Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: nb+yOo7Atq/PCH3e9jCWlAbVhbqJiBaZ/4DFPO2eHU8=
Subject key identifier: C7:EB:AD:30:6F:07:02:C0:3B:E8:88:2B:E7:F6:A0:8D:5E:46:5F:4E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1F04905263BD3FDCB564AC9905F1ED1CC5556D33
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:03 +0000
ROA not before: Mon 26 Sep 2022 12:55:03 +0000
ROA not after: Mon 25 Sep 2023 13:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:2c8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:04:90:52:63:bd:3f:dc:b5:64:ac:99:05:f1:ed:1c:c5:55:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:03 2022 GMT
Not After : Sep 25 13:00:03 2023 GMT
Subject: CN=C7EBAD306F0702C03BE8882BE7F6A08D5E465F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:7c:28:e5:6e:c4:62:bf:a4:1f:bc:f3:1b:
f3:34:3c:53:0d:2d:91:86:c0:e9:07:44:41:c6:d7:
de:3a:12:46:d6:f3:84:6b:9c:32:fb:fb:86:c4:59:
1b:d2:cd:47:58:0d:98:e9:a4:4a:22:0d:d7:02:0d:
be:9e:d3:77:9a:db:5c:a6:26:8b:e0:18:2c:45:09:
1d:1a:7f:19:cf:c4:2c:ab:69:e0:28:d3:60:22:d5:
65:2e:c5:82:78:24:cf:0e:83:fe:6c:89:62:c3:22:
97:fa:2e:17:53:17:79:bf:df:c3:8e:3a:15:f3:b9:
05:5d:79:cb:20:d5:5e:87:85:91:d3:10:f7:95:c6:
7c:b8:73:a2:ce:cc:01:51:28:5a:6d:e1:29:f7:34:
27:37:b4:05:83:ce:5b:cf:b5:fc:4c:26:cb:aa:d1:
6c:20:4c:2d:07:86:9d:ea:c7:0c:39:0b:1f:d4:d9:
be:4f:64:51:60:ff:6e:fc:60:8c:66:66:c8:25:e6:
51:f8:f9:97:f9:07:fa:0e:a6:cd:6d:f4:b7:60:59:
04:01:87:04:42:0c:05:49:9f:33:7a:62:d9:0d:a3:
bc:aa:7f:fe:cc:32:e8:8f:f6:41:21:81:d0:b9:62:
8f:23:15:ef:80:a6:d5:41:ca:d9:0f:32:67:f4:1e:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EB:AD:30:6F:07:02:C0:3B:E8:88:2B:E7:F6:A0:8D:5E:46:5F:4E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2c8::/48
Signature Algorithm: sha256WithRSAEncryption
13:dd:de:75:5f:60:89:9c:ae:e5:78:c6:e4:f3:7c:6d:15:52:
44:6a:d9:7b:bb:4b:c8:36:41:15:5d:ec:24:7f:80:7f:a4:6e:
72:40:34:2e:fd:8d:2e:9f:14:8f:b4:03:ee:54:d3:58:a7:6f:
4b:b6:71:2b:1c:41:7a:2a:96:06:c3:9b:16:41:79:cc:08:63:
04:bf:8d:2f:1c:bd:37:a9:73:c3:9c:d4:fc:99:e7:da:b2:b8:
f8:83:b6:b6:d4:79:76:02:94:1f:9b:be:e4:d2:2b:19:6d:29:
4f:9d:0b:6e:22:8b:fb:f9:2b:5d:6f:89:f5:81:e6:ed:6c:b0:
81:45:fd:c3:b8:4b:db:93:83:d7:e6:08:61:87:59:2c:f8:f5:
fe:5f:48:f9:08:ca:f6:fd:31:44:fa:75:ea:e0:4a:81:56:b8:
28:40:8c:db:0d:e4:56:51:42:c3:a3:16:95:5c:75:52:52:96:
80:00:02:be:7e:8f:fb:45:01:d4:f6:ae:d1:88:8b:d0:14:d5:
03:24:7a:4f:24:d7:31:82:80:18:ae:35:60:9d:3c:14:2c:e0:
91:ad:a4:14:b3:45:fe:d9:2b:23:8d:b3:2b:f0:0c:83:7d:7c:
ce:61:04:e7:64:db:d1:86:ba:af:63:2b:f5:fb:b9:1f:6b:a8:
d9:05:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org