Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3237333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: IGey/9cfwHOWRucAsc3do2LeiarrYVQS1L2DgF2cAb8=
Subject key identifier: CB:47:EE:29:1E:EE:A0:4E:9C:0C:03:1E:2A:8D:7E:C4:6E:BB:62:DF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3660ACEB3F56988FEDD738602C9E88667C244DEE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:06 +0000
ROA not before: Mon 26 Sep 2022 12:55:06 +0000
ROA not after: Mon 25 Sep 2023 13:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:273::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:60:ac:eb:3f:56:98:8f:ed:d7:38:60:2c:9e:88:66:7c:24:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:06 2022 GMT
Not After : Sep 25 13:00:06 2023 GMT
Subject: CN=CB47EE291EEEA04E9C0C031E2A8D7EC46EBB62DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:a4:18:04:00:2a:58:e6:1a:2b:1e:f4:25:
d5:76:c7:4e:64:1c:64:a0:6a:b9:1e:9a:3b:bd:3e:
f0:89:db:12:2a:7e:88:59:2f:47:c3:ba:59:76:48:
23:a7:64:87:cf:1a:67:85:1e:89:c1:a4:04:30:f7:
4b:6e:28:77:14:43:f4:03:be:83:05:73:7a:84:4a:
c4:ae:de:02:ea:34:c9:52:5e:28:50:34:cd:fc:30:
db:b8:f2:f9:df:04:49:92:04:5d:1c:49:6b:3a:22:
62:f6:23:6f:86:10:99:86:33:76:ae:1c:13:03:24:
39:f5:70:8b:7b:f9:98:7a:75:3b:27:5e:d1:ff:d6:
7f:8c:6d:fb:02:ae:98:f3:7b:4e:0d:fa:1c:91:d8:
41:6e:c8:f1:e3:61:12:3e:73:04:5e:ba:ac:5a:19:
c1:c3:56:cf:fa:3b:cd:0e:57:17:b3:e1:18:6b:62:
1d:aa:65:34:d3:a2:ee:08:a1:1f:da:d8:05:69:ab:
ba:b5:23:2c:cc:3d:96:ff:48:bb:68:dc:5d:02:8f:
6d:a5:56:bb:96:53:46:64:29:e5:aa:48:90:ec:ed:
e1:e3:d3:bc:38:de:46:7e:7a:be:6a:6a:94:ae:90:
3d:0c:85:07:8e:69:94:63:4a:27:80:4c:41:6b:ef:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:EE:29:1E:EE:A0:4E:9C:0C:03:1E:2A:8D:7E:C4:6E:BB:62:DF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:273::/48
Signature Algorithm: sha256WithRSAEncryption
7d:48:af:84:e2:81:1e:01:bb:eb:cd:ef:fa:51:eb:12:b1:73:
61:84:e8:92:d4:bf:3e:2f:58:0e:dc:7f:fe:86:76:cb:fa:b1:
d0:38:30:bf:23:a9:05:fd:39:e7:2a:24:15:a6:a9:1b:78:63:
d8:9f:ae:38:cc:fe:70:86:31:f9:23:52:d2:28:29:9b:58:69:
c2:f4:9e:aa:f6:ba:30:61:42:de:4e:cb:53:a5:70:1e:fc:ac:
be:d3:7a:66:63:37:32:fd:d0:81:d1:80:5b:f7:5c:3f:58:8c:
a9:66:82:b5:8a:2a:d2:20:39:df:74:5c:4a:b0:72:69:69:23:
93:90:e0:99:a6:c9:97:ce:54:d3:f7:e3:5c:d0:96:80:52:d9:
db:75:3d:05:43:2b:20:15:b5:5e:3a:8a:2b:42:6f:e7:b5:76:
00:cb:e1:35:e6:b3:e1:58:2e:e6:8d:61:7b:ba:2e:53:d6:b6:
6f:4b:d5:51:28:bc:50:c0:1d:27:4c:30:ac:a7:82:4c:c2:d2:
ff:74:f3:01:0e:87:62:c3:0f:18:46:74:3e:24:ca:36:0f:02:
44:e5:ae:26:ac:3f:be:c1:3c:f8:3a:42:d9:2f:fe:ff:0a:0f:
88:6f:33:f3:22:a7:cc:62:9a:0d:b2:0e:7a:d0:87:3b:c1:69:
fb:22:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org