Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0NiaedDVEzRQYgXb030Sw7SN8RN8zl7EfuPUyUjecjE=
Subject key identifier: 50:11:A6:FC:D2:83:C7:86:0F:8D:69:87:0A:C7:27:0C:C2:F7:0E:4D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2C20593A2A9768F2418AF25E25844EE2F631C299
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:45 +0000
ROA not before: Mon 26 Sep 2022 10:55:45 +0000
ROA not after: Mon 25 Sep 2023 11:00:45 +0000
asID: 59282
IP address blocks: 2400:d680:346::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:59:3a:2a:97:68:f2:41:8a:f2:5e:25:84:4e:e2:f6:31:c2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:45 2022 GMT
Not After : Sep 25 11:00:45 2023 GMT
Subject: CN=5011A6FCD283C7860F8D69870AC7270CC2F70E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:d4:ed:45:77:02:26:4e:c3:24:19:9a:b7:
02:5c:d2:0e:52:44:2e:c5:1f:f1:6c:e7:60:d8:d5:
25:d1:03:e4:c7:67:62:1b:1f:f6:0a:10:aa:a0:7d:
dc:a6:3d:43:8c:57:a8:18:c1:80:7c:3d:35:0f:1e:
d2:ac:87:ae:71:9d:78:ee:72:05:62:dd:41:df:11:
0a:ec:7c:1f:ed:3a:54:a0:3f:0b:bf:e4:44:1c:a8:
8c:b0:46:93:3c:a2:dc:71:4c:fd:3e:fd:b6:67:50:
fb:17:ab:f3:94:69:3d:95:6c:f9:39:ad:52:3e:ef:
1b:bd:90:38:14:63:ef:34:e9:2c:70:6f:99:64:72:
aa:84:8f:d1:ea:5f:a8:b8:94:3f:11:5b:dc:f3:e3:
5d:57:93:22:64:e5:59:f7:8d:69:df:fd:ed:ec:ec:
d9:9a:fc:42:e3:ab:9c:3d:8a:8b:d5:c5:88:df:ae:
f8:8a:7c:60:5b:56:ed:42:1b:fb:9d:1c:3d:d4:a3:
2f:72:d7:d2:7d:fa:da:f9:27:43:19:f5:9c:33:93:
e6:a6:7a:38:b1:c1:c6:4a:8e:08:dd:98:06:91:93:
0f:80:62:f4:b5:1d:66:4e:1c:c1:fb:b6:04:74:9c:
f7:9e:15:c7:1a:bc:a3:42:fd:a3:ef:be:cc:c2:4a:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:A6:FC:D2:83:C7:86:0F:8D:69:87:0A:C7:27:0C:C2:F7:0E:4D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:346::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d3:a0:52:ee:a4:d8:b2:24:61:5d:0a:1f:31:d5:b2:9b:c6:
13:ed:ed:de:5c:f7:bc:6d:59:b1:87:c1:32:ae:76:5c:f8:a1:
82:4b:40:46:04:79:c6:e9:0a:68:77:85:0a:e8:93:5a:cc:d1:
9d:57:e6:e4:13:ff:fb:b1:e2:ef:15:74:0e:ff:f3:98:09:85:
5a:a2:d4:e7:f6:1d:c4:11:0b:e1:13:9f:36:30:cb:3c:81:50:
7e:29:30:8a:ea:af:15:f3:8e:fb:2b:c8:fc:80:f2:b7:59:9f:
f4:a2:41:62:ca:50:99:50:9b:f8:5a:55:14:3e:f6:e4:d7:c8:
f4:57:a9:a3:91:1b:07:b9:c7:9c:66:7e:96:3c:ad:fa:28:46:
b3:2a:f2:15:a7:e7:f1:fe:53:93:50:78:2e:34:d0:fb:c8:d3:
ea:ba:11:c8:81:be:27:12:7e:d6:93:17:94:03:0e:39:1d:e2:
d4:ee:c1:f8:14:12:46:d7:72:6d:6e:4b:02:d4:f7:c0:cc:64:
98:91:1f:f7:28:cf:5c:3f:52:09:95:9c:c9:75:5b:eb:29:e3:
81:11:87:99:81:ee:9f:e1:f1:0d:40:f7:ec:7b:d4:c4:c1:be:
17:12:62:9b:00:07:d7:3d:1a:f8:e0:40:e5:5b:54:2a:a3:99:
f3:51:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org