Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: nYbKvSiJBEHjLnZFK4FZxsyr+LmFUKa80juCEm+u8LU=
Subject key identifier: C9:C4:F5:29:34:F2:15:A7:A6:07:5D:3B:05:0E:E4:32:8C:BD:17:5D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 521F23753FA386BC86173A52CD1436275C8BBFEA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:23 +0000
ROA not before: Mon 26 Sep 2022 07:56:23 +0000
ROA not after: Mon 25 Sep 2023 08:01:23 +0000
asID: 59282
IP address blocks: 2400:d680:26::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1f:23:75:3f:a3:86:bc:86:17:3a:52:cd:14:36:27:5c:8b:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:23 2022 GMT
Not After : Sep 25 08:01:23 2023 GMT
Subject: CN=C9C4F52934F215A7A6075D3B050EE4328CBD175D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:1e:b3:c6:6e:f5:cc:24:64:4b:42:35:f3:
7c:85:dd:ec:a3:60:d4:5c:a8:73:9b:02:e4:e5:2e:
ba:6c:bb:e0:a6:df:a9:2f:34:c3:eb:fe:69:56:57:
13:5e:9b:0f:10:15:ae:09:58:df:a7:ee:34:16:5e:
63:6f:52:2c:57:74:69:27:b8:62:7b:c6:02:75:c4:
5f:c9:22:b3:81:0a:49:2b:09:5e:6f:74:80:25:36:
d2:e1:32:98:0b:43:c8:a0:4f:2d:7f:7b:18:71:20:
69:35:c9:66:2d:4c:cc:12:52:a7:f5:a1:4e:21:68:
d3:cb:68:d1:0e:11:18:95:2e:db:76:c4:cd:de:9b:
84:6c:2e:d3:d2:54:0f:07:42:a2:2e:c5:e8:af:09:
05:6a:8d:1b:1f:af:7c:ad:ac:4c:c4:1c:5c:c0:47:
9f:36:e0:1d:cf:d0:db:b4:4f:34:31:5d:cc:a8:4d:
4c:3b:b8:37:88:06:10:73:b5:8b:26:60:7f:0f:cc:
1b:e8:72:ac:c5:3e:c8:d2:52:f5:06:d4:18:30:1e:
1a:f5:c6:71:4c:58:a6:85:cd:a4:52:7f:b3:b2:3d:
11:36:b9:72:f2:e7:17:ed:a9:70:9e:80:64:54:04:
c2:b1:c1:8d:22:17:89:db:9e:a9:fc:67:6d:cc:86:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C4:F5:29:34:F2:15:A7:A6:07:5D:3B:05:0E:E4:32:8C:BD:17:5D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:26::/48
Signature Algorithm: sha256WithRSAEncryption
2d:cf:14:e4:b7:f8:19:99:12:d4:e5:13:c2:75:1a:09:97:f5:
a3:6a:2b:f2:f4:40:11:78:16:bc:6d:e1:5c:06:61:1e:5d:dd:
c9:aa:2a:84:c4:31:05:30:ac:63:df:24:11:fe:4c:e6:9b:eb:
2c:7e:f0:3e:66:48:25:c8:f4:b7:4b:f2:52:fa:4a:a2:e8:03:
01:c3:05:1d:03:8d:ab:57:1c:e4:55:4d:c0:42:26:2f:22:68:
44:75:92:cc:c9:ee:1e:f2:c0:42:3f:f4:9c:87:d6:22:ce:3a:
51:da:24:4a:84:4b:ae:36:62:84:05:77:ef:bf:db:a0:11:4f:
44:42:24:e4:9d:93:07:e2:5a:8b:e0:46:d1:25:7d:29:37:0b:
de:fd:cc:3d:6f:ac:16:99:2e:ce:3e:ec:70:c2:96:b6:d1:45:
aa:60:9f:39:1b:f2:22:76:54:33:a8:bd:55:9e:2e:04:d1:1b:
0a:03:a5:a0:0a:a7:68:6e:c9:70:f0:15:8b:41:dc:54:82:82:
84:7b:80:79:aa:72:c9:90:7f:0c:ea:d1:31:a8:fe:33:fa:8d:
50:6f:8e:cc:e9:da:7d:da:e3:1b:f9:f1:26:9f:4c:a7:6a:d0:
5f:12:4f:77:59:f1:09:dd:90:aa:05:fb:d5:72:92:3c:3e:c3:
d3:83:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:00:26 2025 by rpki-client