Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: EghWUgHE+3TSwPT0XfhfV8fcuGjHcV6F1Q8C2sfppI8=
Subject key identifier: 2D:4F:FF:C6:7F:60:E2:74:EB:6B:82:C0:6F:B5:1A:4A:90:C2:09:D9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 506216E3D4A5ED96CCCE3EADA83F2927FEBBC32A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:28 +0000
ROA not before: Mon 26 Sep 2022 09:55:28 +0000
ROA not after: Mon 25 Sep 2023 10:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:1fb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:62:16:e3:d4:a5:ed:96:cc:ce:3e:ad:a8:3f:29:27:fe:bb:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:28 2022 GMT
Not After : Sep 25 10:00:28 2023 GMT
Subject: CN=2D4FFFC67F60E274EB6B82C06FB51A4A90C209D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:04:df:55:87:18:80:d4:8a:c2:d0:e4:54:
e9:32:64:dc:97:98:fd:b4:14:12:7d:60:18:55:07:
ef:4e:12:20:69:8c:5e:d7:e5:0f:69:90:0a:77:af:
40:ec:76:f3:3d:1c:ef:dc:93:b8:94:83:1a:b8:4f:
92:2f:90:3e:a2:93:dc:2d:9a:a5:36:25:c4:c7:eb:
46:eb:0e:fe:0d:3f:b8:bc:06:b8:6d:45:f0:8d:fc:
70:30:30:92:35:83:7e:43:bf:16:63:17:7e:fc:33:
48:c7:e9:b4:13:00:e0:bd:0e:92:d2:20:b9:6e:8b:
32:05:cb:10:94:b2:13:ca:34:1a:87:af:c0:71:b7:
db:80:02:8d:16:f7:48:da:ce:3a:e0:ca:32:cb:50:
b8:17:d6:e1:d6:a2:3f:d9:08:4b:5a:55:d9:e0:4d:
31:31:ff:12:af:aa:ba:13:94:dd:3a:de:dd:b2:6a:
4a:01:b9:b5:32:3e:1d:53:24:25:ae:68:7b:5b:82:
d5:84:43:a9:6e:dd:67:41:71:02:f4:4c:f2:6a:e4:
07:de:f0:81:b4:4a:0c:f3:7f:c4:b3:ac:3a:b3:41:
3c:dc:1f:80:34:f2:ca:11:f3:49:d5:0b:39:be:d9:
0c:78:bb:95:53:6a:2e:80:91:f3:f6:6b:88:b8:03:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:FF:C6:7F:60:E2:74:EB:6B:82:C0:6F:B5:1A:4A:90:C2:09:D9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1fb::/48
Signature Algorithm: sha256WithRSAEncryption
5a:b1:8e:60:f4:f0:03:f8:55:21:0b:7b:f5:de:dc:8b:39:08:
0d:cd:20:a4:0b:c9:e5:90:18:13:10:38:67:18:c4:cc:7a:57:
7b:ab:98:c5:cd:0c:a8:aa:d1:2d:ac:59:d4:01:e7:2a:a0:80:
79:41:3a:aa:b4:d5:8a:1e:8b:7a:d4:28:26:54:c0:5f:c6:32:
50:cf:5e:de:37:94:2e:c6:54:ad:a9:15:18:b7:9e:65:fa:af:
2c:9d:88:27:12:b0:3b:f3:70:43:85:36:2b:c3:3e:51:f4:42:
60:e5:73:96:e2:3a:8b:56:4e:99:77:ed:7c:fc:4e:e9:0e:cd:
c4:74:48:22:a7:0c:cd:db:2b:10:f3:42:49:02:f0:f8:54:20:
06:36:b6:f2:1c:26:bf:b9:05:63:72:ad:02:38:ce:c2:8d:84:
3b:ae:fa:d6:db:23:40:65:95:3f:b6:6e:a2:03:71:03:79:21:
b7:42:38:fc:4c:ac:27:34:b8:12:2b:eb:49:8d:de:0b:8a:f0:
4d:74:27:13:f9:d8:e4:81:0f:97:ad:7a:75:01:bc:12:f3:ae:
e7:d8:2c:d6:db:55:c9:86:9d:8a:e6:5e:8e:1c:85:d5:a2:3e:
42:6f:45:b6:63:0d:31:35:1e:43:d8:01:89:15:0f:d1:dc:b9:
4b:2c:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org