Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: JRZ9pMHpxCrdi4YF+no+UmY/r6AKy1B+aPcWfgt0up0=
Subject key identifier: 0B:24:83:84:DC:2C:FC:65:41:29:1E:A1:95:CF:17:FC:9A:40:A1:2E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BBEF85410AD24A5CEB30E8672BE35CB1388D3D1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:14 +0000
ROA not before: Mon 26 Sep 2022 12:55:14 +0000
ROA not after: Mon 25 Sep 2023 13:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:2be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:be:f8:54:10:ad:24:a5:ce:b3:0e:86:72:be:35:cb:13:88:d3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:14 2022 GMT
Not After : Sep 25 13:00:14 2023 GMT
Subject: CN=0B248384DC2CFC6541291EA195CF17FC9A40A12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:20:78:5e:ee:61:a7:5f:8e:32:d9:43:9c:
3b:09:38:b4:d0:b5:6a:b2:16:b1:3c:eb:50:2c:1f:
20:4d:e2:c2:1e:4c:d7:d7:a6:3d:52:7f:51:d2:38:
13:4f:6d:96:c1:d7:10:4b:c7:31:ba:00:aa:ae:16:
bd:e3:d8:a9:c0:2f:0d:13:e9:d9:90:4c:9f:7d:47:
74:27:fb:7b:91:c3:13:b7:fd:18:73:b8:3b:6d:6c:
98:45:57:30:d6:fd:4e:8c:02:3d:74:c4:f4:0c:ab:
40:d5:13:44:b4:6b:de:67:21:00:3d:de:99:65:d0:
fb:fc:39:86:70:03:4a:16:2b:7c:ee:0d:67:c1:c1:
c6:8d:a5:aa:4f:09:0d:bf:96:ea:fc:69:08:a4:4b:
ef:dc:73:7b:23:f3:73:b7:d9:07:31:60:f1:87:ec:
dd:e8:1e:41:ba:fd:bb:e7:1f:84:1f:4d:19:5b:7b:
ef:7b:3c:3f:96:04:c8:77:ba:9a:1f:54:eb:24:57:
b6:b0:74:c9:2d:2d:b1:10:80:49:9b:80:25:dd:c5:
f0:b4:74:f9:e9:df:45:21:2e:54:c4:5b:38:a1:77:
34:a4:6c:22:a1:20:8a:14:b7:58:cf:5d:3d:1d:70:
38:49:03:c8:5f:1b:c3:6c:9c:00:84:35:2c:a6:3a:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:83:84:DC:2C:FC:65:41:29:1E:A1:95:CF:17:FC:9A:40:A1:2E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2be::/48
Signature Algorithm: sha256WithRSAEncryption
d7:28:67:e6:af:04:3e:ee:b9:f1:eb:f7:dd:66:d6:d0:3a:de:
53:f0:9b:55:2f:6f:28:91:1d:15:25:01:84:35:ce:39:de:80:
a7:14:72:7d:3c:65:14:b0:26:78:cb:c1:16:ae:e0:01:fc:42:
b4:e9:f2:8c:cc:7d:95:ef:74:7a:0a:eb:2b:fe:c3:33:d3:3b:
50:5e:37:98:d2:29:fe:c5:24:98:14:8f:f4:99:b5:2e:e7:2e:
b2:d3:d4:6c:8b:bf:83:54:db:d7:0a:99:f3:69:09:32:52:31:
eb:bd:19:52:9e:ad:af:e4:0e:d8:ac:e2:d9:0f:f1:df:98:d5:
87:d4:0e:7b:9d:d5:fe:dd:8c:bb:a1:4e:4c:2f:5a:4c:a4:85:
f8:b0:f5:c6:c4:67:e4:17:ce:a7:bd:dc:a7:de:d2:df:58:ac:
8e:31:db:17:c2:24:4e:24:66:c5:00:8e:cc:c4:d1:68:99:45:
f4:72:97:70:c4:30:33:e5:07:45:9a:9a:21:39:ab:37:26:2f:
94:1d:c5:18:33:8a:14:a1:84:d5:93:47:4f:32:ac:02:37:c0:
b3:a4:d3:8c:94:a2:7c:61:ea:5b:3f:41:1b:6b:bb:b2:5f:89:
97:f4:08:b5:1c:9d:1d:e9:d0:52:c2:18:3f:73:6a:a4:92:d1:
f5:91:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:06 2025 by rpki-client