Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: S0Tugd+4JqX1YZ83dec2dOcRPhUIIuheBiD5K6nDSGM=
Subject key identifier: DE:7C:21:A8:CF:DA:2A:75:E7:F7:7A:90:A1:3C:82:CB:93:C0:5D:C8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3767CDF0ECF75A850CC5C1A0F585EC7931CD1B81
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:03 +0000
ROA not before: Mon 26 Sep 2022 12:55:03 +0000
ROA not after: Mon 25 Sep 2023 13:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:292::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:67:cd:f0:ec:f7:5a:85:0c:c5:c1:a0:f5:85:ec:79:31:cd:1b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:03 2022 GMT
Not After : Sep 25 13:00:03 2023 GMT
Subject: CN=DE7C21A8CFDA2A75E7F77A90A13C82CB93C05DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:70:88:6d:29:15:27:40:13:ef:76:13:3e:
bd:f9:91:58:ba:07:25:fc:94:45:82:17:b7:ed:4e:
d2:dd:f6:b7:b7:aa:ad:9f:9d:2b:da:80:91:b3:f0:
92:2d:48:3a:38:a2:c9:29:06:0a:23:05:94:bc:5b:
85:c3:39:87:bf:98:0f:b8:fa:e7:7f:19:46:40:ca:
c2:27:3c:4e:0f:ee:c0:35:18:9e:b3:50:1e:dc:05:
95:00:8e:fc:ad:ac:7b:2f:a2:6f:1d:29:6d:62:8c:
a5:d9:8b:d6:b2:79:34:82:c4:09:50:09:d1:73:d4:
d3:66:14:d9:f4:7f:d0:38:ea:df:81:c1:a9:e2:58:
97:aa:86:b1:84:73:fc:b3:26:bc:17:7d:a6:1e:bb:
03:7b:87:c0:fc:91:1e:9c:01:8c:20:35:fa:1b:39:
d8:ef:ea:9b:79:e7:cd:29:e9:7d:3c:5a:d4:13:16:
29:1d:97:71:65:76:78:3d:0d:9e:e4:75:f0:3a:bd:
1a:89:c0:a6:86:3b:cb:a1:30:3e:a2:bc:5d:3c:99:
36:a1:30:e8:ce:65:06:7d:e4:8c:eb:5a:82:e1:e4:
a3:5e:18:cc:77:b8:af:86:80:7e:11:0d:56:46:74:
93:cd:e7:57:d6:24:c6:75:83:bc:78:f0:5b:39:50:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:21:A8:CF:DA:2A:75:E7:F7:7A:90:A1:3C:82:CB:93:C0:5D:C8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:292::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f8:70:e9:c5:3f:45:d6:09:7a:f5:05:27:e3:d7:f9:ec:04:
2f:45:9f:aa:f6:8a:9f:82:35:7e:09:3a:ad:ee:f8:14:fe:25:
4b:77:c7:b5:56:84:2d:69:17:b3:a5:3b:e3:37:c1:a5:15:8d:
86:f5:f2:a2:0b:3d:bf:07:3d:d9:fb:99:1b:00:dc:98:8f:8d:
12:70:34:97:ae:f9:16:a9:05:4a:50:90:cd:86:4e:20:b7:c8:
a8:8d:a5:a5:5f:aa:ed:84:31:c7:3c:40:20:cd:31:53:80:fb:
2f:b3:c1:61:a8:c6:0d:06:fe:2c:61:aa:1e:34:01:76:b0:4e:
65:b8:9a:40:23:20:cd:7b:51:8f:ba:64:4f:4c:63:9b:e0:37:
70:b7:fa:5a:86:56:27:6f:39:3a:ef:d2:7c:90:44:d3:9c:fe:
ff:ac:ca:af:7f:fc:d6:69:d8:68:06:9d:cb:50:7d:9d:c6:45:
36:e1:26:fc:d1:b8:de:6b:49:9e:2e:c0:c1:37:1b:af:ea:2d:
6b:c5:28:69:22:81:ac:27:3b:6f:2a:95:e9:57:04:4e:8b:09:
a2:fc:8a:08:3a:ce:46:69:36:26:81:60:d9:ab:51:95:f6:1b:
c0:16:fe:18:c2:ae:03:db:d4:d5:ea:f5:56:a7:56:97:f1:86:
6a:c9:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org