Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3232623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Dx+7/L2oC8zUc0DYIa7QB5YAiSydE9Cs+RBRDgVm7CI=
Subject key identifier: 9B:19:81:2E:53:92:70:B1:DC:0B:09:F2:DD:2E:36:B5:F0:43:67:80
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 343491E44FE4CF72285408F92E3FBDAB412DCF29
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:57 +0000
ROA not before: Mon 26 Sep 2022 07:56:57 +0000
ROA not after: Mon 25 Sep 2023 08:01:57 +0000
asID: 59282
IP address blocks: 2400:d680:22b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:34:91:e4:4f:e4:cf:72:28:54:08:f9:2e:3f:bd:ab:41:2d:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:57 2022 GMT
Not After : Sep 25 08:01:57 2023 GMT
Subject: CN=9B19812E539270B1DC0B09F2DD2E36B5F0436780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:ff:cc:67:4e:e8:1a:3a:54:a7:f9:e6:a8:
25:ca:5b:c9:e5:42:4b:9d:47:a0:41:3b:18:ec:56:
d0:35:80:2e:bf:52:0b:07:95:10:8a:a3:00:2a:5e:
ba:88:cc:0f:07:07:83:be:91:65:30:cd:91:1a:48:
82:3f:8f:86:58:03:be:38:24:cf:65:a9:3c:0b:a7:
11:4d:a0:e2:a3:f3:fd:58:f0:3c:e0:75:8a:7d:44:
39:59:77:24:fb:7f:88:2d:6b:65:55:89:b4:9f:70:
53:c4:85:29:42:74:6d:f2:33:2f:85:81:27:ef:26:
a0:58:e0:43:5d:67:a0:f2:4c:ac:95:51:5e:12:20:
5a:23:0c:30:24:e7:6b:9a:05:53:4a:b0:2a:f1:16:
73:7e:1b:f8:0d:73:e4:84:69:68:73:7b:4b:ba:a6:
67:14:39:e4:89:52:16:a6:d0:5f:98:17:56:0e:ea:
e2:29:92:75:15:bd:aa:f4:6d:d6:bf:44:ac:5b:01:
ee:6d:ee:b2:e1:76:9d:9f:30:47:2c:73:0f:bf:01:
2c:b7:e2:fa:8f:c3:df:39:70:0c:cf:4e:f3:88:73:
3c:eb:23:d5:b8:a8:8a:0d:3b:55:a5:32:7d:16:6c:
97:0b:a2:b4:4d:38:33:fe:10:51:9c:09:b1:f4:e8:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:81:2E:53:92:70:B1:DC:0B:09:F2:DD:2E:36:B5:F0:43:67:80
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:22b::/48
Signature Algorithm: sha256WithRSAEncryption
39:ee:23:c5:5f:dd:86:67:2a:64:d0:5a:46:be:d4:dd:f6:ab:
48:dc:ed:1c:92:61:10:a4:03:33:96:de:be:75:94:7d:9d:12:
6d:66:cf:ae:8b:76:6e:fb:bb:0a:e3:00:11:f6:e7:23:39:40:
7e:78:10:2b:c6:60:69:94:5f:04:8e:1c:16:4b:d6:a3:33:12:
6f:62:02:3b:d0:69:a8:76:11:9a:34:6b:5a:6e:32:20:17:15:
d8:2a:8b:ff:47:22:40:8a:b2:f6:5a:68:df:d1:63:3a:c9:bb:
98:4c:4e:e7:de:76:b6:54:96:f2:f1:92:18:a7:c1:9e:3a:51:
09:ba:81:2f:e6:26:65:98:e1:32:f0:a8:a5:07:83:e9:5f:16:
7e:34:de:f5:4a:5a:85:cc:f6:d5:eb:0d:6c:03:3e:53:19:7b:
a6:8f:de:aa:b6:53:48:6e:e3:b8:37:80:16:f5:90:a7:aa:52:
28:90:09:0b:16:8a:f2:72:1e:26:6a:23:4c:c0:ff:01:bf:ec:
23:fc:55:8d:b6:c6:c2:8f:a0:3b:2e:4c:7c:fb:74:4b:d1:8f:
64:c2:97:ec:0f:58:e9:bf:91:83:7f:0a:00:d9:09:ae:0a:86:
83:e0:20:c6:db:c2:41:02:85:01:e3:46:69:72:5a:c9:44:54:
fa:c1:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org