Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YPkRhhe5jUZX+gMHstb5R94QBwo3HDvPK3vVQrkyWdo=
Subject key identifier: A4:89:F7:82:D2:D0:D8:42:0C:6B:9F:81:A4:17:07:26:D8:C8:9C:5E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 520931ADFCED79237C151C69A0D19AEAFABA0741
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:21 +0000
ROA not before: Mon 26 Sep 2022 12:55:21 +0000
ROA not after: Mon 25 Sep 2023 13:00:21 +0000
asID: 59282
IP address blocks: 2400:d680:2ab::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:09:31:ad:fc:ed:79:23:7c:15:1c:69:a0:d1:9a:ea:fa:ba:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:21 2022 GMT
Not After : Sep 25 13:00:21 2023 GMT
Subject: CN=A489F782D2D0D8420C6B9F81A4170726D8C89C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:f4:7b:a0:b7:b1:84:0d:91:df:be:5f:f3:
16:fd:02:2f:31:30:dd:1a:d2:97:f0:f4:f9:cc:e6:
12:6e:7e:c3:c2:de:f6:33:e0:94:3c:c8:8e:a6:36:
50:16:82:9a:60:b6:22:6b:78:96:b0:d4:45:26:f5:
fc:1c:0d:46:a5:f1:e4:4f:92:14:6d:61:66:23:c1:
6c:14:1a:35:68:fc:4d:89:25:28:8a:75:3e:8b:08:
2a:aa:be:e7:04:9b:b2:32:d5:fe:83:d2:0a:95:b5:
53:46:34:11:00:b4:dc:3d:02:77:16:c7:50:ad:ba:
32:14:c6:0a:f4:ea:c3:db:f8:34:9d:3e:7d:23:46:
df:fe:f7:97:55:85:e8:c5:26:45:4a:65:43:5d:bd:
26:b2:a7:22:49:0c:7f:aa:f9:59:79:a0:2e:36:ba:
55:a7:f9:9e:3d:25:e3:ac:85:6b:7d:40:c7:b8:24:
74:b0:76:a6:ca:4d:93:e2:d8:ce:e7:c3:3a:d0:e0:
b0:a8:c4:83:b9:a2:a3:3f:30:e3:f1:1b:30:8e:19:
09:bb:f3:36:f2:a1:e8:09:fd:df:29:fc:f0:6f:19:
95:2c:1f:4c:c3:10:6b:de:52:42:96:a9:1d:b3:e7:
73:41:7a:aa:02:9e:97:3b:fc:39:91:ca:31:bd:1a:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:F7:82:D2:D0:D8:42:0C:6B:9F:81:A4:17:07:26:D8:C8:9C:5E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2ab::/48
Signature Algorithm: sha256WithRSAEncryption
89:87:c3:96:f1:bc:eb:d0:dd:3d:6c:50:1c:db:bb:28:de:82:
d1:53:4c:b7:25:25:35:ec:dc:61:a7:0c:b8:d4:a3:50:10:d6:
f6:55:32:a0:c0:a8:69:c2:a8:38:e1:91:5e:53:27:ed:fd:7a:
a5:42:37:a9:52:07:6b:bf:57:e2:dc:5e:a4:8a:02:1d:cf:c6:
88:fd:71:2f:41:ed:93:ba:f1:f4:52:34:72:8b:69:a6:a5:be:
e2:13:51:ed:4e:72:c1:f4:a3:46:3b:95:a4:d3:a8:b7:e2:e3:
ea:48:ba:ae:99:0f:54:a2:4f:f6:a3:fb:7c:02:51:d2:b3:fe:
f2:7e:1b:9b:c6:d8:eb:1c:28:6b:9d:a1:89:6d:69:c7:89:57:
a1:0c:09:b7:14:7d:f1:4b:70:c4:60:e0:52:13:e2:53:ba:16:
44:75:f0:90:52:fb:32:29:26:26:ff:41:f8:d0:5a:82:5c:a1:
37:fa:0c:3e:b4:12:0c:ac:4e:df:17:d0:0e:50:32:85:ab:23:
fa:6f:fd:10:02:87:6e:34:90:51:25:68:19:7a:62:0c:fd:44:
b7:bc:24:87:09:cd:8c:6f:37:f0:e0:e6:7f:45:8a:09:02:a9:
24:c6:3d:99:c3:5a:46:c1:5c:4d:f0:83:4a:6b:70:ae:b3:1a:
83:c7:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:06 2025 by rpki-client