Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3333383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FVkBSWMBKKvq2Xla+5PNmbGaMErjNvRsofp73H4YgX4=
Subject key identifier: D6:3D:ED:91:65:30:2B:AB:30:94:9A:DA:44:72:53:19:FF:03:C1:55
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 32B6D8A5963027748153392C54A3DDB6FC384679
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:35 +0000
ROA not before: Mon 26 Sep 2022 09:55:35 +0000
ROA not after: Mon 25 Sep 2023 10:00:35 +0000
asID: 59282
IP address blocks: 2400:d680:338::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b6:d8:a5:96:30:27:74:81:53:39:2c:54:a3:dd:b6:fc:38:46:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:35 2022 GMT
Not After : Sep 25 10:00:35 2023 GMT
Subject: CN=D63DED9165302BAB30949ADA44725319FF03C155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:b1:d7:12:f3:8e:83:fb:2f:50:a1:15:dd:
22:d4:8e:6f:3a:e7:5e:2d:4f:ee:a2:02:e9:fb:69:
e6:ac:7b:75:08:f1:f5:31:73:0a:5f:3b:d6:53:4b:
bd:86:60:c8:0b:6f:c5:8f:52:c7:ee:80:1d:c7:04:
b4:14:cd:e0:5c:1a:b9:02:7a:bd:59:1c:a2:50:83:
16:47:bf:57:34:87:95:0a:ac:b4:6c:17:2e:df:e5:
b6:2d:dc:d8:3f:48:b9:b2:17:ff:3f:d6:96:5b:7f:
58:b7:62:77:ae:1f:30:c3:1e:08:39:ce:7d:9e:bf:
36:46:7a:e2:cc:1e:48:99:98:03:f6:62:13:24:7e:
3b:6e:37:96:e5:a7:84:ff:36:1e:4a:2c:cf:86:d3:
b2:8a:ea:3a:c1:90:50:f3:1b:1b:1b:d8:a7:87:b5:
83:a1:7c:e7:8f:56:33:91:06:59:34:e5:70:86:f8:
5c:35:e6:80:c0:4e:9a:78:30:a0:57:c2:c4:e5:11:
cc:af:88:3c:2f:bd:86:b0:c9:4b:42:60:0f:09:9c:
24:fa:94:ad:7e:a6:45:30:32:93:18:2a:06:5f:82:
0a:17:79:76:c1:38:7b:f0:d1:fe:8a:12:d2:7d:13:
a7:53:be:2b:d4:1a:f3:0d:37:a6:28:00:e4:78:f4:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:ED:91:65:30:2B:AB:30:94:9A:DA:44:72:53:19:FF:03:C1:55
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:338::/48
Signature Algorithm: sha256WithRSAEncryption
4b:50:bb:f0:d9:81:fc:2b:e7:24:53:13:9e:d7:a3:3a:b7:a5:
57:d0:1a:f4:cb:d1:d2:4d:52:a9:4c:e2:71:11:75:77:48:fb:
68:e8:68:f7:d7:ca:d5:32:61:3b:f7:58:69:c2:db:d0:55:87:
e0:5a:6f:38:1b:36:87:9d:ea:4f:59:82:76:f7:08:0c:dd:44:
eb:a5:40:68:ae:f9:c8:01:1a:31:fc:7d:7e:2c:f8:32:f9:2d:
4a:27:5e:f0:5d:79:23:c4:1a:9a:14:71:34:f6:61:01:e2:9c:
bc:50:50:65:c1:09:9e:05:03:9e:d3:cd:3b:ed:9a:e7:b3:10:
12:dd:68:cf:3e:83:b7:ed:cc:26:4a:4c:aa:32:f7:36:ad:ef:
c5:df:de:02:8f:c5:a4:d5:f3:eb:ad:96:40:04:87:1a:cf:e3:
b1:be:30:d5:46:a0:1f:5c:3a:23:4b:14:86:6b:8c:f6:41:87:
dd:02:15:ce:b2:ba:89:06:c0:88:cf:be:cd:f7:0d:17:d4:6d:
ae:09:db:74:6a:23:3e:8e:ab:66:a2:74:0e:47:be:cd:ab:2c:
29:d0:03:ca:56:0d:11:47:89:16:78:92:af:44:12:3f:39:92:
46:ab:14:7f:75:6b:a9:6a:9a:48:43:3e:89:40:08:ed:80:79:
21:47:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org