Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: hVprYeDjPn0k4xr6QeiKw5RgYQdiAyPRMhGi9GVUYDE=
Subject key identifier: BE:E4:72:B0:20:2D:EA:62:8C:55:36:A9:13:9D:29:27:0C:1C:CE:CF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 04A3DE2B12FF17CDB5E7E3E67ABBCF31B8BA6266
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:02 +0000
ROA not before: Mon 26 Sep 2022 12:55:02 +0000
ROA not after: Mon 25 Sep 2023 13:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:2b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:de:2b:12:ff:17:cd:b5:e7:e3:e6:7a:bb:cf:31:b8:ba:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:02 2022 GMT
Not After : Sep 25 13:00:02 2023 GMT
Subject: CN=BEE472B0202DEA628C5536A9139D29270C1CCECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:82:12:07:e4:93:24:1b:82:bf:08:6d:08:
8f:30:03:7a:c0:f0:8f:6f:09:ab:b5:fa:96:ff:50:
5f:aa:68:f8:f7:01:a9:94:93:59:c5:1b:e3:13:d4:
70:46:74:f5:d4:ad:e4:41:ae:6f:b5:d8:dc:33:f5:
4b:f9:54:7d:17:ca:b4:8e:88:81:26:9f:c9:66:f5:
47:15:5e:81:ef:5e:ae:85:88:76:bc:cf:85:fd:af:
5c:ba:b8:04:b3:38:a0:af:7d:a4:7a:5a:bd:76:48:
c4:93:74:a0:45:c9:81:9a:c3:b0:b1:6b:97:5b:0a:
d2:38:11:38:7d:dd:87:25:f9:e5:15:46:ea:5f:04:
b7:3d:65:04:6e:5c:38:1a:09:2a:7b:60:fd:66:28:
f0:3a:cf:cb:34:46:fa:16:da:a7:a0:46:bf:46:28:
b6:2e:e1:5e:7c:1f:28:55:9e:06:4f:ea:7d:58:4a:
cb:8f:72:1e:a2:e0:5e:9f:8d:13:8f:d1:04:87:cd:
e0:05:d2:dd:0b:1c:63:0c:5d:99:8a:d1:99:57:bb:
3f:c9:11:e7:bc:9e:ce:67:ac:9a:5a:f4:fa:91:63:
51:e0:1f:f1:0f:8c:f9:e6:5c:6c:b3:d5:27:ee:b7:
8f:bb:54:d5:df:35:c5:d7:6c:5a:cb:d7:05:96:9e:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:72:B0:20:2D:EA:62:8C:55:36:A9:13:9D:29:27:0C:1C:CE:CF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
d1:d4:8b:1f:f5:97:7e:8b:3b:6e:20:cf:93:a6:0f:da:61:5c:
09:17:64:e2:3b:54:28:77:3b:e8:c9:f6:a6:3d:54:cb:3c:5b:
ab:14:17:4a:92:d9:85:2f:ac:bb:7e:8b:1b:dd:c4:47:c2:ae:
e9:db:20:b4:5d:d7:63:0e:66:d2:ee:b5:26:ac:d9:c5:ef:89:
dc:c7:a4:34:d4:b1:d6:68:5d:46:b3:40:9e:b2:74:d2:49:08:
07:94:01:6d:90:89:c3:da:93:e4:99:15:e9:5f:ad:d0:f0:92:
d4:c7:6e:31:e5:bd:8d:28:4f:b4:98:a6:1e:3c:11:5e:e0:85:
d5:34:9b:8a:96:6c:81:7b:3a:92:f1:e9:0c:7d:11:49:0e:7f:
2d:d2:59:30:0f:2b:56:39:06:e7:c3:fb:0b:de:aa:5b:00:c2:
69:21:f0:7a:29:2e:01:fb:7d:6d:b8:a3:3f:01:0a:c8:34:9e:
49:f7:f1:b0:21:fc:61:48:a4:46:58:93:53:0f:4e:c4:2b:74:
e2:df:28:b2:37:47:51:4f:ff:e1:a9:2f:42:91:3d:44:90:21:
99:ad:44:02:9a:c0:e0:64:c1:af:af:a4:05:8f:bb:b8:e4:34:
79:16:a0:19:ed:68:8e:3c:76:8b:eb:ff:e6:ee:14:f2:a6:56:
65:2f:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org