Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3232303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: wGJvP7chFiiuth0O2Ccc9J0lRsd9P7TKTBQ6dtlzxrQ=
Subject key identifier: 13:11:7B:CD:D1:03:8A:5D:85:9D:E1:01:F7:F0:81:18:68:19:2C:EA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 088A22DA8A6150EBCD10BCFC33DBAC0467AACAD4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:03 +0000
ROA not before: Mon 26 Sep 2022 07:57:03 +0000
ROA not after: Mon 25 Sep 2023 08:02:03 +0000
asID: 59282
IP address blocks: 2400:d680:220::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8a:22:da:8a:61:50:eb:cd:10:bc:fc:33:db:ac:04:67:aa:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:03 2022 GMT
Not After : Sep 25 08:02:03 2023 GMT
Subject: CN=13117BCDD1038A5D859DE101F7F0811868192CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:03:f8:9a:3e:fd:44:2e:ee:66:c2:7f:a1:
f2:a8:74:6d:c3:ba:e0:ab:ae:85:0b:3a:7a:c2:64:
34:a0:2b:da:6d:7c:6e:c3:c2:38:56:06:92:3f:f4:
eb:84:b1:a8:c6:9c:b6:95:07:3e:b2:68:f0:84:de:
18:70:50:f7:af:b8:ab:9d:2a:81:3e:d7:a8:a3:db:
0b:86:1f:4b:c3:04:da:0a:8a:09:3d:9c:86:53:f9:
b2:7f:cb:2e:fe:32:ef:90:1e:e3:5e:51:a6:a5:33:
81:3c:74:63:ed:ff:9d:69:bc:84:18:52:2f:6f:72:
36:c6:07:43:66:02:44:d2:86:ca:0c:67:02:df:96:
8c:2e:6c:4f:71:41:8f:2a:cc:10:db:c9:31:12:ab:
b8:cc:c4:2a:09:66:32:a8:d8:dc:4b:2a:d4:8c:19:
2d:64:36:8d:de:20:58:65:13:61:54:b2:fc:c2:1f:
8d:63:54:20:51:ed:19:23:6f:12:a0:be:ff:53:16:
5f:bf:7a:c3:0a:41:06:7b:e4:29:c8:b1:5a:a8:6c:
16:bd:79:03:59:2f:95:39:46:ef:e4:17:1e:25:ed:
10:bd:78:a2:92:d8:a1:93:38:40:1d:51:e6:fc:fb:
55:2c:49:7f:40:7a:62:e1:63:b3:c1:de:54:84:7e:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:7B:CD:D1:03:8A:5D:85:9D:E1:01:F7:F0:81:18:68:19:2C:EA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:220::/48
Signature Algorithm: sha256WithRSAEncryption
66:c4:ea:87:90:3c:80:e1:8e:00:51:6c:66:1a:1a:ca:b1:04:
56:32:ca:9d:80:65:18:ca:e1:8e:53:5d:f9:57:1a:28:b8:4a:
e5:8a:ee:27:ae:06:b3:25:4b:8a:94:9a:e1:27:49:56:41:f0:
a2:1c:90:87:31:c3:c4:2c:cc:ed:74:e1:b5:1c:f4:3a:5c:0c:
7d:ea:7d:0a:b4:49:72:96:c6:95:cb:0e:9b:59:42:fd:bd:f0:
23:0c:64:2a:a5:6c:90:2a:5b:2e:be:7a:4c:9e:bf:34:35:e8:
7b:60:42:e9:b4:cd:90:a0:50:d0:a6:da:7f:6e:c1:10:5f:4f:
e0:f0:6f:9c:21:d3:58:15:14:68:a5:1f:14:47:d8:76:a2:ef:
d3:1d:21:7e:49:6e:fd:50:b8:d5:b8:ad:17:67:d5:d6:21:e0:
7f:e1:f0:7c:bd:e5:82:3e:f1:38:c6:0c:51:a2:fa:71:c5:77:
06:a5:3c:5c:37:6c:d9:a2:1e:ab:69:3a:46:7b:e9:38:45:b5:
57:e5:f1:c8:60:3a:d2:b8:9d:f6:36:74:6a:af:ec:15:a8:fe:
ae:2a:74:39:68:50:54:8d:83:e6:44:b2:35:d3:c8:cc:4c:af:
11:73:c9:05:a3:d2:d7:04:b6:62:1a:e0:41:ba:4a:9d:7e:8b:
51:10:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org