Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OlG+Wh4p7YHADQ+18U0GttFDtrB/9Mut0NIhjX/rOOk=
Subject key identifier: FE:07:5D:BC:E2:6B:63:29:C6:B8:0B:FC:25:CF:49:D3:07:80:AD:7A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78EADDCC8DA8FBA558220EEA25E8D748D85C0E96
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:41 +0000
ROA not before: Mon 26 Sep 2022 07:56:41 +0000
ROA not after: Mon 25 Sep 2023 08:01:41 +0000
asID: 59282
IP address blocks: 2400:d680:2d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ea:dd:cc:8d:a8:fb:a5:58:22:0e:ea:25:e8:d7:48:d8:5c:0e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:41 2022 GMT
Not After : Sep 25 08:01:41 2023 GMT
Subject: CN=FE075DBCE26B6329C6B80BFC25CF49D30780AD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:48:ed:fe:ca:41:e0:7f:0a:93:7f:9b:60:
3a:a9:0d:ff:49:d3:50:75:5e:75:41:f3:d5:33:63:
c4:28:a5:3b:93:6b:85:2c:ae:b2:8b:3e:84:a6:b3:
c4:6a:47:3e:d3:49:9d:62:9e:a8:21:5d:70:ca:23:
3a:60:dd:9a:18:4a:19:ee:c7:f1:95:f9:aa:90:01:
e9:33:e5:90:a9:1d:d0:c2:80:ee:05:5d:fc:24:14:
c5:5c:3a:51:ab:f5:b6:35:f7:18:30:98:19:a6:0c:
54:36:dd:e6:4b:62:24:85:e2:4d:13:dc:83:e3:6a:
14:eb:f3:16:d5:da:60:fc:00:3a:d1:d0:5b:c0:aa:
9b:8c:90:42:71:4e:d0:09:b5:78:a1:0a:4a:37:8f:
24:c6:8b:fe:1d:ab:72:5c:6f:05:86:56:2a:dc:e4:
66:84:a7:3c:50:13:5a:b4:6f:71:8c:f1:23:13:49:
c6:b7:26:57:87:47:8f:00:a6:31:60:ad:ed:56:43:
67:f0:fc:dd:e5:87:40:32:1c:e9:4c:6d:32:66:93:
6d:56:66:7e:66:9c:53:d0:18:e4:a0:82:97:2a:4d:
7b:40:a3:05:da:cb:9e:8d:82:4c:ac:22:77:99:45:
d9:e4:0e:47:b2:82:81:21:d4:a6:db:ab:c4:74:fb:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:5D:BC:E2:6B:63:29:C6:B8:0B:FC:25:CF:49:D3:07:80:AD:7A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d::/48
Signature Algorithm: sha256WithRSAEncryption
61:12:21:96:fe:8d:8c:6c:f1:b0:32:c7:1d:59:55:e6:b2:81:
4e:95:0f:e4:c8:f3:09:db:93:5f:c3:a2:88:9d:88:fd:d2:4c:
41:5d:9b:8d:75:8c:7e:d9:ea:9f:27:a7:9e:52:89:da:3d:26:
14:2c:de:0d:a9:e9:40:c4:19:57:9f:4d:72:96:bb:b1:dd:0c:
52:3a:3f:7e:a9:4e:64:9e:71:4d:1b:01:97:75:ad:e5:a1:b0:
65:9b:24:52:2f:27:99:d7:27:23:dd:02:dc:d9:c1:37:58:49:
18:e4:54:c4:b6:f6:4d:43:b0:2c:74:a5:f8:a3:bf:33:f9:ea:
f2:28:68:1e:be:7e:93:95:38:d4:f4:4e:61:de:7b:c5:46:f4:
7a:88:40:8d:14:d6:b5:a7:d2:a3:cc:ff:c2:8d:bb:d5:73:e1:
58:41:06:86:36:38:80:65:75:3d:34:2e:35:22:57:99:e9:ff:
b9:98:2c:e4:ff:91:88:a4:df:dd:69:e2:85:16:f1:8a:69:92:
ca:c4:a3:76:c8:cd:05:4d:42:6f:8c:73:d1:16:27:cf:d4:89:
a6:f5:87:7a:8f:bf:86:2d:fd:fa:52:4d:4a:0a:64:c1:0b:51:
15:2f:ea:a3:e5:0f:6b:12:9d:a9:8e:af:39:b2:6d:e6:b6:c3:
65:90:a9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org