Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: uGa8VeuH+9zoKFJ9PqPCu2ySGaWUIVYNvKALha6WGqc=
Subject key identifier: A5:64:A2:98:15:F8:08:D0:11:60:42:8B:C9:A1:03:AF:59:15:9E:41
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4FAD49C7E393FECCBB70D55FDB964E88AAFDF749
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:49 +0000
ROA not before: Mon 26 Sep 2022 10:55:49 +0000
ROA not after: Mon 25 Sep 2023 11:00:49 +0000
asID: 59282
IP address blocks: 2400:d680:367::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ad:49:c7:e3:93:fe:cc:bb:70:d5:5f:db:96:4e:88:aa:fd:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:49 2022 GMT
Not After : Sep 25 11:00:49 2023 GMT
Subject: CN=A564A29815F808D01160428BC9A103AF59159E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:18:09:55:ff:e9:f6:3f:5c:59:28:38:7f:
44:7f:4f:52:ff:95:26:0b:1e:8b:8d:12:8b:2f:62:
97:a8:6b:53:53:2c:45:fe:ca:92:87:35:72:d6:cd:
3c:28:72:4c:fb:ae:f0:ee:f8:e6:4a:84:49:c0:0a:
47:48:ef:a5:b3:65:f1:45:1c:cf:9e:d9:07:16:99:
af:6c:2e:87:c8:63:f5:14:67:39:d9:cb:17:18:e1:
83:1c:0f:30:67:ae:75:86:c0:4a:36:28:a2:0b:86:
85:24:cc:9c:bd:6c:97:66:0a:a6:a2:a4:53:07:7a:
41:06:9d:36:90:3b:08:5f:91:14:ba:28:06:02:85:
46:f2:d3:d9:42:1c:d2:ae:20:12:0d:03:5c:aa:d2:
dc:65:60:4d:96:e4:58:3a:bc:b5:e3:a6:64:1b:33:
d4:d2:6e:c8:23:51:44:24:cf:54:28:48:b7:35:25:
ed:2b:21:fd:51:47:52:e0:a1:8c:14:bb:f3:4a:0c:
4f:07:95:a2:67:ee:8a:f7:6d:89:39:a4:6c:26:78:
56:d7:60:ea:8b:a0:32:0d:0a:65:f8:f6:79:70:ff:
f9:0c:45:83:98:cf:4e:d8:c4:34:4f:16:7e:8a:96:
0e:98:8f:dd:bb:ce:6c:3e:dd:4e:06:ca:b0:65:fc:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:64:A2:98:15:F8:08:D0:11:60:42:8B:C9:A1:03:AF:59:15:9E:41
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:367::/48
Signature Algorithm: sha256WithRSAEncryption
61:46:8b:94:ad:c2:89:07:f1:94:b2:28:c1:fa:2e:a2:53:65:
67:a2:04:80:b5:29:2b:b6:6a:a2:af:a4:0b:c0:e0:e4:f9:f7:
71:b9:f4:64:73:62:2b:2d:9d:36:55:1f:0d:c9:f0:6c:b3:3b:
23:f5:22:70:ec:6b:93:41:d1:0b:77:84:29:3d:ff:75:ef:a8:
b6:fa:9e:be:75:7e:57:9a:68:af:07:b7:86:c2:1f:5c:1d:c9:
c4:41:34:be:69:95:30:0e:a0:0a:86:fb:92:16:6a:9d:f0:c4:
4d:87:63:23:9a:ca:58:39:a1:b7:6c:5c:b5:7b:16:73:85:f1:
88:c4:39:6b:10:76:81:b9:1c:4a:a3:b1:e2:af:37:ff:9f:6b:
b0:32:e7:28:c7:00:bc:48:c2:4b:a6:2f:5e:fe:09:a4:a8:97:
4e:16:ac:7f:9b:57:77:4c:89:20:22:51:66:52:26:92:b2:d4:
9f:a9:db:6d:59:41:d3:fc:9e:19:c6:35:80:72:03:bc:f8:46:
27:c3:37:b1:ec:9f:70:f6:60:28:be:6d:51:77:0e:9b:5d:bb:
ed:13:0d:ee:67:e0:0c:91:bc:77:37:e0:35:55:57:d6:49:e5:
5d:f4:39:93:00:6f:65:84:12:76:18:89:4f:00:23:6a:5b:be:
2c:8e:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org