Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3331353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: bX8GkO4v6e4RpP/vzVCqdEw8pQAVr1RrYqiaziUsjsQ=
Subject key identifier: F3:6F:A9:67:69:E1:99:D0:6F:F3:EE:68:14:03:8D:85:C1:45:CD:64
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 529BAC570596E0BF116C118714BE6E03E37BCB31
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:21 +0000
ROA not before: Mon 26 Sep 2022 09:55:21 +0000
ROA not after: Mon 25 Sep 2023 10:00:21 +0000
asID: 59282
IP address blocks: 2400:d680:315::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9b:ac:57:05:96:e0:bf:11:6c:11:87:14:be:6e:03:e3:7b:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:21 2022 GMT
Not After : Sep 25 10:00:21 2023 GMT
Subject: CN=F36FA96769E199D06FF3EE6814038D85C145CD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:5a:7d:40:e4:d4:d4:55:ab:48:66:bf:6f:
de:ec:95:92:54:0e:bf:29:76:68:5c:47:00:85:0a:
ef:9a:7a:63:83:6f:fa:40:d8:14:17:89:36:62:70:
a4:98:88:b4:e8:3b:f9:62:77:85:4e:f4:bb:18:51:
7d:c1:ac:b8:12:da:1d:c7:af:87:18:93:29:dd:bf:
61:7d:83:da:b5:57:55:f8:5c:cc:fa:7b:32:cc:43:
65:ce:70:b6:0b:b4:ef:02:2c:7f:97:1e:a5:e0:9f:
8c:65:97:6b:a5:c5:5d:24:82:38:4f:a1:a9:73:f4:
24:84:c9:83:89:ee:e1:d4:b3:75:0e:01:34:20:83:
c4:ed:1b:a7:ea:f3:b2:52:47:4f:c2:79:2d:cc:66:
2d:99:12:ea:90:4b:e8:66:3b:ed:3c:c8:8e:96:5e:
b6:c7:95:8a:92:28:38:4d:0e:fa:be:e9:6d:be:d2:
21:7d:4b:79:77:25:ff:8b:69:58:51:cf:0e:4a:a3:
8c:7b:0e:e1:72:8c:7e:5d:e6:e4:bc:04:51:6d:82:
26:7e:3b:95:9d:b8:c8:e3:6f:47:3b:c8:51:a2:d5:
e4:c7:fa:46:b8:38:9d:70:e1:db:9e:9c:6c:34:38:
2d:c7:a9:8d:53:16:0c:89:ed:18:17:ac:47:ff:45:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:A9:67:69:E1:99:D0:6F:F3:EE:68:14:03:8D:85:C1:45:CD:64
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:315::/48
Signature Algorithm: sha256WithRSAEncryption
20:d2:23:f0:e1:cd:d6:03:ed:8c:d5:2f:e7:f8:17:ae:7f:32:
dd:25:18:b4:b9:43:33:5c:1e:c2:92:93:d1:e2:36:4d:f7:3c:
84:74:38:25:d9:b5:ab:75:ab:28:07:49:2b:29:bc:f5:3f:7e:
71:ec:f6:61:9a:79:bc:f4:c9:e5:bb:ce:f7:35:68:20:86:15:
99:72:2c:ae:85:c1:de:d8:2e:7e:06:8d:fa:9d:ca:66:0d:84:
68:fe:86:0f:17:38:f0:8a:d2:8c:00:38:1f:06:dd:70:b3:64:
42:c3:09:e4:66:8c:1b:91:75:8c:37:b2:59:2a:60:95:d6:8c:
d2:b1:33:c7:59:40:50:7e:bd:c7:e7:64:00:ba:96:17:03:7c:
d7:4c:1a:c5:09:23:1f:24:b8:34:76:23:43:1b:da:8c:f4:8a:
b5:a2:3c:6a:54:21:b8:c9:2e:73:71:7b:c7:eb:b6:09:17:c9:
6a:3e:43:19:7e:01:c8:ec:5e:cb:93:6d:4b:e9:6f:e0:a2:2e:
42:28:4a:24:54:c1:6d:95:a6:ea:ec:28:1a:85:f4:73:a7:dd:
8c:7c:98:f5:47:90:a8:0b:c1:4b:cc:9e:98:44:5f:74:06:1d:
4b:81:96:93:b6:90:99:b9:60:d3:d6:de:ac:1f:83:4c:f6:2f:
16:43:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org