Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Y8Db9QgKz+Zw2pGWPes84bWb8SKL412+eZzM/4utGs8=
Subject key identifier: 83:F9:0F:72:03:40:1E:33:42:94:07:30:AC:91:4C:1E:D4:94:60:2E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 53CE9C544680755D9D060DC91C2537A5D63D18CE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:39 +0000
ROA not before: Mon 26 Sep 2022 10:55:39 +0000
ROA not after: Mon 25 Sep 2023 11:00:39 +0000
asID: 59282
IP address blocks: 2400:d680:37b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ce:9c:54:46:80:75:5d:9d:06:0d:c9:1c:25:37:a5:d6:3d:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:39 2022 GMT
Not After : Sep 25 11:00:39 2023 GMT
Subject: CN=83F90F7203401E3342940730AC914C1ED494602E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:5f:65:a6:02:e3:20:07:1a:89:6c:c1:25:
f8:6c:30:3d:f6:e5:a2:d2:c8:dd:a4:a5:7f:b9:7d:
86:4f:0b:30:8e:11:b6:a0:37:ab:3f:e5:78:b3:05:
5d:ab:d9:69:90:9d:b4:eb:46:03:79:04:38:ab:62:
70:08:00:2f:c9:f7:4c:34:a1:81:86:05:f8:d3:ab:
5d:19:d6:39:c0:98:94:28:f4:bd:a6:2b:5a:f6:02:
07:49:87:3f:e7:64:17:9c:1a:dc:c4:cc:26:ce:ed:
49:19:4f:f7:bb:8b:31:19:e9:b9:0d:ec:8a:a1:c1:
55:bb:a9:1a:6b:46:30:80:6f:02:98:b9:38:7f:fe:
89:11:c1:02:31:bb:dd:49:f0:c6:3d:c4:83:6a:55:
25:7d:4b:00:43:62:c8:54:35:4d:1c:cd:0a:b9:94:
5c:86:88:6d:9d:b2:61:a0:b6:48:29:8d:f4:2a:72:
71:27:c1:d2:f4:1f:af:dd:dc:f7:e5:42:88:9f:33:
e1:79:75:01:01:51:01:d1:52:9e:cd:13:e2:a1:5a:
ef:ff:61:74:87:16:bb:c8:92:f4:5f:05:54:68:1e:
58:00:ea:b1:44:93:a0:ae:f3:8b:84:cb:e0:34:bc:
ae:25:5f:47:06:e2:4b:d6:3e:27:f0:b0:f3:f5:16:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:0F:72:03:40:1E:33:42:94:07:30:AC:91:4C:1E:D4:94:60:2E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:37b::/48
Signature Algorithm: sha256WithRSAEncryption
6e:d2:f3:2b:8f:18:af:c5:28:a2:27:1c:d5:d4:6f:cb:06:d8:
5a:41:b0:2f:78:c7:10:11:fa:46:5f:1b:e2:23:c2:bc:e7:dd:
38:71:3f:a0:d3:9c:5e:36:d8:ca:fa:15:27:f4:d1:c6:1e:75:
91:c1:f2:fc:2c:2d:a6:65:c2:2c:5c:a8:b5:a0:d6:5a:53:86:
93:b7:23:dd:64:c0:b4:da:7a:d1:03:24:e7:a2:13:de:e4:ed:
33:23:6b:b1:00:5c:ea:d4:57:99:65:6b:2b:21:b0:f0:91:b4:
50:eb:67:ac:9d:42:79:71:9b:83:5e:4c:c4:38:e6:b6:5b:26:
66:22:c7:63:e7:1c:0f:b3:7c:86:3d:53:11:6d:46:84:93:37:
54:de:2b:f7:98:0c:43:f0:8c:f2:b1:8f:3b:b6:63:76:0c:1c:
36:82:f4:30:af:f8:4b:ad:8a:d7:27:8f:c6:78:51:69:17:ee:
95:82:37:30:cb:cc:92:4e:87:fa:a6:eb:ed:9f:6e:3b:ed:2e:
85:c3:61:9c:15:6c:83:ef:33:21:5a:57:28:b4:c5:54:3d:92:
09:e6:6c:12:26:84:a8:a8:d5:69:92:eb:5c:4c:99:4d:b6:6e:
fd:5c:d4:80:f4:aa:92:ef:de:02:92:38:2a:6a:00:94:45:3c:
80:9c:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:50 2025 by rpki-client