Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: tAe9JGFWdXFqcan7ofM1KBd53aA+VTPOBLJmba6qby4=
Subject key identifier: 90:8C:48:5E:6B:57:BF:51:F6:F9:D9:67:B3:BE:7D:D8:1C:A7:AB:44
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 34ED21E682CA3CA3913BEEE97F69C530D92F6C6D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:16 +0000
ROA not before: Mon 26 Sep 2022 09:55:16 +0000
ROA not after: Mon 25 Sep 2023 10:00:16 +0000
asID: 59282
IP address blocks: 2400:d680:253::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ed:21:e6:82:ca:3c:a3:91:3b:ee:e9:7f:69:c5:30:d9:2f:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:16 2022 GMT
Not After : Sep 25 10:00:16 2023 GMT
Subject: CN=908C485E6B57BF51F6F9D967B3BE7DD81CA7AB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:dc:61:8e:ec:b1:43:15:f4:41:58:31:75:
03:d1:6e:cc:d6:d7:fb:cc:08:7b:fc:fa:24:e2:b1:
05:b5:f4:10:ee:5d:97:1f:8f:20:ad:7b:81:54:b1:
9d:0b:da:02:ff:92:d6:42:67:18:17:27:4e:f7:08:
13:43:b5:63:68:9d:7c:16:1e:43:c8:8e:de:18:a6:
96:62:b0:29:ca:04:cc:d4:13:97:57:7b:40:1f:71:
d9:66:9f:fb:28:6c:4f:47:9c:c0:01:95:b0:3d:96:
18:bf:72:97:c5:d5:92:a0:17:ae:ad:ed:0e:04:00:
8e:b6:ee:18:0e:d7:15:c0:b5:c1:ae:5e:5f:0c:2a:
c3:1f:43:57:57:13:6c:ff:ce:82:62:99:20:21:c6:
8c:7b:32:0a:19:25:b0:8c:71:87:b4:47:30:58:8a:
89:07:0b:e6:60:6e:06:c4:39:12:ae:87:a4:36:e8:
01:8b:1b:78:7e:67:b1:ea:a3:dd:ec:53:56:8e:ab:
98:43:e9:2f:a2:1d:43:c1:7d:a0:53:29:27:80:4d:
3a:f4:3e:d8:8c:91:6a:74:d7:4d:a9:3d:0b:fa:5f:
c3:6f:e8:a0:00:36:7f:39:97:47:ad:15:49:8c:33:
e9:fc:a3:f1:b8:61:cb:09:76:7f:67:a8:8f:0e:ab:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:48:5E:6B:57:BF:51:F6:F9:D9:67:B3:BE:7D:D8:1C:A7:AB:44
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:253::/48
Signature Algorithm: sha256WithRSAEncryption
b6:6f:2a:35:92:aa:77:06:d7:20:bb:d7:78:a8:93:b5:57:b3:
6d:d6:3d:7e:52:62:b6:7e:f4:9d:dc:51:89:44:de:c0:d5:57:
cb:ec:49:a5:81:59:dc:44:d6:aa:18:5f:22:98:99:72:17:e5:
61:37:df:f8:5a:b8:df:e7:78:84:3d:12:fb:18:20:ab:25:10:
36:53:c8:61:07:a2:71:90:61:4f:9d:27:22:25:9d:12:0e:07:
e3:0d:06:68:56:9d:cb:42:7f:06:c8:58:3c:1f:e8:34:0f:53:
3d:00:be:e3:21:90:d0:8d:06:5b:c6:2f:cd:61:43:56:b7:41:
10:3a:9b:6e:17:cc:3d:a1:02:fd:de:66:cf:2c:94:f7:2a:af:
c3:e3:3c:64:d0:e2:ea:5e:1b:ff:e5:0d:75:3d:cc:e5:4c:d4:
8a:cf:6a:3e:cc:4b:82:d3:5b:36:1d:e4:89:a0:d0:ff:dc:68:
da:09:22:70:a7:73:17:78:cf:1b:67:f1:46:dc:12:38:26:f7:
18:cd:06:f0:1e:80:f3:d6:6d:d6:df:6c:ce:53:e7:e0:a4:2b:
d0:98:ab:68:27:97:3b:3a:75:f1:4b:bc:05:9e:2d:ed:08:59:
73:f2:3f:c8:19:99:ba:a3:89:1d:c7:26:47:dd:df:42:98:14:
81:ea:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org