Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: liuXv7DsivzHONhoQ8CIh+sW2PLOtPrGRZu75pZhwsA=
Subject key identifier: 05:8F:4F:99:9A:9E:47:FA:F5:0B:D5:49:A5:72:EA:97:20:FE:4C:6E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 22CC9C42C2F176705DF46D9F4AFD13090167E974
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:49 +0000
ROA not before: Mon 26 Sep 2022 10:55:49 +0000
ROA not after: Mon 25 Sep 2023 11:00:49 +0000
asID: 59282
IP address blocks: 2400:d680:35e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cc:9c:42:c2:f1:76:70:5d:f4:6d:9f:4a:fd:13:09:01:67:e9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:49 2022 GMT
Not After : Sep 25 11:00:49 2023 GMT
Subject: CN=058F4F999A9E47FAF50BD549A572EA9720FE4C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:9f:7c:32:a4:9e:5c:10:34:80:cf:c2:14:
d9:ed:0e:5f:e5:d6:32:f4:c1:3a:58:f9:3c:44:d6:
d6:cf:ad:96:da:9d:5b:3f:a9:69:92:7a:af:ec:70:
fc:2c:a2:24:01:42:61:5e:82:05:60:3b:99:c9:eb:
67:c6:b5:1e:dd:6d:67:26:82:33:88:6e:0d:01:b2:
ec:4c:54:40:f5:cb:d6:e6:57:d7:5a:e6:0a:10:32:
98:62:aa:9a:67:ca:e5:f4:78:9d:e4:fd:4e:dc:fc:
8f:ff:ab:0b:22:fd:db:be:2d:5d:4a:4b:48:10:68:
dc:b5:68:be:d5:8d:5b:e0:6e:ab:84:51:d1:5d:43:
dd:02:7e:78:d6:af:dd:a8:2b:82:2e:a3:f0:5b:cb:
b1:48:fa:e6:9d:32:a4:37:ca:be:42:75:d0:f9:71:
0c:6f:40:ce:cf:73:42:89:f1:ff:f4:96:96:84:60:
5f:45:b5:bb:48:37:2c:79:59:51:d7:9e:10:bd:6c:
90:b5:6b:fb:b7:9f:f9:99:45:d8:6b:63:80:1a:22:
77:11:e8:68:79:42:11:1f:2e:e6:0e:84:c9:14:96:
ee:8e:4f:f7:a7:ed:df:07:4e:bd:62:dc:71:b5:90:
a2:f1:b6:7d:65:fe:f4:be:84:a0:4c:61:52:68:62:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8F:4F:99:9A:9E:47:FA:F5:0B:D5:49:A5:72:EA:97:20:FE:4C:6E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:35e::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ab:70:95:11:93:59:88:c3:7a:a0:5d:75:fa:32:6b:94:73:
59:db:31:48:9f:9e:5d:72:e0:71:dd:bd:7f:f3:e0:00:74:29:
5f:e7:0d:a6:47:75:7f:21:23:6a:c4:a2:ce:c9:8a:7d:d7:48:
9e:d5:69:6c:4e:5b:2e:5e:e9:75:49:d9:f8:96:be:65:21:cc:
06:9b:8c:35:0c:dc:4d:e8:a5:7f:32:4d:d5:23:16:66:9a:dc:
c5:08:df:4f:c7:ff:68:af:3a:4c:a2:15:54:be:f5:ef:31:5c:
4c:c1:d3:1c:22:e8:2a:e5:c3:45:d8:32:57:95:de:1d:ce:13:
71:ad:28:a8:b6:fa:d4:49:7b:b8:99:fb:b6:e6:66:42:15:87:
b6:80:5f:1d:d0:3b:65:66:91:c7:4a:be:82:12:27:26:5b:df:
f6:fc:ca:9a:01:07:36:87:e5:d3:94:b6:ef:c2:f1:24:85:cb:
56:06:fa:12:fc:21:49:f4:db:4e:50:8b:9d:20:aa:7f:b5:85:
77:a7:2f:2d:67:ed:43:17:d8:e0:a7:be:c3:d1:19:47:a2:69:
a7:39:b6:63:83:36:34:55:22:74:24:34:de:d4:02:e7:de:f5:
ef:3f:68:3d:96:4a:ff:91:1f:39:fe:17:fc:ad:48:37:0f:52:
94:0f:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org