Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3231303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: a1/A2mrSVPev3BxPGZjBDQnoiQxlPSI1SxSNzgiu9bI=
Subject key identifier: 99:C8:21:98:E1:12:C6:FB:48:72:0E:DB:50:3E:2B:A4:AC:B2:19:94
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3F74D5C4313EE9A66C54252180C4B5DDE1B0B618
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:22 +0000
ROA not before: Mon 26 Sep 2022 07:56:22 +0000
ROA not after: Mon 25 Sep 2023 08:01:22 +0000
asID: 59282
IP address blocks: 2400:d680:210::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:74:d5:c4:31:3e:e9:a6:6c:54:25:21:80:c4:b5:dd:e1:b0:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:22 2022 GMT
Not After : Sep 25 08:01:22 2023 GMT
Subject: CN=99C82198E112C6FB48720EDB503E2BA4ACB21994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:93:9a:26:c5:f3:aa:02:0c:23:33:30:87:
bb:d9:7d:fd:2d:53:a6:98:f2:65:7a:6a:b6:c7:7b:
cd:90:5b:4f:d7:b9:fc:2f:4a:a9:92:73:55:de:6f:
b4:90:a5:e8:23:77:5d:66:bd:a3:d5:4d:ae:39:19:
24:ce:9d:3e:3f:83:05:44:41:98:e6:09:fb:09:70:
21:9b:04:f5:5d:39:8e:27:1e:4f:8e:f5:be:aa:94:
62:21:d5:f2:7d:55:67:d8:bc:67:6e:20:c5:17:0a:
6e:ed:75:a6:f8:69:a8:32:b9:d5:c3:98:58:04:de:
b4:63:7c:d6:5f:01:74:f1:2a:4f:0e:1e:f7:8b:2e:
80:4e:5a:b1:9e:92:18:d4:e4:f7:f8:2a:48:ce:76:
98:25:47:44:61:c2:28:f9:f7:c1:da:a1:70:ee:1c:
89:6c:89:e6:8e:a4:f2:7f:86:12:0d:52:3d:4e:1b:
3c:1a:0a:81:26:bd:86:3f:71:c0:15:bc:b5:95:6f:
ba:d7:fe:41:d1:21:4f:c7:b0:0f:0d:d4:9a:42:be:
cf:7f:e0:c1:08:5e:92:76:3d:69:93:84:50:14:f2:
57:0a:6e:d9:f5:eb:4f:9a:b3:10:9a:a5:5b:8d:e4:
b2:67:d9:29:84:a3:d6:5b:77:60:54:55:5d:c4:dc:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:21:98:E1:12:C6:FB:48:72:0E:DB:50:3E:2B:A4:AC:B2:19:94
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:210::/48
Signature Algorithm: sha256WithRSAEncryption
cc:2a:ec:18:29:ef:bb:a9:a5:18:f8:87:84:64:02:6a:4e:df:
e0:03:f1:ba:66:d5:10:cd:48:da:e9:0c:b3:f8:64:1a:6f:97:
f4:6e:58:f2:8e:23:4a:b7:eb:f7:46:9e:1e:d2:f7:5f:49:d8:
9e:41:ca:97:8b:6e:47:11:a6:0a:bc:c2:29:20:00:14:1a:6f:
20:e7:fd:d9:ba:73:c7:47:4f:54:47:2f:63:d6:97:ea:28:2d:
c2:06:c8:35:e0:e8:08:b9:f5:9f:96:ef:f5:dc:78:d8:e0:26:
44:89:6b:dc:6c:dd:2b:a2:30:bd:92:d2:14:31:b8:7d:44:00:
a5:52:4c:02:b6:2d:95:07:86:3f:81:95:10:b8:a7:ee:93:20:
f9:90:8c:de:c4:2f:d7:32:38:fc:44:e3:ae:cc:c4:c9:90:9f:
97:e5:04:64:07:85:a9:09:94:a8:b4:12:08:53:36:b4:57:c9:
85:b2:a3:26:1a:c5:3f:fe:49:9a:e4:07:f4:03:87:b4:82:d6:
0b:c0:c6:33:10:96:fc:a7:08:2e:16:b2:f9:e9:52:d9:c2:97:
c2:41:07:2d:3e:ca:93:48:3b:52:ed:5f:35:df:c2:30:fb:24:
17:05:91:e1:aa:e2:af:f6:50:ba:ae:93:46:27:73:c1:5c:07:
95:6b:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org