Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: X0ZTyamEeMthS7SYFB8CG47yGvev57K2NgTSOj+ZTEw=
Subject key identifier: 3E:2C:89:A9:07:85:A7:3C:42:7E:6A:7D:99:10:2C:3C:3C:3A:73:08
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 18361F6DC41360FD4402E1E8ABDE6F96604E640D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:48 +0000
ROA not before: Mon 26 Sep 2022 07:56:48 +0000
ROA not after: Mon 25 Sep 2023 08:01:48 +0000
asID: 59282
IP address blocks: 2400:d680:20e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:36:1f:6d:c4:13:60:fd:44:02:e1:e8:ab:de:6f:96:60:4e:64:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:48 2022 GMT
Not After : Sep 25 08:01:48 2023 GMT
Subject: CN=3E2C89A90785A73C427E6A7D99102C3C3C3A7308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:78:da:e1:c1:50:e5:d3:61:02:b3:a7:72:
2b:20:fd:48:35:90:d0:f4:30:d4:c5:0c:42:2a:08:
71:fb:78:7e:d9:82:5a:a3:d3:6b:80:7f:ed:df:4c:
d9:0d:d4:15:59:bb:5b:8c:4b:fa:04:b7:39:49:53:
5e:a1:10:a5:63:04:fb:84:c9:c5:b4:6c:d4:a4:7a:
f0:a2:60:77:06:7a:b6:a9:9f:76:c8:0f:05:5c:d4:
78:a5:60:03:63:5d:33:02:61:65:03:0b:98:d8:23:
5d:e7:bc:2a:b9:b6:04:1b:fe:14:f8:d1:34:81:6a:
1d:0e:98:20:d6:16:17:24:6b:7e:e6:93:da:a5:6e:
f3:d2:47:5e:fb:ec:5b:bf:2d:bd:a0:5f:6e:4a:9e:
a0:99:e4:64:fe:92:99:58:1b:62:a6:eb:2d:bf:a5:
8a:2a:de:b4:bb:24:10:e9:40:cf:60:cf:ab:a6:38:
39:61:da:a4:f9:c2:c5:38:22:d3:36:e8:54:0f:2e:
a8:b5:d8:97:75:0f:6f:72:a8:d4:94:8b:95:5d:aa:
8f:8a:cb:a0:13:5f:8b:87:d5:f9:ac:8d:ca:80:b5:
e2:f8:e0:73:b7:f1:6e:c7:53:e9:38:26:f5:0d:9f:
44:59:6f:79:39:cb:ef:d3:91:16:23:08:15:14:30:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:89:A9:07:85:A7:3C:42:7E:6A:7D:99:10:2C:3C:3C:3A:73:08
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:20e::/48
Signature Algorithm: sha256WithRSAEncryption
b9:1a:9b:0e:96:5e:ab:0a:a1:5a:20:9a:8b:f1:52:e4:22:45:
8c:40:f2:b2:5f:47:7f:c3:a3:17:5b:67:5b:66:aa:d1:28:8f:
55:df:86:46:0e:a0:ed:af:0d:6e:9b:c1:68:33:7b:5f:eb:16:
c3:47:5b:4a:b5:88:2d:64:54:8d:d1:5c:1c:8d:f3:7a:8d:5f:
6e:f5:1b:55:2c:1c:41:0b:be:68:83:47:02:b5:e5:a0:b6:96:
ee:74:d1:ad:15:36:35:75:0c:64:7a:d7:7c:97:7e:75:a0:04:
be:b4:f3:0f:d6:27:9d:14:eb:6f:6a:18:1e:92:6e:8b:8b:14:
44:a8:8e:60:4f:ca:0b:64:1b:1d:60:c6:74:14:45:4e:03:05:
9e:98:5f:01:de:d7:20:8c:60:88:05:4c:21:c2:5f:79:ed:7f:
5a:3d:20:ab:02:78:fe:e6:a7:6b:f5:b7:5e:cb:2f:6a:8d:f0:
1f:2e:16:4a:bd:96:da:d6:b9:f3:aa:66:14:8c:78:f0:a1:9d:
07:cd:ca:da:40:65:74:08:34:0d:9a:50:e8:d0:b5:91:6a:b7:
06:b6:78:73:76:a0:5f:f9:c0:4b:a4:f0:da:89:e4:b0:64:92:
a5:fb:4e:49:87:f3:af:21:65:b2:a1:f1:ef:20:72:f2:fe:74:
53:ae:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org