Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: iTOl+IcEhvqNQIHWr+mfRu1SdAd+1Go9h9rTv0v54Oo=
Subject key identifier: 69:00:CE:5D:E3:D0:24:11:BA:21:8B:8D:ED:AF:F0:7A:15:C3:FA:C7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78647549BA8BB9E92ACC436A823E92A25DE595DB
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:28 +0000
ROA not before: Mon 26 Sep 2022 10:55:28 +0000
ROA not after: Mon 25 Sep 2023 11:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:3c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:64:75:49:ba:8b:b9:e9:2a:cc:43:6a:82:3e:92:a2:5d:e5:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:28 2022 GMT
Not After : Sep 25 11:00:28 2023 GMT
Subject: CN=6900CE5DE3D02411BA218B8DEDAFF07A15C3FAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:4e:99:34:97:27:fc:09:84:14:22:34:f6:
20:f6:a3:ab:a6:83:89:5e:0c:3c:85:f5:bd:c5:74:
3f:5b:81:2c:57:91:25:9e:c4:35:bb:77:4e:b5:3a:
b0:bc:f3:3f:5b:7a:58:41:e3:12:88:94:23:84:9a:
e2:39:91:3f:aa:d9:77:19:36:3b:3c:f5:59:63:cc:
1b:aa:62:92:27:d7:da:0a:b9:a4:bd:f0:d4:f8:3c:
c5:01:c3:db:0c:81:5d:71:56:e3:8b:71:e8:2a:04:
2a:d5:20:37:41:59:81:57:77:da:5d:57:e3:ba:1e:
d2:47:c2:0e:98:fe:a1:92:11:67:42:67:5e:9e:a0:
9e:ae:00:6f:de:67:68:4c:0b:28:81:fc:c1:0c:13:
31:0f:83:f7:d1:e6:61:b4:4c:db:c9:38:5f:2f:38:
0a:27:72:1e:92:04:9a:ea:32:57:43:1f:79:21:aa:
cf:d0:cd:ef:e0:37:48:4e:dd:95:fe:6c:01:a7:33:
b1:bc:d2:af:33:58:59:e8:5b:e6:c6:0d:0d:de:7f:
54:3b:92:3b:8e:87:97:15:23:23:8c:9d:b4:38:49:
2e:46:78:65:93:66:98:f9:f4:3a:f8:82:4d:08:95:
79:bd:91:af:ad:a4:bb:16:fd:d9:35:cb:e1:f2:1b:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:CE:5D:E3:D0:24:11:BA:21:8B:8D:ED:AF:F0:7A:15:C3:FA:C7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:5a:3a:35:8c:9f:6a:ad:0f:2c:b1:81:e0:c1:22:d7:d1:87:
29:ac:6c:11:cd:c6:7a:2e:9c:56:02:a2:17:5a:40:f3:c1:96:
2d:d6:7c:8f:61:b7:39:2d:19:cb:f5:e3:82:02:3c:ae:7b:8d:
33:60:ed:11:b3:4b:65:59:ce:16:ba:76:1f:a8:f7:9e:9e:40:
7a:f4:75:8c:bb:e7:8d:5d:7c:54:a8:f9:09:3a:71:b2:00:38:
8f:cb:0a:b9:b7:e9:d4:e4:5c:ab:cf:6f:3f:1d:b4:e3:fb:fd:
a8:e5:f9:23:8c:2a:e4:6d:63:57:56:80:8a:ab:7c:52:bc:69:
2c:d7:38:02:6c:e8:cc:b7:34:76:b6:77:09:ce:60:a9:a1:69:
91:d1:35:1e:e2:c8:4f:b8:6b:aa:b5:d2:01:1e:f2:b8:54:72:
70:78:40:ee:f3:fa:0f:66:4e:a1:b1:14:bc:9c:5e:e8:30:12:
1d:a1:70:06:84:61:7d:d1:0f:f1:29:e0:4e:f0:c2:53:a9:2c:
ae:ee:61:31:fe:36:14:a5:dd:fe:6d:ce:da:bf:a4:49:88:10:
20:90:08:8b:88:e2:74:0f:55:54:33:62:d4:42:40:54:4e:2a:
b7:e9:a6:d8:d9:f6:be:66:43:bc:70:86:31:0d:3a:cb:4b:33:
f7:90:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org