Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3330613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: c3OrIM6hdOPHPhzlhOYsgdvisIhezjO67RjMzbTAkMg=
Subject key identifier: EB:67:71:70:5C:A2:D1:6C:B6:CD:9A:0F:A3:75:43:D9:F9:D3:B1:16
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0972FD08F324802B9A12578CA0ADF54DB148DDB2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:02 +0000
ROA not before: Mon 26 Sep 2022 09:55:02 +0000
ROA not after: Mon 25 Sep 2023 10:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:30a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:72:fd:08:f3:24:80:2b:9a:12:57:8c:a0:ad:f5:4d:b1:48:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:02 2022 GMT
Not After : Sep 25 10:00:02 2023 GMT
Subject: CN=EB6771705CA2D16CB6CD9A0FA37543D9F9D3B116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:b9:95:bd:46:64:25:e6:d9:1d:fc:db:7a:
8a:48:36:e3:a1:69:e3:e1:52:8c:31:f1:32:08:a4:
fe:e2:51:8d:1b:0b:d2:ac:d5:35:6d:02:ca:a5:e9:
39:70:7f:a7:97:ba:0a:e2:05:b6:45:4d:e7:05:29:
c8:36:56:2c:1a:18:61:9c:a4:0b:bb:1e:af:6c:29:
8b:79:3e:16:3f:85:19:e2:4b:b6:a3:31:0e:b5:64:
a2:8f:5d:b6:3e:77:f2:ae:a6:6f:05:29:2d:1a:3e:
94:32:f5:74:9a:02:5a:00:a7:68:48:61:f5:a1:0f:
f6:90:4c:35:db:a4:56:55:c2:6c:a4:6d:bf:83:c0:
60:9b:7a:3d:c0:88:ec:01:27:27:bb:9d:b7:38:86:
be:91:6a:3f:ab:0f:63:61:86:a6:5a:96:82:5b:c3:
84:f3:a3:33:3e:ae:27:26:3f:c7:4e:cd:34:7b:48:
55:01:52:17:29:a2:e3:51:96:8e:c1:f6:f5:2e:a5:
4a:4c:6e:b1:ef:0f:24:66:23:71:e5:fb:82:d1:71:
78:af:3c:23:78:0a:e2:50:90:ad:af:01:2a:30:82:
59:3a:b9:5a:86:18:5f:4b:1c:54:0b:a7:ae:10:24:
14:5c:9a:77:57:96:a2:1f:7f:83:84:f0:dc:12:c1:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:71:70:5C:A2:D1:6C:B6:CD:9A:0F:A3:75:43:D9:F9:D3:B1:16
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:30a::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d2:61:6e:a4:6f:45:62:ac:89:d5:6f:7d:4e:95:3c:39:f9:
31:c6:40:68:27:9e:83:d8:08:fa:45:0a:57:a8:68:a3:ba:90:
41:76:4d:32:f9:7b:8c:fc:6b:eb:25:94:7a:c5:50:3b:d2:6c:
75:80:33:7d:c8:e4:61:c8:27:40:7a:93:f5:c8:1c:e4:09:6f:
85:05:ae:9f:d8:f0:3e:bc:53:4c:2b:35:2f:91:5d:58:d8:47:
59:f9:ae:7f:a4:3c:d0:3c:09:d3:03:a7:ee:9b:bc:41:e9:68:
e6:66:3b:f4:f5:2d:1d:8e:bf:f8:42:82:7b:22:45:7a:6c:15:
ea:54:18:5b:54:df:8d:71:65:63:c4:f9:2e:bf:bb:13:66:e3:
05:c9:ac:bd:41:a1:4f:a9:67:5c:7e:f6:41:9c:57:86:72:8e:
b6:b1:66:ec:1e:75:16:d1:f3:fd:9f:44:8f:84:e0:04:0a:e7:
ac:03:e1:86:60:db:a3:9a:54:d3:07:c6:4e:40:8b:2f:97:bd:
4d:53:bb:ee:ad:43:f6:44:24:a9:b3:5b:87:d6:ab:aa:f2:ef:
89:b6:60:f5:5d:ce:eb:c3:1d:41:08:c2:86:ac:77:53:7c:43:
18:f5:4d:c1:5c:91:ab:9e:e1:ce:26:25:59:ba:03:6a:1e:30:
30:25:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org