Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LzWOUdzDnJnG1zRxz/CmDCxNljSBWZmUroAsea2HGcs=
Subject key identifier: 67:C0:65:CF:17:07:7B:F5:10:78:D3:4E:17:61:68:F7:87:09:46:33
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 73C7F4E1429EA5062CDEF6361B7AA607D8CC9FB7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:20 +0000
ROA not before: Mon 26 Sep 2022 12:55:20 +0000
ROA not after: Mon 25 Sep 2023 13:00:20 +0000
asID: 59282
IP address blocks: 2400:d680:294::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c7:f4:e1:42:9e:a5:06:2c:de:f6:36:1b:7a:a6:07:d8:cc:9f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:20 2022 GMT
Not After : Sep 25 13:00:20 2023 GMT
Subject: CN=67C065CF17077BF51078D34E176168F787094633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:82:af:8f:c9:74:5c:6f:03:6e:d7:c6:92:
6e:50:81:55:9d:6d:5e:69:42:74:31:c0:2f:5b:7d:
26:74:b3:94:f8:b3:4c:1c:ad:6a:76:b1:40:8b:b2:
ac:4c:61:ff:1e:af:85:00:66:81:a3:ad:41:18:35:
ac:7e:b1:8f:33:6e:f9:67:12:45:30:ef:95:a7:22:
34:a2:6b:e8:49:61:26:15:b5:f5:11:0a:0f:d6:96:
88:f8:cd:44:6f:c0:06:c2:bc:17:88:f7:c7:4c:b2:
32:6f:f0:d9:c5:75:f1:64:33:f9:20:a2:f4:cf:67:
ca:b2:ff:f5:b3:70:eb:62:9f:c2:1a:da:07:2e:6f:
bc:21:7e:6a:f0:64:a9:be:67:a5:79:d8:22:c1:3d:
fd:45:75:f5:9c:3d:28:40:d8:87:9f:52:1f:05:19:
c5:57:d4:0d:80:e3:0a:74:bc:ca:fa:1a:f8:12:2e:
14:60:ef:11:9a:60:d9:d1:64:1e:fe:77:d7:43:cf:
08:34:c9:81:51:f4:09:6a:29:67:d0:a5:9f:df:8f:
7a:a6:af:28:a6:79:ca:96:45:8b:fb:ae:a8:76:eb:
8e:be:c7:e6:a7:58:f6:64:dc:cb:b4:56:d3:24:99:
f9:fb:2a:5f:21:5c:42:f8:88:45:50:41:35:41:de:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:65:CF:17:07:7B:F5:10:78:D3:4E:17:61:68:F7:87:09:46:33
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:294::/48
Signature Algorithm: sha256WithRSAEncryption
a3:af:eb:d4:fc:07:4a:de:8a:7b:c1:f1:f9:f9:33:1f:4e:db:
65:82:8d:ea:d9:4a:14:f8:d2:84:89:2d:00:e6:13:86:d6:bb:
1c:07:a3:ab:ba:ba:4b:4a:f5:18:92:54:1f:1c:98:69:c5:7a:
35:6f:94:e4:68:99:06:0a:19:c7:43:d0:d0:1c:0b:2b:4b:f0:
4b:7c:45:92:8b:48:6b:1f:c2:48:23:88:92:2a:c5:66:5f:b1:
0a:60:d4:a7:eb:06:d5:b0:28:fb:61:8c:fb:ae:b0:5b:26:e4:
32:40:19:28:ff:0a:bd:84:5a:5a:e9:42:99:e1:51:9b:88:ce:
da:8b:57:8b:c9:67:dd:d9:6e:15:cc:42:3c:bd:66:b4:e4:92:
25:64:3b:6b:aa:8b:26:44:6b:07:fc:72:d6:00:11:2d:9c:4f:
2c:da:95:1e:15:ae:c6:4c:24:d1:64:c2:ac:0f:a8:3c:42:44:
64:54:3a:80:95:aa:81:3c:25:3f:dc:89:d8:83:37:ff:7f:0b:
52:b0:4b:c1:2e:50:82:b0:4c:e7:34:45:93:cd:3d:fe:58:b2:
ab:c4:18:c8:5d:3d:9b:c6:c6:ad:b7:1d:87:35:04:8e:d4:64:
08:02:3a:f8:40:8f:8f:eb:d8:af:87:c1:78:34:8a:fa:ee:f7:
2f:70:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org