Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3362623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Uyy6oLSGvDEaF5kF0jfzYYA9/fvMi6rRp+hXSGrL8yY=
Subject key identifier: 8A:4B:97:BC:28:22:80:28:A0:7D:6D:50:FE:D7:D6:EF:20:8B:C0:E7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 33E6DCF1DE47AE24B6E980F70A0FA3B9EC6A36A3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:40 +0000
ROA not before: Mon 26 Sep 2022 10:55:40 +0000
ROA not after: Mon 25 Sep 2023 11:00:40 +0000
asID: 59282
IP address blocks: 2400:d680:3bb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e6:dc:f1:de:47:ae:24:b6:e9:80:f7:0a:0f:a3:b9:ec:6a:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:40 2022 GMT
Not After : Sep 25 11:00:40 2023 GMT
Subject: CN=8A4B97BC28228028A07D6D50FED7D6EF208BC0E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:c4:ef:69:32:67:93:ca:91:6f:77:d9:09:
20:aa:c0:8e:86:ea:5e:52:45:c4:f7:ff:c1:01:42:
55:87:1c:98:0a:5c:78:a4:6f:c0:75:ef:49:6a:5f:
82:88:dd:16:16:3f:64:7b:d7:9b:d3:10:54:34:ca:
f2:b6:a0:00:0d:80:db:ae:b8:1e:59:e0:ea:eb:52:
67:f7:ef:c0:a5:ef:c2:bc:a9:8e:04:71:fe:71:93:
29:85:6b:23:f5:45:b0:57:a3:97:f6:35:a1:7b:7e:
6e:01:26:be:46:5c:a3:71:f8:45:7a:c5:a2:6d:b6:
28:f1:0f:48:9d:7f:3c:b2:07:9d:08:4b:52:14:da:
c8:44:8d:f8:c4:b9:17:55:6f:f1:f6:58:1d:9d:bb:
f1:52:bf:ae:c3:95:53:f7:01:9a:9b:cd:0e:c8:b1:
08:1e:d2:7e:c7:90:9d:67:5b:d4:27:90:57:a2:43:
00:4e:ad:56:ac:12:a7:77:e1:a0:1b:fb:0a:f4:a3:
35:ee:72:f2:22:72:a2:6b:05:67:1f:c9:3a:fb:ac:
b7:80:1d:ba:36:20:29:d0:b3:fa:97:24:6a:54:28:
ff:2f:00:15:ff:1b:18:0c:f2:26:0a:08:ca:bd:e5:
71:b2:4b:dd:bd:63:cd:2e:bb:63:c9:bb:25:f0:12:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4B:97:BC:28:22:80:28:A0:7D:6D:50:FE:D7:D6:EF:20:8B:C0:E7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3bb::/48
Signature Algorithm: sha256WithRSAEncryption
6d:19:d6:31:b3:b0:df:3f:21:16:ad:05:fe:73:48:f3:d9:8a:
5b:a8:1c:9a:16:9c:d1:72:c9:a8:71:7d:7e:7d:c5:8e:d9:9e:
be:1a:3e:ef:35:d0:ca:9b:9f:8d:fe:04:41:19:b0:fb:2b:e2:
2a:8e:c2:ec:10:28:4f:3e:6e:7e:f8:1c:fe:62:8d:e8:d5:cb:
73:4d:5b:df:12:18:27:3a:25:0b:7e:c3:a9:57:32:31:8c:7e:
4e:8e:54:aa:c6:8b:20:74:87:28:c0:0b:25:13:bc:ef:27:5d:
49:94:af:c1:01:50:b6:08:d8:3d:62:57:35:1a:c9:fd:1e:3c:
85:ce:ca:8d:99:f9:b6:17:e1:7b:c2:d9:24:bf:41:1a:9a:c0:
35:0e:9a:59:fa:46:f2:9d:93:1a:57:f3:d6:5e:d8:b6:13:09:
35:3b:0c:dc:86:72:6b:c4:74:70:43:70:82:4a:1b:a1:2c:06:
4c:a1:4a:a5:86:f7:7d:22:94:16:35:15:61:b5:3f:57:d7:a8:
18:3a:64:01:c5:60:34:5c:09:6b:a1:8f:3d:7e:2a:6c:aa:06:
e8:b9:07:80:a3:e4:63:ac:d1:e4:06:c6:f8:bc:87:20:ef:45:
47:8d:d5:c1:9a:85:3f:2c:c0:db:8d:ed:fc:75:72:dc:11:56:
0e:94:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org