Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: wgK3ssTo9FtXfYTm5IPwymCFxePzxiC6N6tlF/s05KE=
Subject key identifier: 1A:D8:9C:DC:92:EC:1E:0F:49:8F:69:9F:D3:B2:3F:62:F6:DA:C1:C5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 717D0EE5B7B353BB47AE2D5D8148A8DF1CA4CB43
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:36 +0000
ROA not before: Mon 26 Sep 2022 10:55:36 +0000
ROA not after: Mon 25 Sep 2023 11:00:36 +0000
asID: 59282
IP address blocks: 2400:d680:34f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:7d:0e:e5:b7:b3:53:bb:47:ae:2d:5d:81:48:a8:df:1c:a4:cb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:36 2022 GMT
Not After : Sep 25 11:00:36 2023 GMT
Subject: CN=1AD89CDC92EC1E0F498F699FD3B23F62F6DAC1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:1a:28:f3:91:00:e6:28:45:b7:3a:a5:2b:
86:3b:71:34:1a:6c:c5:1f:4d:61:18:e4:a1:c3:bd:
3d:c5:47:0c:5b:ae:16:4c:c8:f9:64:ec:d0:6b:5f:
c6:5c:89:f1:a7:33:21:73:38:ff:ac:9a:29:31:d4:
b3:2d:08:80:1f:1f:17:de:09:ec:1c:0c:32:96:43:
21:0c:d8:2b:66:aa:3a:59:14:07:3c:92:f2:f5:ab:
71:07:b9:55:71:f8:f4:5e:26:97:90:37:32:7e:a1:
2e:e2:43:d0:54:6c:50:e3:c5:2f:45:6b:b3:35:12:
38:95:10:b0:85:03:0e:70:a7:3a:c6:61:85:21:82:
bb:ed:d6:32:00:42:7c:79:c8:04:31:99:bd:32:b3:
0a:af:59:0c:45:dd:8b:e6:01:cc:d5:c8:e0:65:ac:
09:56:12:dd:93:09:f5:d5:77:f5:f1:c2:e2:21:e9:
9f:fe:b1:d3:8c:63:0a:41:4f:51:8c:c7:2b:6f:c5:
4b:ad:3d:9a:e4:be:36:86:9e:50:43:4e:a7:a3:f0:
e4:ac:93:7d:ae:37:9d:4e:36:77:39:20:1a:ec:21:
31:3e:5d:a1:7e:28:96:a5:a1:23:a5:e1:e4:81:06:
cf:75:2d:4b:2c:b8:1c:e7:79:b1:60:57:8c:76:49:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D8:9C:DC:92:EC:1E:0F:49:8F:69:9F:D3:B2:3F:62:F6:DA:C1:C5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:34f::/48
Signature Algorithm: sha256WithRSAEncryption
c8:10:7d:1e:2b:83:09:fa:e5:9a:2a:dd:a3:a8:54:60:68:80:
52:7b:a8:8f:3b:23:2e:da:59:2d:d2:6e:6c:85:64:dc:4b:ad:
18:08:f4:e8:51:47:7b:3c:75:ac:d4:1e:b5:11:21:a8:5c:8b:
46:b3:f0:87:2f:62:4e:1e:b2:2a:38:0f:99:17:c2:3a:ac:9f:
e8:a3:7f:7a:31:83:78:35:ba:10:be:7c:fb:af:d8:74:8b:fa:
a0:d6:f8:e2:7d:c9:a4:ce:89:ff:b6:17:a0:37:02:11:8c:ab:
be:8f:b5:67:29:3b:47:62:ae:db:f8:d6:b7:b7:85:f1:f1:67:
bb:3b:66:59:1f:dc:62:25:27:32:05:36:da:c9:3d:9f:8a:2c:
fc:f1:30:92:7b:cd:09:47:83:fa:07:a2:66:78:2a:c5:a2:df:
42:0e:c9:ee:b2:fd:e4:63:c0:f1:ea:21:8a:5e:c8:6c:1c:5f:
01:2f:8d:97:3d:a9:e6:8d:ba:73:20:be:14:b8:ad:1e:e2:ca:
c3:a3:55:a8:3d:b3:27:bf:c7:d5:e7:84:59:92:ac:84:12:49:
7c:d9:07:b0:46:1c:57:77:c4:a8:be:b7:36:94:a0:08:b3:55:
46:b1:62:89:41:5a:b0:60:73:a7:12:03:e7:1e:2c:db:a3:35:
ba:7a:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org