Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: phnOuEllh6YiNhUlSaTcWvYC44lq7AHpxAhF3tOa28Y=
Subject key identifier: 63:B1:83:D9:28:EF:63:AA:44:F7:2F:18:1D:AE:32:4D:9D:29:3B:0C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 235C5615BA0EDADE2B269AF569B138881BF63A9E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:24 +0000
ROA not before: Mon 26 Sep 2022 09:55:24 +0000
ROA not after: Mon 25 Sep 2023 10:00:24 +0000
asID: 59282
IP address blocks: 2400:d680:1fa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5c:56:15:ba:0e:da:de:2b:26:9a:f5:69:b1:38:88:1b:f6:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:24 2022 GMT
Not After : Sep 25 10:00:24 2023 GMT
Subject: CN=63B183D928EF63AA44F72F181DAE324D9D293B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:e7:23:29:12:1e:95:1a:52:6c:d4:0e:a5:
1a:18:16:15:2f:ee:b4:70:65:6c:fa:87:11:23:af:
3a:b1:fe:76:6c:ec:21:31:f2:7d:1d:3d:7a:36:3d:
9d:93:4f:6e:b2:69:8a:8c:bb:6f:04:43:93:88:64:
5e:37:da:51:47:12:e1:f4:a7:c7:1e:59:6a:7f:31:
0f:99:32:e7:86:e3:16:1d:7d:c9:b7:f9:c1:fa:93:
07:33:af:cb:c3:fd:2f:04:09:a8:65:f9:b5:47:68:
0f:43:8d:2d:14:59:cf:68:5d:c9:ef:71:d9:e4:6a:
65:c6:45:c7:d0:8a:e4:d1:12:ef:70:07:78:ca:62:
6e:cd:c1:a6:9f:22:2a:a7:48:bf:44:ce:ac:db:3a:
e7:63:a7:61:70:eb:3d:76:de:c6:55:5b:05:53:b8:
28:5f:ce:da:bf:64:96:d9:68:42:bb:86:0d:17:af:
49:f5:60:49:1e:9b:ec:38:53:16:31:93:1a:0f:e6:
90:1a:79:ae:c9:90:34:f1:1e:bf:79:44:5d:1b:7f:
9c:99:91:c0:ea:61:39:5c:3e:7e:31:33:4b:eb:22:
2d:88:e5:08:3b:69:13:6b:30:4c:40:03:e5:06:86:
1b:22:04:08:2d:a6:2a:bc:c6:ee:5e:3a:84:4b:9f:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:83:D9:28:EF:63:AA:44:F7:2F:18:1D:AE:32:4D:9D:29:3B:0C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1fa::/48
Signature Algorithm: sha256WithRSAEncryption
02:54:95:9d:96:57:6e:4c:72:75:3c:6c:74:70:3a:c6:8d:20:
95:49:ef:75:3e:77:a1:6c:28:5a:3b:b5:55:24:46:0a:a1:d8:
3f:27:f7:a2:58:2f:56:be:ee:e5:87:35:d1:3b:f2:58:aa:60:
5e:96:18:80:c1:e6:15:2e:38:d1:c6:09:21:aa:c2:32:86:dd:
7d:a8:92:c8:c3:7b:29:6d:bd:7e:1d:18:6d:2d:4e:ee:04:4e:
c9:52:d9:b4:01:ff:c7:4b:47:aa:25:66:1c:19:8f:73:ba:99:
25:10:6a:b6:6a:60:06:ee:0e:2a:80:99:71:c0:a7:c5:b9:f9:
65:d7:04:e9:d2:02:82:01:2e:20:9a:05:04:f1:a1:fd:f3:54:
55:2e:18:2d:84:e9:2e:70:d7:a2:37:fa:9d:9d:86:79:13:2f:
49:6a:31:aa:4d:78:ae:55:18:84:64:ab:b2:cb:d5:3d:52:b8:
0b:14:68:7a:bb:a8:76:1d:11:2b:fa:18:25:1a:c6:a9:75:2b:
49:a5:60:6c:3a:25:32:cf:86:1e:dd:74:40:6e:d2:36:67:46:
0f:94:0e:64:14:f1:ec:3e:9d:9d:31:41:32:3b:ee:e9:73:2b:
28:97:a3:bd:e1:eb:8b:f2:f0:89:56:07:e5:e1:8d:8c:ee:a6:
45:70:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org