Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: hIe/DWvFHhuV4QXFIQSklg5y0c2C14v7eeiao3q0dvo=
Subject key identifier: C9:6E:EC:A6:C6:C0:C8:A4:0B:68:EC:70:CF:91:79:86:68:93:B5:17
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4FE48B490FE36C349D2B8DB46FDD730AC905A1F1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:11 +0000
ROA not before: Mon 26 Sep 2022 12:55:11 +0000
ROA not after: Mon 25 Sep 2023 13:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:293::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e4:8b:49:0f:e3:6c:34:9d:2b:8d:b4:6f:dd:73:0a:c9:05:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:11 2022 GMT
Not After : Sep 25 13:00:11 2023 GMT
Subject: CN=C96EECA6C6C0C8A40B68EC70CF9179866893B517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:22:40:6b:06:fa:6f:5f:a3:88:a7:3c:48:
3d:6d:62:2d:ed:a0:7d:06:e6:f1:fa:c2:96:18:72:
4e:68:2c:b0:a5:95:71:4a:55:c8:54:6f:18:1b:95:
65:94:e6:ec:e4:98:17:b3:d0:2a:51:0a:18:89:3c:
36:78:b0:0a:20:90:20:d0:67:5b:5d:79:bd:22:9d:
f1:0f:c1:96:1d:5c:cc:7e:77:77:fd:63:fd:ac:65:
87:74:c0:a3:de:b0:95:26:f3:73:bc:3c:47:44:72:
53:ba:8b:c0:59:18:d1:a4:4c:21:9e:b8:ad:44:ff:
e5:9c:94:25:48:eb:4b:01:e3:3f:a2:71:d1:01:cd:
cf:85:5c:26:ee:90:7f:4c:74:b2:d2:db:60:3f:86:
70:0a:31:60:5a:d7:7c:ce:0f:c8:d6:61:1c:54:61:
c3:10:12:cd:d5:21:f5:63:68:5c:0d:5e:f0:b5:98:
17:9c:77:ec:4b:a2:47:15:51:54:24:5f:57:f0:23:
27:aa:6e:92:11:22:b7:77:c9:55:b6:dd:ba:75:ad:
54:f1:3f:fc:13:b9:15:5d:4f:9a:51:57:2c:27:a2:
19:2e:fa:c7:39:25:1c:8f:bf:55:ac:a4:dc:da:35:
46:7d:ce:6c:9a:4e:fa:69:04:6c:28:4a:88:75:bb:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:EC:A6:C6:C0:C8:A4:0B:68:EC:70:CF:91:79:86:68:93:B5:17
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:293::/48
Signature Algorithm: sha256WithRSAEncryption
75:c3:42:f5:82:08:be:45:c9:91:95:ba:30:ff:b8:12:2d:80:
50:28:e3:4e:da:dd:60:f9:92:ac:cd:2c:d0:50:7f:d9:b9:ed:
c0:57:ba:7b:11:94:0f:c5:3e:25:04:38:82:db:bd:66:df:e8:
fc:68:c9:75:93:bf:2b:b2:88:ce:1a:6c:a0:59:ef:7c:28:00:
30:c3:e4:2e:73:63:a9:20:5b:78:2b:c6:9b:65:70:d5:a7:e7:
11:fa:13:2e:45:8d:85:84:5d:a8:f4:10:9a:e4:b9:d3:e1:3e:
34:a9:57:16:36:ca:cb:56:aa:13:82:71:96:6e:89:b1:6e:2c:
f6:3c:9f:20:eb:61:18:a4:7a:d3:49:3f:61:2c:30:16:ad:93:
47:b7:5f:4b:e7:71:84:1b:37:2f:1e:5b:e4:ee:47:b5:bc:ef:
f9:6e:a3:6a:ed:ac:be:64:6a:c4:5b:e2:89:92:1f:f8:a8:1b:
fc:19:d9:5a:e9:81:ea:d6:3a:e3:2a:6d:49:10:3d:99:59:4d:
df:82:dd:bf:f8:cb:d4:d8:95:7c:d2:d1:f8:02:29:6d:30:26:
a9:d0:c4:72:b3:cb:1f:ea:e9:e8:cc:e9:ca:51:8c:48:40:9b:
d2:73:f4:0e:52:cb:34:81:5d:a6:5c:e7:5c:6b:2a:4d:2f:29:
61:7b:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org