Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3265363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FTIg5lzZ9vL4rxlP0m4DDY95A/l51iw25bhm9JedAhw=
Subject key identifier: A7:8B:7D:97:2D:E5:8F:AE:D9:B3:94:27:F0:D2:AC:C3:19:DB:28:93
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 33AF6EE4219F3A7D22E382A41607B3A4DE8DAAB3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:12 +0000
ROA not before: Mon 26 Sep 2022 12:55:12 +0000
ROA not after: Mon 25 Sep 2023 13:00:12 +0000
asID: 59282
IP address blocks: 2400:d680:2e6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:af:6e:e4:21:9f:3a:7d:22:e3:82:a4:16:07:b3:a4:de:8d:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:12 2022 GMT
Not After : Sep 25 13:00:12 2023 GMT
Subject: CN=A78B7D972DE58FAED9B39427F0D2ACC319DB2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:f9:d0:d5:7b:6b:ee:77:ce:0e:2b:eb:86:
61:2a:c4:3f:4a:48:38:6e:d4:bb:0c:ca:bf:c1:dd:
b7:9c:13:08:d3:a6:96:95:5a:53:aa:6c:d5:15:6e:
1c:5a:e7:df:58:79:71:48:73:2d:10:7a:c8:dd:70:
64:90:9d:1e:96:c4:65:2f:7a:45:48:45:92:9d:de:
0c:18:ae:8d:e8:29:e3:42:36:2d:63:31:ad:b0:fb:
95:16:f2:6f:87:8f:26:f1:4f:f5:1d:e0:4d:27:f3:
8d:b8:f2:09:4d:8e:3c:20:5d:f3:de:c9:09:35:2f:
65:83:0b:18:53:c9:f4:6b:c2:70:a9:15:4f:eb:a5:
25:6c:34:ec:cf:f8:4e:76:fd:65:ba:41:d1:4b:f7:
61:34:48:5e:8a:e2:43:59:2f:73:15:c0:cd:32:a6:
bb:46:b7:90:f2:a6:fd:1d:45:5e:fc:bf:4f:5e:14:
f8:10:60:85:bc:98:8d:c7:7a:72:5a:24:39:49:e9:
e0:f1:1f:e6:bd:db:dd:b6:ea:be:c6:50:c1:e5:23:
23:6d:2c:63:8d:bc:b0:35:83:e5:65:73:5d:2f:5f:
e1:58:c3:b3:4a:43:37:ac:e4:43:54:62:16:34:09:
e7:af:ff:45:5c:38:1f:f6:77:8a:bf:8f:51:8d:21:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:7D:97:2D:E5:8F:AE:D9:B3:94:27:F0:D2:AC:C3:19:DB:28:93
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2e6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:95:fd:77:fc:d9:bc:c4:b3:36:73:d0:f5:e9:0c:a0:77:c7:
da:2f:b0:7f:40:86:d6:46:b7:c1:58:aa:79:07:5c:34:3f:dc:
3a:8c:65:7c:c0:5c:33:65:b5:4f:d4:96:fc:dd:cc:6d:f8:30:
d5:96:cc:05:33:9f:44:1a:71:d8:60:46:e4:b3:46:50:7d:60:
70:e4:da:ba:d0:26:3e:09:b0:d2:04:97:2b:fb:f8:c2:eb:c2:
68:05:65:9a:d3:84:c6:0c:07:2f:f8:47:ca:2d:d7:b5:b9:dc:
0e:42:d9:27:cb:21:81:41:4e:7f:7a:88:f7:79:44:7a:b0:0c:
8d:e5:ea:26:40:59:88:20:f6:41:86:17:32:42:a2:59:ad:55:
97:a7:80:83:4a:88:21:66:24:40:01:9d:df:70:87:29:2f:b1:
8e:bf:36:19:f4:47:a9:76:5f:d7:1c:9e:e5:86:00:a0:2c:36:
ab:55:20:43:ae:29:b9:8b:08:05:e3:74:1b:15:cd:3a:92:92:
ec:0c:c9:bd:db:33:93:68:bf:d9:33:57:1d:39:bf:cd:e1:4d:
6c:b2:46:01:12:52:7d:e3:b6:57:c9:9e:7c:49:36:73:51:49:
66:25:1d:4b:99:35:56:07:e6:0f:53:d1:6f:66:b0:ea:e6:68:
12:f2:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org