Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: j0l7DIgy+ab1kgP9JhGBIj1xPx8kKPy/k20+U2RrBSU=
Subject key identifier: 8D:2B:D5:03:05:93:2D:B9:2F:07:5A:75:50:16:B2:30:5F:D3:8F:02
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5D201AD3EE74ADDFC6EE928DC4E6B69D91B5AB51
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:24 +0000
ROA not before: Mon 26 Sep 2022 10:55:24 +0000
ROA not after: Mon 25 Sep 2023 11:00:24 +0000
asID: 59282
IP address blocks: 2400:d680:379::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:20:1a:d3:ee:74:ad:df:c6:ee:92:8d:c4:e6:b6:9d:91:b5:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:24 2022 GMT
Not After : Sep 25 11:00:24 2023 GMT
Subject: CN=8D2BD50305932DB92F075A755016B2305FD38F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:0f:28:0e:c3:15:90:81:54:eb:85:e2:44:
2f:67:90:5a:02:0d:e3:51:94:4c:24:d6:b5:bb:ec:
37:f4:31:01:49:ab:3e:67:6c:52:5e:36:2a:3b:9d:
c7:94:e8:44:29:f8:69:ae:40:8e:02:fc:ab:c9:89:
46:4c:6f:98:6f:f7:7d:45:c8:9b:2a:a4:a6:36:e8:
02:1d:04:5e:49:42:f4:b3:26:6a:2e:75:20:69:90:
3f:53:c1:ff:19:b3:58:8a:79:83:cf:7c:e4:32:82:
c5:22:7b:c4:b9:1a:21:6d:af:17:4b:61:d9:bc:06:
4d:3a:d3:c0:df:87:89:94:72:7f:8f:62:36:cf:2b:
72:cf:18:3d:b4:fe:ee:92:fe:19:24:f3:29:b6:44:
ca:05:1b:d6:ba:4d:6c:e7:04:ff:74:17:38:0f:d5:
5b:df:55:7d:e0:f6:7f:6e:fd:78:ec:bd:80:fb:cb:
8d:f0:29:2b:d3:ea:f1:f3:96:19:4d:1f:5b:22:49:
bd:7d:60:07:7d:c9:72:03:ad:d4:b0:ed:59:d7:44:
92:db:57:61:33:0f:d8:ea:bc:6f:cd:84:b0:0b:65:
93:8a:56:03:f0:ec:cc:a7:6b:45:ba:f1:06:59:6d:
d0:29:ea:ae:2f:6b:2a:cc:0a:2d:2a:77:bc:08:51:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:D5:03:05:93:2D:B9:2F:07:5A:75:50:16:B2:30:5F:D3:8F:02
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:379::/48
Signature Algorithm: sha256WithRSAEncryption
1a:b5:c3:12:f0:c1:d3:69:5e:c9:77:e1:5a:af:ab:21:5b:c3:
b9:74:d6:6b:ca:99:58:c5:c4:9b:a2:d1:c3:bf:e5:f1:ac:bd:
6a:f2:be:81:61:82:5a:26:00:0b:b9:87:0b:3b:a3:a0:02:fe:
8d:1d:f8:18:39:12:4d:0b:0e:59:a8:d4:60:ed:6f:57:6b:f2:
af:1a:49:c1:c6:1c:2f:0d:19:a1:e5:50:4c:60:a3:72:e7:2a:
dd:9a:34:22:95:b7:5a:de:50:c9:49:e8:34:15:46:0a:dc:7f:
89:30:4a:4e:49:3c:44:94:f7:5b:fa:f9:48:db:0a:ed:9b:06:
78:22:ee:45:b6:b0:5e:e8:6e:90:b5:85:e8:90:e1:b5:9e:03:
b7:58:af:36:3b:57:ef:49:65:c0:7c:61:c9:27:ef:1b:e3:6c:
96:fd:1b:68:7e:11:ad:35:33:92:c6:18:bd:c9:66:7e:29:ba:
1a:e5:1b:80:f0:cf:84:1f:3e:5e:f6:76:90:91:3c:89:38:ac:
41:ee:02:18:3a:6e:26:7e:44:87:72:60:b1:9f:f3:22:a0:a9:
cc:bc:7a:f4:7e:c2:cf:de:fa:4b:74:82:44:f8:aa:2c:b3:dc:
ee:db:0d:4b:40:dd:ba:26:db:fd:2e:66:1b:64:8d:ad:21:bd:
b4:a6:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org