Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YgJ2gFz9moO6zKBefI8rttutDPHSsjR1cT6Fq/59X3A=
Subject key identifier: B9:BC:F2:12:6B:96:31:A9:BD:E5:C3:1E:04:E9:25:F0:EB:BC:33:15
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2585C0B8FB4844968C448E1A7AF5672D78B19AF0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:02 +0000
ROA not before: Mon 26 Sep 2022 12:55:02 +0000
ROA not after: Mon 25 Sep 2023 13:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:2a4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:85:c0:b8:fb:48:44:96:8c:44:8e:1a:7a:f5:67:2d:78:b1:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:02 2022 GMT
Not After : Sep 25 13:00:02 2023 GMT
Subject: CN=B9BCF2126B9631A9BDE5C31E04E925F0EBBC3315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:6d:54:e2:ce:2f:57:ca:45:7e:7f:f2:6d:
89:28:89:ba:ab:05:87:16:64:6d:dc:f0:1f:f4:93:
ef:8c:7c:19:01:74:97:eb:0b:fc:8a:6a:0c:cf:0d:
9f:4e:87:20:d1:ce:19:ab:f5:b3:7e:4f:7f:01:58:
8e:11:37:81:ba:29:b2:22:cf:65:a1:d6:29:4d:7f:
3a:63:46:b9:b5:31:fc:92:8a:02:e3:a6:a7:12:9a:
9d:80:a6:cd:55:66:0e:40:36:d6:9b:a1:75:bb:11:
1b:7e:50:6b:25:4e:d1:2a:af:f3:f9:1e:79:08:ec:
4d:19:c5:9b:00:4c:da:40:5a:8e:54:3d:2f:18:75:
0d:46:7d:b9:2d:a3:41:2e:0b:60:e7:60:12:03:bf:
c6:8e:b9:ac:cc:e1:b2:7d:79:50:59:66:02:15:09:
38:fd:2f:0f:81:bd:4b:cc:8b:6b:99:7a:05:f8:b8:
bf:4a:6a:28:37:cb:ce:2f:06:2a:3d:a6:38:8f:fe:
7d:9f:e2:5e:da:cb:69:9e:43:de:0c:5c:d4:40:30:
2c:8a:73:fb:d0:99:c5:c3:e9:9e:40:b3:aa:b0:b9:
80:52:53:30:e0:ab:09:5e:15:a3:f2:2b:e9:e9:6a:
7c:78:df:62:c1:ce:ae:a1:36:62:ce:67:ac:a0:61:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:F2:12:6B:96:31:A9:BD:E5:C3:1E:04:E9:25:F0:EB:BC:33:15
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2a4::/48
Signature Algorithm: sha256WithRSAEncryption
36:a4:03:41:b3:8d:37:e6:26:3e:8d:dd:53:23:ec:92:1b:3c:
ee:32:2a:8f:cf:45:8d:6e:05:70:ee:25:ec:8c:87:b3:e5:bb:
8d:67:da:64:0a:c7:00:84:16:f6:60:76:76:ce:8e:b8:13:47:
ef:99:b3:09:98:0c:0a:79:e2:79:cc:02:55:4a:11:6a:db:b7:
72:cb:1f:56:ad:e4:91:ef:d5:fb:bd:81:fd:6d:29:51:f7:65:
82:14:26:ef:52:fb:f2:e6:af:64:9e:fd:1f:b6:96:20:bb:fd:
ef:0b:f5:03:27:dd:2e:ba:8b:e7:ef:89:d1:af:28:a2:64:57:
30:6d:d5:50:c5:f3:d3:97:ce:4d:bb:35:e7:5f:94:fd:ff:b2:
26:4c:0e:fc:1c:aa:a4:a5:cf:37:87:37:d7:14:7f:5f:35:1b:
77:15:bd:1d:cb:f3:58:5c:8d:a0:af:d5:b6:04:d8:c3:28:87:
eb:e2:ea:44:d2:28:12:a8:08:7a:09:50:8f:ac:9d:bb:0a:0b:
20:1e:e0:fe:0a:9a:ab:2c:76:03:27:d5:3e:8c:db:cd:de:82:
23:90:00:b3:13:02:75:14:b1:ba:48:d3:49:04:81:5d:1b:9a:
fd:ca:6b:6f:ac:8a:c3:c7:1b:69:c0:ba:33:2a:d2:da:51:f1:
a7:fd:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org