Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: F+qccYlcPnuMchojv1Lc4VXhnqQXTs9ktNPHkLcn3v4=
Subject key identifier: 12:EC:46:F8:FE:D8:7B:9E:E5:A1:2A:BD:C4:B8:CF:5A:C2:0F:44:0A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 405900C44BA4337D131D155C0D7A428EDBDE5FEE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:17 +0000
ROA not before: Mon 26 Sep 2022 09:55:17 +0000
ROA not after: Mon 25 Sep 2023 10:00:17 +0000
asID: 59282
IP address blocks: 2400:d680:25f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:59:00:c4:4b:a4:33:7d:13:1d:15:5c:0d:7a:42:8e:db:de:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:17 2022 GMT
Not After : Sep 25 10:00:17 2023 GMT
Subject: CN=12EC46F8FED87B9EE5A12ABDC4B8CF5AC20F440A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:37:30:b9:cc:c6:ff:74:cf:24:14:af:57:
a7:6b:30:fe:14:40:12:0d:4f:4d:02:1f:1a:f7:1c:
ae:a5:1a:14:58:79:a7:8a:4a:04:b4:df:33:ac:13:
29:39:a4:52:51:33:b6:80:a6:39:d2:6f:9e:92:2f:
11:12:00:c8:4f:af:f1:10:1e:1b:7a:0d:82:07:b1:
43:0b:e6:7e:1a:56:1f:05:d0:68:75:98:3a:91:74:
35:86:85:c9:39:07:98:5d:e3:1f:24:7d:08:3f:3c:
8b:93:62:5c:cc:a7:d1:8c:2f:b4:46:52:a4:7d:2f:
3c:c1:4b:49:9a:17:84:72:c1:21:41:9f:4d:95:ce:
cb:c6:51:08:c4:d4:6e:20:84:46:5f:0a:3a:8f:13:
ad:42:72:ff:16:96:93:e0:d8:f8:95:8b:b5:2b:03:
9c:a2:d8:6a:1f:6e:2e:8a:f8:cb:7b:8a:69:8c:47:
52:67:9b:c0:b6:ca:04:a9:66:52:22:42:d4:1d:2f:
ba:1b:64:bf:e0:a2:a9:7d:a6:e5:27:ea:14:3a:55:
cb:5e:60:96:23:c1:85:e0:41:88:26:ff:ab:ae:40:
a3:7b:a0:45:b8:8e:b8:5b:36:f7:3f:de:56:bc:f8:
13:ae:96:e7:3a:a7:30:6e:f6:77:23:09:b6:56:96:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:46:F8:FE:D8:7B:9E:E5:A1:2A:BD:C4:B8:CF:5A:C2:0F:44:0A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:25f::/48
Signature Algorithm: sha256WithRSAEncryption
d0:c0:04:52:d0:9a:fa:cf:8e:9b:ed:43:c6:88:a6:05:e8:2d:
64:ca:b5:df:7b:18:12:61:97:da:9b:cb:69:d0:21:bb:a7:24:
74:fc:46:68:61:da:c2:e9:be:aa:b0:62:79:9d:48:51:87:51:
e9:3b:c6:f6:d1:ae:ea:88:1f:29:a2:d8:03:21:fd:ea:38:df:
3c:b7:3a:02:24:da:a1:98:8f:14:7d:1d:92:62:f6:df:eb:86:
55:ba:6a:db:2b:cb:47:62:d8:d7:d2:08:7b:0d:ee:94:8a:2c:
06:1b:39:64:df:09:96:f2:d6:bb:f9:8f:53:cc:0a:19:11:0d:
a7:0f:84:f6:28:8f:3f:9f:fd:67:86:09:22:9f:ca:83:0f:5b:
63:9f:8c:b5:27:41:4f:d3:8f:0c:3a:eb:7f:13:07:80:a1:23:
23:77:6d:17:76:8e:a1:55:eb:02:43:28:d4:34:d3:cf:5f:b3:
83:b1:93:ff:36:dc:a3:07:bb:46:79:7c:95:8a:f0:93:9f:5a:
e8:b0:6b:9c:76:e4:ef:f0:66:42:dc:1a:b3:7c:c6:9c:93:c3:
71:09:95:bc:a8:f5:7f:23:5f:ea:a0:34:9d:b3:40:f8:76:b1:
09:8b:98:3d:a3:d5:9e:ee:da:8b:29:b9:ac:72:c8:99:b7:4e:
1c:cc:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org