Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ppaXPSKAv6fL1Kgb9+2Hk9icrCVPlCXdt0flJXPhoxc=
Subject key identifier: 09:AD:79:14:89:33:1B:7B:2F:52:30:63:6C:1D:09:3A:72:47:D9:EC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6590D7350DD81096587181852E974184F9A21C5A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:38 +0000
ROA not before: Mon 26 Sep 2022 10:55:38 +0000
ROA not after: Mon 25 Sep 2023 11:00:38 +0000
asID: 59282
IP address blocks: 2400:d680:3c5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:90:d7:35:0d:d8:10:96:58:71:81:85:2e:97:41:84:f9:a2:1c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:38 2022 GMT
Not After : Sep 25 11:00:38 2023 GMT
Subject: CN=09AD791489331B7B2F5230636C1D093A7247D9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:0b:a7:bd:5d:13:8d:2a:74:2d:a9:9c:22:
4b:35:34:6d:5d:ff:1b:74:40:0b:e1:ba:03:b9:e8:
69:12:ed:6f:8e:5b:15:8d:c3:96:b2:3b:d9:2b:e9:
97:df:7c:d9:51:0b:04:b4:a4:41:c0:70:31:e5:4c:
9b:ed:f9:ee:4f:14:3c:d3:ea:e0:31:53:c5:75:37:
92:a8:e0:77:82:ab:5c:f2:70:6e:33:06:0d:b5:14:
a0:7c:da:13:54:d3:ce:5c:a1:c0:b3:96:7c:ec:5b:
c4:e3:18:08:58:55:3b:b1:e8:02:e1:82:b4:5a:88:
44:38:e7:bc:8e:5b:85:fc:31:1d:db:5a:b5:a5:ff:
01:7f:8e:1d:94:7c:26:b4:52:be:ef:49:8c:6f:3b:
89:f8:be:d1:16:5e:c1:83:3e:e8:df:18:48:b8:78:
9e:4a:0b:f3:9f:28:db:a7:88:21:1e:1d:d6:ad:02:
00:3f:36:1c:29:51:ec:3e:01:29:cf:ac:65:6e:41:
d8:92:c7:d4:81:5a:d7:aa:7d:f3:f6:d5:95:04:32:
ab:a6:fd:e4:a5:ec:7b:3f:c2:64:5a:eb:91:82:68:
38:6e:d5:95:0d:27:a7:1e:ec:21:db:d6:06:05:c9:
25:94:63:47:61:79:b7:2a:4c:aa:0f:88:fc:b8:f7:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:79:14:89:33:1B:7B:2F:52:30:63:6C:1D:09:3A:72:47:D9:EC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c5::/48
Signature Algorithm: sha256WithRSAEncryption
cb:5e:73:f4:55:d4:57:be:07:e2:02:a7:76:1c:34:bc:1f:22:
a1:8c:92:a1:60:cd:a3:f7:44:1a:02:ea:68:cf:54:94:58:b3:
d1:44:a3:ca:9d:e8:d4:85:fc:dd:4c:63:c1:27:0f:fd:b8:69:
ca:96:72:0c:55:3e:be:cb:e0:33:31:62:d2:c9:88:6e:47:81:
ac:00:24:a7:91:7c:48:9e:43:46:b1:2f:d1:4c:0e:1f:7f:37:
7d:d2:17:04:ab:35:0d:de:40:0e:97:08:0a:2b:09:b3:42:ff:
23:5b:64:11:7d:a5:b5:c6:67:78:19:77:1a:73:99:59:c3:1d:
ce:56:dc:df:60:8a:c4:d3:53:34:7f:de:a1:49:0c:a7:1d:25:
fc:7e:04:1b:e4:c3:9f:d2:2f:8a:88:98:fb:33:52:52:b5:43:
29:cc:1f:a5:39:44:99:5a:17:86:5f:11:fa:a7:47:de:21:f6:
99:7d:e8:7f:d6:d3:f2:6a:a5:6a:6b:e5:13:a3:74:da:b2:fb:
40:df:67:b3:de:42:a3:3e:c4:a5:c5:07:16:a2:80:42:a7:b6:
00:04:10:39:f5:92:24:12:94:35:19:bc:e4:82:19:14:5f:a2:
9c:1c:46:5d:f6:68:51:bf:d5:c2:b8:3c:c4:6a:32:1e:98:c7:
2e:5e:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org