Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3361373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +t3lvVCj0ExiyMRNUSonFm1tOaP6+V6dPgNwTlxJDVk=
Subject key identifier: 53:7F:61:C2:A1:D2:C9:40:B6:86:73:94:5E:E6:EB:ED:86:19:4D:0D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 022AA1B050FE7473F82886969A33C369A6DFE0ED
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:25 +0000
ROA not before: Mon 26 Sep 2022 10:55:25 +0000
ROA not after: Mon 25 Sep 2023 11:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:3a7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2a:a1:b0:50:fe:74:73:f8:28:86:96:9a:33:c3:69:a6:df:e0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:25 2022 GMT
Not After : Sep 25 11:00:25 2023 GMT
Subject: CN=537F61C2A1D2C940B68673945EE6EBED86194D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:54:ff:c8:a8:1d:96:c9:65:b0:27:68:86:
2b:25:5a:66:68:c8:f7:7e:8c:77:53:c6:0c:0f:6e:
54:cd:94:7a:44:2a:04:ae:cb:2e:66:38:66:9e:d0:
76:61:b3:a3:98:46:4e:95:ec:d7:90:2b:48:f3:d1:
95:8b:e7:30:a7:d7:8b:28:a4:73:6c:73:cc:a3:25:
d3:d9:22:10:0e:2e:87:6d:32:bc:9e:5a:ec:ba:8e:
1f:97:5e:80:90:6d:7a:9d:63:a3:44:32:0a:f5:16:
bd:a5:36:ab:0f:2c:1b:e6:c8:66:39:17:f1:a8:b0:
07:59:e8:fd:d3:2c:a8:13:bd:84:be:ae:fd:37:3d:
85:37:d5:58:6e:38:78:34:b0:12:45:d6:8b:1e:0c:
34:8c:75:42:d3:f9:5c:e4:58:ac:68:78:1f:75:4c:
8a:34:11:0d:e4:9d:ee:56:5c:50:21:98:8f:21:57:
d4:5b:0e:17:bb:c3:f1:5f:7a:8f:da:e9:20:63:31:
05:23:b4:c1:07:09:a4:3d:4f:88:2c:f0:6e:f1:bb:
9c:96:31:0f:a4:c2:27:1e:20:ae:0e:56:43:3d:3a:
92:5e:46:26:1c:82:44:8e:bb:1f:40:dd:22:f8:38:
07:de:54:8b:09:c3:cf:d6:33:a1:b0:ca:89:05:2e:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:61:C2:A1:D2:C9:40:B6:86:73:94:5E:E6:EB:ED:86:19:4D:0D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3a7::/48
Signature Algorithm: sha256WithRSAEncryption
8c:42:81:6b:4b:56:a9:0f:66:e3:d6:8a:cc:9c:6c:b2:fd:ae:
9d:06:12:16:33:9c:38:25:4f:d4:5d:e9:30:bc:53:60:a0:35:
8e:3b:d8:c9:e7:ea:88:6b:3d:ac:bd:de:2a:e2:26:40:86:f9:
92:c7:1f:e3:c1:22:78:31:09:b4:1e:0b:e5:d0:89:a4:fb:8e:
22:8b:49:da:97:26:ce:78:34:05:59:74:08:04:8a:88:d3:f3:
a0:4f:e8:ac:d2:c9:fc:1e:39:ac:60:bb:24:02:e7:61:18:1b:
d3:36:78:c7:4b:d1:f1:67:91:7d:ad:d7:a0:9b:2d:45:03:0a:
82:16:27:50:5d:85:23:64:b8:32:65:31:d7:95:f0:7c:6e:93:
13:65:63:30:cb:c8:cd:67:72:3b:c5:7e:00:b3:9c:8f:30:72:
fa:40:54:af:9b:84:3c:9c:a3:cc:4b:02:55:d8:8d:6e:d0:a4:
e7:03:75:48:c4:ec:5f:a9:44:e1:b5:3f:2f:15:41:17:37:d0:
dd:d4:dc:01:99:34:e6:22:b0:27:67:90:fb:f0:cd:77:1d:bb:
83:f2:d5:3b:62:61:cc:14:49:bc:40:ee:c7:5b:25:7d:96:f3:
3e:c6:d1:d0:c2:7c:30:42:3b:da:e9:ef:30:5b:ac:7c:c4:2f:
f4:26:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org