:97:21:e7:0f:e2:53:
3d:73:c5:8a:de:c7:e5:6a:ce:03:14:2c:7a:f7:33:
e4:dd:52:9b:04:95:01:e2:de:5d:bc:66:12:77:b2:
92:39:8e:b0:ab:86:bf:b9:8d:90:53:00:77:ed:10:
fe:37:f1:c3:18:5f:a1:9e:6e:49:e9:b5:56:76:b8:
79:d6:e8:76:04:8a:4b:0e:cb:4a:98:8a:b1:7b:25:
3a:84:3d:b1:63:62:b8:6f:0b:0d:8b:0e:35:df:ba:
14:e8:60:5b:4a:95:1e:ec:b0:51:2f:e9:f8:9c:22:
cc:a4:59:9b:46:82:b8:db:05:88:6e:1b:a6:06:0f:
23:54:44:0a:e9:3b:78:fe:42:97:fa:eb:6b:77:39:
3e:12:91:a1:2b:d6:7d:dd:ff:62:08:50:3b:a6:e0:
aa:ac:8c:9e:8f:1c:55:3e:d5:5b:21:f4:3d:fb:29:
c0:47:d9:be:b6:66:25:a2:23:7d:e9:7b:6f:49:1a:
c7:47:17:fe:c2:ec:7c:c2:6e:85:bc:ce:74:c5:6e:
e2:e9:41:e0:7b:6a:a5:57:b1:ca:c7:1b:2c:da:95:
29:44:a3:e6:18:ec:28:fc:58:ad:c9:24:6f:0f:b5:
9f:79:b9:ac:1c:d1:c2:78:1e:e1:50:ad:46:ba:5c:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:16:C1:D6:85:A6:0C:53:AE:72:10:EC:72:7C:48:DE:70:69:72
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f9::/48
Signature Algorithm: sha256WithRSAEncryption
2b:a2:a9:dd:77:44:15:ed:df:0c:b5:34:5c:12:50:bb:0d:c7:
2b:37:a3:4e:e2:52:8c:4a:b2:de:77:59:e2:95:70:a1:e7:3a:
a1:ae:31:e4:50:89:59:d2:d8:58:28:92:fe:11:5d:39:97:b7:
1a:fc:8a:d2:44:7d:72:ca:61:25:72:bd:02:9f:fa:37:db:70:
7a:f8:48:b0:24:4d:20:04:38:eb:f1:d1:bd:a4:5e:16:cd:97:
f8:3a:1b:3f:9b:dc:4a:2b:d5:71:f7:30:d2:92:ae:c1:4e:21:
5c:2a:fe:1e:33:37:05:b3:1b:fd:e0:3b:be:7c:20:d3:2e:45:
7c:65:02:d7:76:d9:47:20:61:ec:50:24:de:0e:eb:36:9b:c8:
02:27:83:da:44:0f:bd:d7:62:52:38:41:82:75:4c:dd:39:b9:
58:92:e2:8a:00:c2:d2:37:11:56:46:1d:b4:47:fd:60:3d:59:
4a:e2:e6:39:ef:f4:00:75:33:3f:5a:79:1b:b6:e7:5d:b8:f6:
90:d2:88:94:a8:17:bd:25:bb:dc:1c:b2:76:88:1c:5e:c3:fd:
10:29:a3:db:fe:b0:52:62:15:7d:f9:a4:c6:e6:98:9c:c7:21:
44:ce:9b:23:5c:c2:14:1d:8a:04:e6:27:dc:a1:12:71:03:9a:
01:b8:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org