Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3236323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: B69GUeI9OWUYQKlIuLyFHFhjOHUNYKT7ZbljHFluR+w=
Subject key identifier: 62:F1:F4:AE:F3:1E:03:68:17:CD:56:EA:F8:AC:12:06:1C:21:5C:00
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1A911F44C90DAAE7197AD18141FED7C5BE559ABC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:18 +0000
ROA not before: Mon 26 Sep 2022 09:55:18 +0000
ROA not after: Mon 25 Sep 2023 10:00:18 +0000
asID: 59282
IP address blocks: 2400:d680:262::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:91:1f:44:c9:0d:aa:e7:19:7a:d1:81:41:fe:d7:c5:be:55:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:18 2022 GMT
Not After : Sep 25 10:00:18 2023 GMT
Subject: CN=62F1F4AEF31E036817CD56EAF8AC12061C215C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:2a:2e:5d:4d:12:36:d5:38:aa:cc:38:12:
b0:de:42:74:82:b6:16:87:4d:bf:82:93:b0:6d:42:
1b:11:4d:7d:de:e7:b9:05:9a:28:b8:bb:3d:26:6d:
18:81:ab:cf:1b:0a:6f:46:d5:37:f3:3f:24:69:e4:
42:8c:42:52:50:8c:29:20:6b:19:60:c3:fb:60:0f:
73:e3:ca:18:6e:92:1a:83:2d:66:d1:70:a6:35:13:
9c:ad:dd:b9:e5:0f:82:23:54:da:87:d4:0c:d9:0a:
29:c8:be:79:8e:b6:5b:d4:fc:93:6a:f2:e5:82:6d:
14:f5:ac:51:44:68:0b:3f:8a:32:f8:58:72:91:7e:
59:75:6d:b3:78:4c:cf:eb:ba:89:97:15:c9:dc:5d:
d1:22:67:1d:ee:01:36:26:21:37:44:ae:8f:64:94:
f3:88:a0:e9:46:94:a3:a1:f6:1c:58:bb:92:2e:71:
05:7d:cc:a7:8d:68:fc:81:f4:a1:66:39:ec:cf:b0:
11:91:8d:14:bd:cc:52:2c:fe:4e:99:a2:bf:6f:5d:
d3:1e:ee:63:f4:79:fc:35:10:59:c7:d9:3d:26:80:
e2:27:14:93:c0:32:d9:fa:91:16:ed:f6:23:18:06:
ce:69:57:e5:61:86:22:bf:a6:c4:97:72:af:47:e6:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:F4:AE:F3:1E:03:68:17:CD:56:EA:F8:AC:12:06:1C:21:5C:00
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:262::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e5:8b:45:20:56:02:00:a8:c3:3a:ba:50:4c:db:5e:53:cd:
01:4c:8e:67:cd:47:e6:2e:3d:cc:cc:71:23:7d:8f:fa:1c:65:
4b:7e:bb:af:5f:20:35:89:7e:05:48:43:b6:bc:98:d3:b8:13:
57:b2:39:7c:79:7c:43:da:b0:21:42:be:fd:46:d1:70:12:cc:
9f:6c:08:d5:f3:fd:48:60:77:43:01:27:46:d6:e9:57:03:6a:
dc:fd:0d:f8:58:4d:24:ea:dc:39:78:c3:39:14:84:e8:53:89:
1b:0c:ae:4e:46:e7:cc:c7:34:5e:c5:2e:d0:40:cc:83:90:3e:
4f:2d:a7:f4:d3:6d:e6:2f:61:9e:d6:f9:c4:5b:b6:a3:95:2a:
81:57:b3:61:6f:ee:23:18:85:67:51:09:5a:1b:25:c4:57:db:
3f:c9:a6:16:4a:da:57:bc:d2:9e:f3:50:82:8c:9d:1c:12:95:
8a:09:b9:16:bb:8c:f7:3b:fc:13:44:3d:ea:1c:1d:14:01:94:
be:ac:2a:29:06:51:3c:99:71:9c:5d:96:86:50:9f:c0:26:d5:
b3:08:03:76:f1:09:e1:8e:34:53:63:ed:ba:55:ee:23:69:0f:
09:83:c4:2a:11:d7:9b:1a:11:14:0d:63:e4:6c:ae:58:4f:89:
40:e9:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org