Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: XTImZ1z9ZFVzPn/84/9p98F4zsG67wGTMe79Ffqwuxo=
Subject key identifier: F2:9F:69:99:16:83:43:DC:77:4B:38:16:F6:3B:F1:73:8C:99:3B:F1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1278C707203D14FF0A96A0A6C85AB56E820810C5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:13 +0000
ROA not before: Mon 26 Sep 2022 12:55:13 +0000
ROA not after: Mon 25 Sep 2023 13:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:2f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:78:c7:07:20:3d:14:ff:0a:96:a0:a6:c8:5a:b5:6e:82:08:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:13 2022 GMT
Not After : Sep 25 13:00:13 2023 GMT
Subject: CN=F29F6999168343DC774B3816F63BF1738C993BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:64:49:14:ed:c2:c1:75:46:f8:a1:9c:5e:
af:38:a2:93:af:90:83:db:ff:9f:cf:85:f3:e1:0f:
a1:4a:d6:fc:78:84:13:bb:a9:ad:0a:e9:9b:87:29:
31:18:04:2d:ca:1a:99:b2:e9:db:3d:a0:b1:47:cc:
ae:71:70:fd:33:86:0a:1b:11:87:d0:5f:b5:6c:2e:
02:0d:bf:d5:e4:83:8a:85:7e:74:08:d2:f1:88:ca:
84:c7:b4:69:2a:30:d8:95:8b:12:52:e3:db:22:1b:
8f:3b:a0:51:c9:a0:a8:dc:3b:21:27:93:29:26:c5:
5e:a5:bf:6b:ad:58:c6:62:a5:5d:61:c4:ad:ad:d3:
47:cb:fc:c1:df:d0:9b:bc:81:01:98:b7:e8:a4:4b:
34:7f:e3:7e:26:64:9a:84:08:87:3b:b9:80:83:1a:
01:da:ba:64:8c:ec:d7:ad:f8:5f:61:c7:a9:54:9d:
88:0a:d4:16:ac:75:11:49:fd:ed:f6:b5:d3:17:b5:
21:0e:0b:6d:f2:b3:24:28:e2:30:d0:00:22:0f:1d:
17:5f:a8:b5:83:73:b1:95:de:1f:05:8a:81:29:f1:
59:03:d7:ac:c3:be:87:5a:b0:aa:89:7c:20:96:11:
05:eb:c2:df:c5:1a:44:bc:ed:0b:74:4a:ac:30:ae:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:69:99:16:83:43:DC:77:4B:38:16:F6:3B:F1:73:8C:99:3B:F1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2f5::/48
Signature Algorithm: sha256WithRSAEncryption
9e:a4:5f:78:18:9a:1f:08:58:56:f6:0d:93:72:12:e4:7e:2f:
03:00:dc:14:c0:ec:3e:73:2b:94:f2:67:50:aa:d4:9c:1b:7a:
26:44:33:f3:e0:f7:7d:e6:36:f1:ee:7f:5b:ba:17:4f:63:60:
29:d6:54:12:f0:54:cd:b7:81:cd:b4:35:ed:19:79:92:83:8f:
bd:6d:de:75:50:92:b2:f6:69:1a:28:3c:86:d0:95:e2:69:33:
0a:9f:40:69:34:7c:a6:ba:88:0b:59:2e:b3:46:cb:85:17:07:
c2:f6:88:11:01:d9:da:93:98:30:be:f4:fc:5c:27:44:9c:c9:
a9:d3:4f:89:8f:f6:df:88:5d:c1:d1:3c:61:86:f0:3d:bb:b2:
8e:18:1d:f4:c3:49:f6:15:cc:a1:dd:7c:43:da:f2:0f:b1:93:
35:2d:90:de:b4:32:5c:c8:5e:be:e5:4f:3c:f1:b0:fc:f5:c7:
05:f1:b5:49:ff:29:09:2b:36:03:ae:9c:59:89:ea:3a:87:a8:
05:9a:0e:25:f4:ec:9e:11:fc:59:6e:50:1e:50:3d:91:76:0e:
6c:32:ef:a3:a3:4d:13:87:dd:79:2e:a0:9e:ea:d6:0c:f7:95:
37:77:61:85:1f:eb:83:6c:a9:d9:bc:e4:53:bd:3f:1e:e7:13:
e4:c3:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org