Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: tGqoLiC1Szpik9h2KlNhDJyM+eR7EJOhl25fr3XDQKw=
Subject key identifier: 98:4D:97:80:DA:BB:7C:AA:D5:66:45:84:2C:8F:E4:A2:A9:17:B6:65
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 377B062F7813BC8635AC4042F0F2123F71D6E6B2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:47 +0000
ROA not before: Mon 26 Sep 2022 07:56:47 +0000
ROA not after: Mon 25 Sep 2023 08:01:47 +0000
asID: 59282
IP address blocks: 2400:d680:2f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7b:06:2f:78:13:bc:86:35:ac:40:42:f0:f2:12:3f:71:d6:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:47 2022 GMT
Not After : Sep 25 08:01:47 2023 GMT
Subject: CN=984D9780DABB7CAAD56645842C8FE4A2A917B665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:02:d2:54:28:94:4c:d0:7c:a9:dc:c3:9a:
9d:56:b6:c2:dc:1a:c8:f8:35:a2:0e:2a:68:43:dc:
a8:71:4f:e7:e9:97:67:a3:08:1d:da:52:c8:fe:0f:
36:fc:0a:59:0d:ac:1f:b2:d3:6b:5c:d8:c5:99:ae:
ac:b6:ae:58:48:8d:0e:cd:cc:e0:16:b4:4e:35:c9:
50:c9:06:de:fa:ee:b8:38:cb:42:ee:97:b6:87:07:
8a:ae:48:c2:78:88:c1:4d:53:b8:9c:43:9f:00:44:
9f:f9:a7:3b:f6:31:74:28:31:1b:c2:30:11:66:d0:
ef:80:3e:e6:e3:42:3b:28:dc:f2:fe:80:42:7a:4d:
bb:59:5a:e1:e0:73:a1:b8:11:39:5a:97:df:48:0b:
22:bf:22:cb:41:a1:ea:6a:18:f0:3e:7b:50:06:06:
36:b3:9e:18:71:ed:c3:15:5b:7c:f1:b6:9d:3f:a0:
f6:2a:bb:b3:0b:27:07:0e:f1:30:9a:9c:70:9d:85:
3c:0d:4a:2e:96:b3:7b:22:c4:2c:e4:04:73:7f:71:
82:78:c8:e8:59:9d:f3:c7:a0:44:3d:da:f7:f6:d0:
36:99:e5:05:60:fb:2c:b4:32:54:76:67:b4:f5:3d:
34:ed:09:48:26:b4:55:05:75:ba:d4:21:42:5f:8e:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:97:80:DA:BB:7C:AA:D5:66:45:84:2C:8F:E4:A2:A9:17:B6:65
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2f::/48
Signature Algorithm: sha256WithRSAEncryption
03:5d:44:e3:6b:7a:f2:9d:df:c9:3d:dc:d8:db:b9:c5:f7:d0:
04:b1:b4:9d:a7:a6:c2:4c:92:d1:4e:dc:f0:6a:f8:4c:50:04:
f5:78:17:50:7c:58:c5:70:a7:7c:a1:0b:dc:4b:98:bb:31:14:
25:0b:db:ee:72:90:a1:ba:29:81:72:e8:1b:a5:68:c9:da:5c:
8e:9f:12:4a:6c:7b:65:e7:1a:e7:24:ce:d2:1f:ab:7b:93:f1:
1e:30:9e:9b:3f:7c:89:c1:d9:26:13:2e:05:22:4b:43:dc:83:
54:12:a9:c8:49:7a:13:85:3c:d1:8a:d9:21:a9:dd:4c:8b:25:
3f:e2:67:d4:52:14:74:49:05:6b:61:4f:f1:b6:97:df:0b:ab:
cb:f2:4c:34:55:b0:1a:17:d7:dc:05:5d:cd:f4:af:24:d5:90:
d6:95:f0:6e:23:31:59:3b:b0:aa:47:33:4c:d2:32:32:2e:94:
e9:99:ac:4a:36:03:ee:7a:28:2f:0a:f1:06:10:b5:82:2c:19:
ab:7d:49:89:20:7c:8b:36:26:1c:0f:f4:28:37:23:d4:bb:bc:
6d:a6:06:f4:ee:e9:c0:6d:5d:88:5f:bf:ae:ca:1f:8e:ed:3a:
a0:ad:5b:f8:42:ef:a0:27:ca:76:a8:ea:aa:47:91:30:d2:6c:
f7:41:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org