Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Y9kZTgUGasPVrs/5+jcDTQVEZXmSMqVmpP5/O2F6FXA=
Subject key identifier: E5:DA:4B:65:90:FD:B7:30:26:F7:AC:04:A3:CE:00:BB:D8:E3:DB:A7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 435CD4E855029719A4114CF518B125A5614FBECC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:25 +0000
ROA not before: Mon 26 Sep 2022 10:55:25 +0000
ROA not after: Mon 25 Sep 2023 11:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:347::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5c:d4:e8:55:02:97:19:a4:11:4c:f5:18:b1:25:a5:61:4f:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:25 2022 GMT
Not After : Sep 25 11:00:25 2023 GMT
Subject: CN=E5DA4B6590FDB73026F7AC04A3CE00BBD8E3DBA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:d7:40:4a:54:a9:ad:53:59:a4:31:0c:6d:
01:b4:88:c4:97:f8:a3:4f:ad:68:42:d3:1f:fb:23:
55:1a:8f:7c:67:6f:7b:35:21:41:ab:32:da:e2:52:
87:c3:ad:47:a2:84:1e:20:70:3d:90:79:85:23:27:
d7:ba:9b:9c:39:23:69:d3:6c:eb:35:26:f3:e1:51:
b1:92:71:70:d4:2a:44:42:1f:74:ee:b8:88:f6:34:
79:e9:4d:44:be:d0:11:94:38:4e:bc:87:fd:b6:bf:
92:7b:dc:4b:1e:00:28:0a:fb:9b:2c:1a:15:4d:d9:
c7:f2:58:56:63:3d:7a:9d:8a:f2:5d:0c:b5:1b:ec:
ae:f3:83:bc:eb:65:a1:25:8e:af:dc:3f:ce:b9:20:
f2:5b:fa:4b:66:bf:bc:d4:d8:b7:fd:05:dc:0a:ec:
55:6f:34:84:63:41:3b:3c:10:b7:c7:3a:43:49:fc:
c0:5b:4d:64:0d:ed:1d:eb:f5:06:cf:d9:67:17:fd:
92:3a:00:32:29:c9:27:3e:7e:84:64:f5:0b:68:d2:
b9:ba:81:04:e4:18:ab:91:07:ef:e3:bb:db:6f:60:
59:d9:55:cf:f9:14:82:df:33:51:f3:82:29:67:f8:
5c:07:a9:67:46:7c:85:30:df:ef:c7:2d:a7:59:66:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:4B:65:90:FD:B7:30:26:F7:AC:04:A3:CE:00:BB:D8:E3:DB:A7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:347::/48
Signature Algorithm: sha256WithRSAEncryption
b5:c7:3f:a4:90:f2:ff:b1:3d:5a:78:8b:cf:c7:bc:dd:1f:61:
fd:57:94:ae:09:19:dc:fc:21:b0:23:1a:e6:42:60:f5:53:61:
2b:6c:e9:ad:bc:96:db:aa:57:a9:01:7d:0d:ac:c2:ff:86:22:
44:de:4b:88:e8:ca:30:74:48:74:dc:bd:86:8d:73:df:e4:d8:
03:ac:cc:bb:e3:b9:d4:b2:bb:75:1c:7e:3b:b3:b7:c1:7a:84:
d5:fc:85:51:5b:d0:10:d7:63:d9:47:5d:2b:c8:cc:ca:ca:3c:
65:0d:83:9c:52:26:2d:af:5e:0f:9a:0c:d1:6a:e8:d1:1b:f1:
96:8b:8c:ee:2a:d9:6b:5d:b3:8e:ea:93:18:9d:40:cc:ed:74:
45:63:5e:ca:40:01:bc:74:dd:89:c5:1a:b3:aa:73:73:a0:2c:
87:d2:29:17:69:73:a7:21:25:8e:40:09:a2:1f:d9:bd:b8:fc:
98:6d:d8:2f:f4:de:e6:0a:e2:74:28:18:4f:06:ec:76:f6:32:
89:2b:a2:7f:b9:18:e2:44:22:2c:54:3d:a4:c8:ba:ce:e1:c2:
c6:01:2d:75:81:9b:23:2e:42:1b:b4:95:3c:62:49:52:40:90:
9d:2c:be:37:b3:27:49:83:9e:4f:40:09:ca:5a:bf:3e:aa:0a:
09:f6:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org