Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3366653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: nTBFYG1qPC8JGdaoSsnYYiloBhl6K/khrJhYqbh7UhE=
Subject key identifier: BC:7D:60:6B:27:33:57:34:E6:71:38:BD:6E:57:15:D1:3E:5F:FB:E8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 64B98F61A5F93FD0C85BFF4B17FDD6572F25059A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:58 +0000
ROA not before: Mon 26 Sep 2022 07:56:58 +0000
ROA not after: Mon 25 Sep 2023 08:01:58 +0000
asID: 59282
IP address blocks: 2400:d680:3fe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b9:8f:61:a5:f9:3f:d0:c8:5b:ff:4b:17:fd:d6:57:2f:25:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:58 2022 GMT
Not After : Sep 25 08:01:58 2023 GMT
Subject: CN=BC7D606B27335734E67138BD6E5715D13E5FFBE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:8d:bb:94:85:ed:f2:b3:42:f2:21:a0:22:
a0:07:81:e0:30:59:2b:f3:1b:e9:2a:6e:38:c0:65:
23:4b:73:2b:7d:dd:4f:29:e2:44:95:2a:c9:54:a0:
05:92:3e:42:cf:4b:be:44:e7:48:b8:f3:8b:df:b3:
50:ed:09:ac:4b:93:83:fc:b7:58:8d:3b:06:c1:97:
7d:d0:e5:f8:80:85:e5:32:f8:d8:63:19:4b:a7:d3:
ed:80:fe:54:c4:d5:24:c7:94:03:65:6e:ba:8d:c1:
b9:8f:3d:a8:4c:8c:48:ca:c7:82:af:3b:d5:27:c6:
7b:f2:41:d0:09:ad:a5:00:a1:3a:3f:02:f5:1e:69:
d3:04:45:86:94:86:f2:37:a5:2e:eb:bb:bd:42:be:
5c:61:18:22:33:5b:fa:68:dd:98:09:2c:80:5f:95:
28:aa:a9:4f:a4:50:e0:a7:b2:91:c8:b8:0f:32:f4:
b5:7c:6c:3b:65:45:32:e7:0d:ee:ab:91:42:59:9e:
7c:33:95:d5:f5:ed:e4:72:e8:ac:90:0a:6c:dd:c9:
65:a7:57:d3:fe:08:5e:62:5d:a7:b8:83:01:a1:05:
87:51:1e:b1:dc:17:41:17:9e:da:be:b7:84:43:aa:
44:83:91:a4:20:59:b2:84:51:6e:b3:06:10:43:87:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:60:6B:27:33:57:34:E6:71:38:BD:6E:57:15:D1:3E:5F:FB:E8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3fe::/48
Signature Algorithm: sha256WithRSAEncryption
0d:22:bc:f3:25:19:48:84:53:45:56:a8:4b:be:6e:43:79:4b:
81:9e:22:83:c4:70:12:62:c9:8a:52:cd:df:0e:e6:4e:e9:01:
a7:52:84:af:99:b0:b0:e2:fd:06:93:64:b9:48:2b:f6:91:4c:
8e:47:ad:ac:80:8e:20:44:0a:ed:f9:b6:a3:30:c0:17:b8:47:
07:bb:76:ec:c2:1f:af:98:11:84:cd:4a:70:15:11:37:96:c1:
92:d6:a9:52:94:37:58:31:77:0a:a8:5d:b5:3c:51:a4:0b:71:
c6:a2:31:72:12:e0:cc:0c:b0:e8:7e:7d:49:aa:21:52:1b:00:
1e:dc:d3:01:c3:62:0d:7e:b2:8f:d8:a9:70:fb:18:b3:3f:fc:
b2:82:88:bb:df:30:df:84:a1:8e:ae:59:b8:f9:73:f6:8a:eb:
6b:5e:ff:67:cf:6e:a3:67:24:27:98:21:6a:51:f7:27:01:91:
2e:50:c4:36:8f:cb:28:ef:11:90:84:63:3c:e2:34:a8:c2:5f:
f4:6c:78:d6:69:e1:ab:58:6c:bf:98:6b:da:ee:1d:98:83:94:
82:a4:2a:10:54:06:3b:82:db:8e:d8:a9:7a:c9:69:ee:ba:ee:
f8:2e:a8:e0:ac:ec:57:52:81:10:55:38:19:67:5a:2c:53:35:
73:3b:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org