Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: efe0DIJ5olrYAtixTryt2OTBJnZPxFFwDDtP1v1Imz8=
Subject key identifier: F3:BC:B9:02:13:E4:8F:80:AF:18:53:F4:B2:C4:B0:74:76:59:AB:EA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6D94810DAF8EAD9680C3F33FFEF37473EF299570
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:07 +0000
ROA not before: Mon 26 Sep 2022 12:55:07 +0000
ROA not after: Mon 25 Sep 2023 13:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:2f3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:94:81:0d:af:8e:ad:96:80:c3:f3:3f:fe:f3:74:73:ef:29:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:07 2022 GMT
Not After : Sep 25 13:00:07 2023 GMT
Subject: CN=F3BCB90213E48F80AF1853F4B2C4B0747659ABEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:04:49:79:09:26:c4:b8:d2:5c:f0:b9:b9:
17:93:c6:cd:c8:ce:6c:2f:2a:ca:83:9c:9e:85:b6:
a7:1e:aa:27:bb:61:38:f4:80:46:8c:e3:f7:f8:b6:
fe:60:b9:cf:a0:fa:66:e6:1a:df:be:db:63:3e:84:
ff:34:7f:5d:9a:63:f8:86:bf:82:a8:dc:6c:32:ea:
e8:35:2c:0a:f0:ce:de:da:30:d3:24:2f:84:7f:c7:
06:f2:a3:2e:74:d7:a2:70:fa:3c:6b:19:85:01:ad:
3f:0d:28:55:f9:61:1e:37:89:12:56:51:49:03:ae:
0a:27:57:3d:ad:5e:2a:d6:48:15:14:0c:29:11:07:
ed:5e:68:5c:f8:a1:26:bd:ed:b2:bc:49:b5:b9:ec:
3c:e7:21:b7:52:e6:23:b9:6e:8a:f5:93:e6:15:f6:
6d:65:51:87:f8:44:7f:a9:44:d4:1a:dd:ab:14:03:
26:52:e4:46:97:07:48:f2:55:3a:95:a7:ef:46:9c:
a3:b0:96:bf:ed:c4:69:69:82:35:fe:ba:46:52:c4:
09:19:6a:44:47:19:35:13:27:9e:c7:9a:32:c9:af:
70:89:4b:1e:69:30:4c:d3:63:66:37:3b:0d:32:b1:
17:71:8e:df:aa:3a:da:05:13:ff:fd:12:b6:d9:17:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:B9:02:13:E4:8F:80:AF:18:53:F4:B2:C4:B0:74:76:59:AB:EA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2f3::/48
Signature Algorithm: sha256WithRSAEncryption
63:a6:61:74:8e:78:9f:4f:69:50:c4:47:2c:ce:19:6d:22:fe:
17:87:1a:9c:b9:b0:0b:dd:5b:59:af:76:35:ff:fe:77:6c:8b:
a7:fb:6c:39:0c:b2:4d:47:e7:e9:88:f1:cc:34:23:13:a1:47:
fb:7d:e5:b7:6a:23:4d:36:20:32:69:30:e1:f9:e8:4f:1a:18:
d4:39:19:2b:93:96:60:07:40:09:cb:9c:af:9d:d9:40:89:5e:
97:fd:0f:ff:cd:c9:78:4a:b3:10:b4:6b:bd:72:ca:4c:52:19:
3d:20:68:3b:75:ce:8e:e8:ce:86:23:a4:e0:5b:34:2a:f2:ee:
eb:ff:7b:97:f3:55:9e:44:32:c2:f2:c7:8f:5d:25:1c:02:08:
1f:9b:c6:19:fa:c7:05:8d:4b:ee:d7:4a:2f:0d:a2:9e:00:43:
09:91:4f:de:ef:80:5a:18:9d:27:a1:6f:f1:b1:83:09:f1:96:
a0:af:57:13:08:31:e4:35:3a:f7:dc:42:0f:1f:56:cd:92:a6:
f4:4c:40:e9:2f:30:dc:bb:1e:f6:39:47:1b:dc:04:b8:4a:de:
76:84:90:4c:34:d9:ac:64:da:e6:4f:46:a4:5b:28:58:ad:25:
2a:71:70:79:3e:8b:7e:91:96:df:92:65:99:0a:cf:03:c8:ea:
46:58:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org