Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3233363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: cgKft0K/U+uGMQt1GNSrd+nc+o0xSHS5uVIE4okwbuw=
Subject key identifier: 07:07:ED:CE:6B:6D:09:34:32:39:7F:9F:F6:2D:29:C7:25:96:5D:80
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 15F0DFC594BF2FB5BFAECB3A6ECD353245C0CD80
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:07 +0000
ROA not before: Mon 26 Sep 2022 07:57:07 +0000
ROA not after: Mon 25 Sep 2023 08:02:07 +0000
asID: 59282
IP address blocks: 2400:d680:236::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f0:df:c5:94:bf:2f:b5:bf:ae:cb:3a:6e:cd:35:32:45:c0:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:07 2022 GMT
Not After : Sep 25 08:02:07 2023 GMT
Subject: CN=0707EDCE6B6D093432397F9FF62D29C725965D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:99:00:04:31:3f:a3:b2:ec:c1:40:13:c0:64:
2d:95:61:cc:75:91:60:cb:c6:ca:2d:24:f4:1c:ea:
b9:3d:71:6a:30:8f:1d:ff:ba:57:44:14:c2:5b:90:
82:32:be:fe:b2:0e:63:93:f9:9c:b2:ed:6b:e5:3e:
f8:e3:e9:35:ed:50:45:65:cc:9b:7e:b0:d2:19:f8:
05:54:f5:81:5b:57:84:71:2c:46:52:63:10:24:c6:
47:f9:7a:7c:ea:df:1f:aa:4e:43:e3:d4:72:a2:c0:
8d:07:98:b5:08:63:83:7d:dc:c1:a3:76:59:c4:75:
9d:3b:f1:15:58:36:98:4d:21:73:31:e5:68:2e:54:
a2:96:c9:64:b2:dd:ad:62:b6:03:81:4b:b1:70:63:
27:03:c9:67:39:16:0b:4c:51:ab:17:b5:6d:07:4a:
89:10:3b:2d:ec:d0:31:74:f3:78:33:b3:e6:8e:3e:
7d:5b:3f:35:ef:7f:6e:85:98:80:e9:ef:5d:bf:ec:
d4:ac:00:60:ca:2d:69:cb:af:b6:33:5b:50:d1:f7:
b2:a0:5d:7f:e7:0b:68:06:d0:84:e6:aa:dc:1e:dd:
b6:95:d6:68:46:43:62:1f:84:ba:90:cf:89:8b:92:
58:57:0e:a5:3b:50:d9:b4:66:8f:21:94:97:f4:da:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:ED:CE:6B:6D:09:34:32:39:7F:9F:F6:2D:29:C7:25:96:5D:80
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:236::/48
Signature Algorithm: sha256WithRSAEncryption
3e:60:3f:65:82:3c:11:4a:4b:9d:87:4d:b3:cb:fc:34:71:76:
b6:6a:2e:26:9a:f5:80:a8:c9:9f:c7:3a:15:c8:f2:85:c5:12:
7c:9b:bc:59:61:d3:94:4d:d5:29:aa:cb:1f:44:14:d7:e7:63:
0d:b2:02:af:f8:a4:85:e6:05:22:2a:0d:5a:33:6d:7c:30:8b:
2c:33:f0:bf:dc:99:d6:95:9e:a3:f5:ff:f9:f1:a1:c5:16:20:
f4:18:c5:34:21:52:40:10:df:1a:15:7f:f6:bb:8b:e4:4c:0c:
4a:79:e8:43:a1:6e:c1:0e:c5:f4:67:14:8c:cb:2d:0c:d4:2b:
c6:bc:29:47:fa:d0:2c:48:76:d0:f6:62:99:d6:79:12:41:2d:
6c:d2:d8:40:d3:22:da:e5:d3:c4:8e:f1:8e:ac:0c:b1:a5:2b:
91:8e:a7:81:8c:e2:56:92:d2:8d:aa:7b:92:29:b8:a5:76:2c:
55:1c:0b:52:1e:18:d2:5a:52:a6:9e:db:14:43:e8:05:fd:65:
ad:a4:63:79:c0:19:a9:0b:1c:f4:e9:3e:42:f1:c8:9b:e4:b2:
98:f3:68:b4:57:9c:21:dd:24:a9:10:82:d6:3c:30:4b:02:ca:
62:44:c7:07:ff:fc:51:24:0c:1e:e3:cb:1b:e1:42:4c:5c:15:
fb:b0:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:42 2025 by rpki-client