Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: cYE32ivF3sm9bK5vT4QF1Mqjmkpbaea0FeTSMlnjGeI=
Subject key identifier: 22:DA:8D:53:AD:83:58:B0:B8:EA:1A:EC:B4:A4:F4:BC:5F:17:87:87
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 23A04426E79ABF55685FCA9C66881F47714A9EE8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:44 +0000
ROA not before: Mon 26 Sep 2022 10:55:44 +0000
ROA not after: Mon 25 Sep 2023 11:00:44 +0000
asID: 59282
IP address blocks: 2400:d680:363::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a0:44:26:e7:9a:bf:55:68:5f:ca:9c:66:88:1f:47:71:4a:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:44 2022 GMT
Not After : Sep 25 11:00:44 2023 GMT
Subject: CN=22DA8D53AD8358B0B8EA1AECB4A4F4BC5F178787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:17:08:d0:4c:75:0d:56:74:9e:64:3b:f1:
79:c8:09:f5:7c:e5:ee:64:ba:71:cf:40:74:df:5d:
cc:06:cb:f3:e5:88:8e:67:53:32:bb:90:77:1c:e0:
af:45:7e:af:c8:09:0f:32:48:99:2c:e4:58:d9:23:
d7:c1:b9:96:9b:66:7a:41:56:09:3b:6f:37:d0:58:
b7:93:98:34:18:d5:0f:78:c3:fc:e6:3d:ef:cd:78:
cf:2c:35:d2:88:61:66:a3:95:6f:60:03:42:2b:6c:
b6:52:ca:e6:80:1b:79:7c:3b:1e:65:8c:0c:ea:31:
ac:1f:c7:b7:b0:4e:42:22:e1:f1:38:d7:be:8b:81:
48:96:73:a6:66:99:16:e8:ee:00:88:87:53:4e:58:
71:8d:08:64:81:74:99:58:fb:36:50:a3:c4:dd:21:
ec:38:a1:b8:3e:95:4d:a9:9b:25:c2:5b:33:69:e7:
e7:a2:95:f1:d3:cb:98:3c:5a:a1:0d:5e:78:c5:21:
26:60:bb:2e:1a:dd:45:a5:23:08:b9:66:1a:b9:20:
b3:56:29:50:35:7f:e4:6f:dc:c3:4f:39:9d:b7:9c:
e1:f8:2a:09:d3:6d:78:3d:db:51:72:f0:82:49:28:
8d:b0:5e:ab:92:43:11:d4:bd:a9:bd:8d:7e:98:f9:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:8D:53:AD:83:58:B0:B8:EA:1A:EC:B4:A4:F4:BC:5F:17:87:87
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:363::/48
Signature Algorithm: sha256WithRSAEncryption
d1:11:42:da:37:5f:25:e9:ca:e2:c3:f3:39:bf:41:45:e8:1d:
fd:1c:1a:ca:02:cf:78:b1:3f:ea:a5:dd:7f:aa:a8:34:a0:da:
54:38:69:a1:71:1c:d6:c7:25:e5:c9:ef:f9:34:20:f2:3f:c7:
84:84:a1:29:d2:6f:2e:cc:5a:49:91:1a:86:0e:f3:9a:28:7c:
e1:f6:89:08:24:07:ae:12:86:13:26:80:64:f8:ae:e3:56:8a:
2a:05:1f:bd:f4:8e:fb:37:15:0a:47:21:4b:ec:c4:0f:df:05:
45:01:eb:65:ba:0f:14:8f:d2:29:a9:9c:c0:c4:e5:66:50:34:
41:d8:9d:ec:0e:4e:c5:f5:a7:e2:5d:9c:c9:41:04:c5:1b:cc:
63:32:93:a6:a5:5e:4c:be:ab:0e:fc:1f:33:6d:26:55:04:89:
e1:0d:3c:7b:1b:65:59:ef:d5:43:94:0e:ea:a4:10:d4:6d:7b:
9d:5c:76:5b:c5:ea:86:aa:f0:7f:ca:6f:77:8b:b1:f3:64:3b:
3d:69:54:bd:0a:cc:b5:31:6d:24:32:c1:0c:09:2c:29:cd:3e:
10:4c:64:7f:56:60:aa:4b:e2:fa:98:60:35:e3:fa:0b:44:4a:
7e:6c:d5:54:03:a0:c5:a6:ee:79:a9:b6:07:d7:13:b7:d8:93:
37:c2:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org