Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3238313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YjSKcDAbKDMW/yIQd8x6X6q7gR7r+pXuMYR/37AKglc=
Subject key identifier: 09:CB:86:11:D3:E9:D9:BD:C7:E2:2E:DA:05:CA:CE:32:EF:87:21:2D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0240730A888F925E82D5B54F3A14229EDF39BBBA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:19 +0000
ROA not before: Mon 26 Sep 2022 12:55:19 +0000
ROA not after: Mon 25 Sep 2023 13:00:19 +0000
asID: 59282
IP address blocks: 2400:d680:281::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:40:73:0a:88:8f:92:5e:82:d5:b5:4f:3a:14:22:9e:df:39:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:19 2022 GMT
Not After : Sep 25 13:00:19 2023 GMT
Subject: CN=09CB8611D3E9D9BDC7E22EDA05CACE32EF87212D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:20:de:d5:a4:71:c9:ed:0f:c8:3c:c9:ea:
36:66:65:1d:ef:92:e0:4c:85:db:c8:b1:7b:da:48:
44:0f:9f:84:7f:15:1b:44:db:98:4e:e2:cd:bc:f4:
7a:28:5c:26:ad:2e:57:70:36:46:3d:8d:a1:a6:fb:
cd:42:f1:a1:b2:5e:dc:eb:cf:56:b2:29:a4:88:c7:
88:bb:82:47:42:5b:77:8b:62:b8:e8:cb:b3:5f:75:
f4:db:6f:19:7e:9f:07:8f:cb:7b:c4:7a:68:bf:8e:
cf:f5:7e:44:a3:1b:31:be:67:f9:37:4f:b9:1b:4a:
67:d0:de:4b:91:8d:b3:e7:32:c6:57:6e:9b:09:1a:
72:90:3a:76:06:61:c2:24:57:d8:04:3b:55:1e:52:
fe:85:a2:d7:01:9a:28:a6:bc:84:af:00:91:17:cf:
0e:ee:bc:84:8a:c8:21:4e:e8:51:3f:0a:f4:6b:74:
53:40:d0:91:3b:ba:ee:81:b9:77:6c:26:0f:90:d7:
67:5c:42:09:f2:b7:97:5c:12:5f:b5:ce:c0:66:0b:
67:35:26:9e:c9:a9:e7:7b:4e:58:fc:97:ff:cd:48:
c8:7b:d4:f7:75:7d:58:ee:89:da:b9:e1:ce:29:ce:
bd:33:99:49:98:80:b6:66:86:22:7e:05:3e:a9:fa:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:86:11:D3:E9:D9:BD:C7:E2:2E:DA:05:CA:CE:32:EF:87:21:2D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:281::/48
Signature Algorithm: sha256WithRSAEncryption
4f:e4:db:d1:fc:25:7f:6b:66:a1:19:55:e9:e5:a9:eb:31:11:
73:cf:93:c2:c2:d8:5d:9e:d0:05:b2:53:61:63:ba:91:41:00:
29:eb:b1:83:10:a4:34:6e:77:e0:27:40:b2:98:1a:b0:26:2a:
e7:08:32:de:95:b3:2d:ba:d5:7c:89:9c:fa:e0:50:cb:1b:08:
ed:1f:9e:6f:c3:8c:ef:7a:6e:b7:ab:8e:99:7d:52:b8:0a:4b:
18:ed:0d:90:66:47:39:aa:25:59:bc:54:e1:be:3d:a0:e6:ca:
fc:01:3f:f4:60:32:bc:85:d0:0a:e7:7d:55:72:68:38:94:37:
1a:99:ef:17:a2:7d:fd:84:55:32:33:9c:bb:54:57:12:a6:0e:
64:8a:3b:58:dc:09:b3:91:92:f0:df:f6:f2:f4:b2:35:8b:e3:
5b:f5:25:9b:85:bf:cc:22:83:f7:52:c5:69:c6:72:39:50:5a:
f3:b7:d1:32:64:66:4c:36:b6:84:a8:10:34:a4:f0:41:4e:65:
d1:06:64:9d:d6:8e:44:97:1c:16:bf:8f:ab:b6:8b:1b:98:e1:
27:a4:ad:ef:16:66:be:9a:fc:3c:19:bd:0a:3e:72:11:e5:10:
b8:df:76:1e:bf:b8:9e:9d:ae:03:5b:36:27:a2:a3:e1:60:35:
f2:0e:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org