Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 3yiuajDwLHdSmTy0MTqdXaE8jeg4TlFtwBMJS/uKDo4=
Subject key identifier: 7B:6C:49:DA:6F:C2:90:C4:8F:E2:7E:E5:1B:82:B0:90:35:F3:C9:FC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6075044BD89918FC7DDA4A6FA60609542688FC16
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:03 +0000
ROA not before: Mon 26 Sep 2022 06:55:03 +0000
ROA not after: Mon 25 Sep 2023 07:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:2b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:75:04:4b:d8:99:18:fc:7d:da:4a:6f:a6:06:09:54:26:88:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:03 2022 GMT
Not After : Sep 25 07:00:03 2023 GMT
Subject: CN=7B6C49DA6FC290C48FE27EE51B82B09035F3C9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:6d:fa:be:fe:94:9b:89:26:61:4b:a0:bf:
fc:34:22:13:aa:12:9d:53:e8:96:f8:f4:54:6d:de:
23:98:5c:bc:07:91:bf:93:5a:04:72:1d:4f:b3:63:
d7:9f:5b:03:dc:26:11:15:90:e8:81:b0:2e:b5:75:
4a:34:43:27:70:f8:c1:6a:64:40:94:2f:59:a4:3c:
ed:87:4f:8b:1f:7a:60:6e:6f:dd:39:bb:73:29:98:
ce:2d:a8:cd:1e:7f:35:21:73:ac:5a:33:db:ae:1c:
60:56:9c:74:8f:05:60:ec:94:63:b1:fe:31:2d:aa:
4b:74:57:fb:4c:8e:fb:87:4d:c4:44:3f:6d:a5:e3:
ed:58:dd:fd:c6:e4:7d:85:dc:6d:e2:42:67:f2:53:
9f:82:58:3e:34:3d:bd:c8:3e:3e:7b:98:a4:20:e1:
27:01:a2:f9:93:20:9f:84:cf:5e:db:bf:3a:a4:53:
4c:8e:ae:7d:4d:67:da:db:66:99:6f:98:84:8c:3f:
04:c6:b8:96:0f:51:be:c1:fd:57:c1:5c:f5:98:9e:
0d:f0:56:67:cf:f6:b1:c9:56:e4:42:d2:06:a8:a8:
8f:07:4f:e5:79:ea:19:df:06:22:cc:16:fd:b3:2f:
73:ed:7f:7b:24:08:5d:99:7b:f0:bc:fd:4b:b6:17:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6C:49:DA:6F:C2:90:C4:8F:E2:7E:E5:1B:82:B0:90:35:F3:C9:FC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d9:8e:b7:48:0d:e9:e0:11:4c:b0:ae:a4:d8:10:64:16:30:
f9:67:03:2e:2b:e5:2f:fe:58:76:93:74:26:b4:57:dc:54:4d:
59:be:30:68:33:ae:5b:ab:8f:ea:ae:eb:76:23:dc:6f:9c:7a:
8c:c4:0d:75:dd:17:86:45:6c:39:66:73:3f:a5:2c:e6:23:61:
d7:67:b5:bc:46:16:51:17:0b:d1:18:da:83:cd:36:43:bf:85:
bf:46:64:1a:43:9c:16:c2:e4:14:77:a8:40:22:d8:87:75:2f:
96:dc:33:b8:7e:3c:79:6d:04:cb:50:27:5a:f7:2d:1c:d2:f6:
61:2b:68:ed:88:d2:eb:0c:d3:49:8c:f3:91:31:da:95:51:57:
79:0b:51:43:b6:43:70:cc:31:b5:dc:f4:4e:63:e8:a7:61:64:
51:e2:87:e8:90:c3:c3:68:5a:82:a1:48:05:bf:f9:24:4d:c6:
7f:b3:79:47:06:cb:dd:fb:a6:03:d3:d0:55:ce:2c:00:dc:6b:
5f:cb:ef:5b:d2:e4:7b:b4:92:02:5f:f5:01:5a:2b:d4:c8:68:
de:6f:d6:9d:28:3a:a4:4b:b9:f7:30:c8:31:20:d0:16:a1:f2:
33:49:ee:06:17:69:b9:84:ca:17:d5:88:ec:62:c4:56:16:63:
eb:92:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org