Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0zeGkTX1ohI77ej0WGGJRiPYIcSLeJBHA+fbPo7xA1Q=
Subject key identifier: 70:6D:8F:CF:DB:FB:66:14:C5:56:F0:A1:F7:76:13:90:70:41:98:77
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 63986CB824FCAF2BB7FEC8C9315F621776084CF0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:07 +0000
ROA not before: Mon 26 Sep 2022 07:57:07 +0000
ROA not after: Mon 25 Sep 2023 08:02:07 +0000
asID: 59282
IP address blocks: 2400:d680:29::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:98:6c:b8:24:fc:af:2b:b7:fe:c8:c9:31:5f:62:17:76:08:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:07 2022 GMT
Not After : Sep 25 08:02:07 2023 GMT
Subject: CN=706D8FCFDBFB6614C556F0A1F776139070419877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:ec:af:d9:69:3b:bc:b5:51:6f:ad:75:16:
b2:9c:28:63:13:af:71:b0:06:38:5c:d3:30:85:8f:
1f:a5:87:7f:0e:26:c3:39:3e:f5:ee:38:35:2b:0c:
32:cb:df:c1:0d:cc:2b:c1:9c:79:43:9b:36:99:e3:
fa:ac:51:50:c9:72:37:8e:b5:e3:c8:69:4d:0f:ac:
83:3e:a1:22:54:45:20:b8:15:f6:66:64:70:ae:19:
39:b6:cc:29:ae:27:45:25:09:72:b0:57:fc:f9:fa:
76:f3:23:0d:92:44:06:ea:7e:61:41:91:33:9d:49:
b1:5f:ca:51:ac:db:aa:6e:fa:bd:98:7a:f8:2b:91:
81:12:27:38:98:07:95:7b:3f:a6:b7:48:05:9b:2f:
52:96:fc:fa:8e:86:c0:42:14:7a:98:4a:8d:31:57:
be:65:1b:2f:a5:d5:34:db:59:23:0f:de:0c:25:ab:
02:9c:fa:79:ab:9a:44:9b:86:27:de:4e:2d:d4:bb:
03:c5:bb:c6:8e:fa:3c:65:02:99:4b:6c:01:90:b6:
eb:f5:31:b1:0f:e5:eb:59:b9:ef:96:49:91:6d:73:
51:fd:5a:11:2e:1b:de:d1:f8:4b:06:d3:01:94:74:
b5:de:57:aa:fd:12:93:f2:86:b0:59:9c:cc:0a:8f:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:8F:CF:DB:FB:66:14:C5:56:F0:A1:F7:76:13:90:70:41:98:77
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:29::/48
Signature Algorithm: sha256WithRSAEncryption
17:5b:50:da:18:32:35:54:4e:48:a6:c9:d5:94:61:30:d6:75:
0a:5d:98:cf:e6:9f:47:98:5e:00:db:5c:cf:73:cd:9b:13:b0:
6e:8c:f5:49:c5:7d:26:9c:92:30:25:a6:e2:dc:11:6e:22:53:
19:d0:e6:8e:30:7e:be:47:25:8d:52:8c:0a:fd:2d:28:d8:b7:
83:ea:08:d4:1c:02:4d:0a:c8:1d:b9:b3:da:5b:ce:e5:4f:1d:
42:6f:3f:4f:bb:76:cc:e4:5b:a4:2e:d6:4d:e7:dc:c2:3a:f2:
f2:1b:a2:40:42:84:b6:cd:41:f0:63:b3:6c:af:99:6c:cf:1d:
0d:3a:6d:48:ac:4e:da:7c:e8:bc:6c:80:c4:f1:48:33:9e:e7:
f7:bd:21:d8:54:8b:65:cf:8f:fe:02:9d:f0:a6:4f:06:d1:e4:
9a:4d:01:d0:d4:fc:a4:93:5f:21:ae:f3:fd:18:78:dc:1e:4f:
26:dd:7c:a5:49:0c:57:e0:d9:ad:7e:50:8b:96:c0:a1:34:14:
6a:b9:4e:90:1a:10:5e:9d:75:fe:b1:db:3f:c2:b1:d3:8f:21:
83:ec:ef:5b:4f:4f:b9:f2:e7:f8:ca:31:f0:b3:92:82:7b:f8:
d5:18:aa:fa:d1:8e:40:67:7f:57:82:69:21:19:a3:23:cf:35:
ce:c4:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org