Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: R5UVvMgih6uxpb2YGVOjAUnViKLIh37OUivIP3k1vbw=
Subject key identifier: BE:A8:75:CD:80:46:36:9B:4C:89:77:CE:F7:71:51:48:82:A7:05:DC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3F914B853A6309ACF24E84BB0FB54EA8844D3C85
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:55 +0000
ROA not before: Mon 26 Sep 2022 07:56:55 +0000
ROA not after: Mon 25 Sep 2023 08:01:55 +0000
asID: 59282
IP address blocks: 2400:d680:43::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:4b:85:3a:63:09:ac:f2:4e:84:bb:0f:b5:4e:a8:84:4d:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:55 2022 GMT
Not After : Sep 25 08:01:55 2023 GMT
Subject: CN=BEA875CD8046369B4C8977CEF771514882A705DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:1d:a0:c2:6e:dd:bf:de:d5:e2:91:6a:93:
64:3f:4a:6b:fc:9e:af:1f:f7:de:70:23:6f:53:5f:
8c:24:c5:99:8b:16:be:3a:47:5d:3a:ba:b2:be:d7:
2f:df:57:c4:f8:92:50:18:45:8d:b2:a6:98:21:c6:
7a:26:65:7e:cf:00:e4:fc:36:52:52:2f:c3:a5:7b:
93:11:fa:76:58:a9:0a:99:5c:f1:b9:aa:2a:73:6b:
6a:e8:08:67:5c:28:62:b4:1e:be:8f:4a:72:75:52:
a1:78:c5:89:a8:9f:30:86:a4:1a:19:23:a9:bc:b8:
ec:da:09:f1:e2:21:b8:3b:8a:29:92:8e:09:40:63:
2b:c9:b6:13:e9:2e:c8:99:e9:1c:0b:c0:c5:96:1d:
36:65:19:a6:92:f6:db:d7:a4:5f:b0:aa:ab:59:0e:
c2:23:31:2b:dd:56:5f:a0:0f:48:9a:fd:37:ce:f6:
42:05:ff:48:d3:a8:5b:f9:3b:08:29:28:2c:33:67:
94:d4:40:94:b5:ac:6f:52:3a:f1:af:6a:7e:e5:b8:
b4:61:6c:77:fc:d8:bb:ca:4e:b6:1e:a9:2b:00:13:
1b:82:af:53:46:b5:d8:17:a1:79:cb:02:3f:45:bc:
dd:3e:56:1a:50:03:90:71:f6:be:27:49:11:c5:05:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:75:CD:80:46:36:9B:4C:89:77:CE:F7:71:51:48:82:A7:05:DC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:43::/48
Signature Algorithm: sha256WithRSAEncryption
2c:f5:ed:45:aa:e6:d4:55:49:5e:3c:3d:7d:aa:3b:4d:50:e5:
63:60:9f:9a:38:a1:5e:a5:96:b5:73:2b:3a:3f:e1:b4:18:fe:
2f:13:67:bc:e3:7d:13:98:12:d5:0c:66:c6:08:87:2c:9d:0c:
25:92:20:c3:43:30:79:1d:ad:23:fc:0a:43:b7:21:10:3a:4d:
12:e9:fe:2c:56:f6:b2:ce:8c:92:26:65:17:33:6d:28:a2:90:
ef:34:32:d2:8b:db:10:1d:51:37:19:34:aa:fe:57:46:64:e7:
e8:d6:ed:bd:32:7b:80:9c:06:d1:a3:c5:f2:1d:c2:19:8d:9a:
71:0f:17:a7:4e:47:51:98:00:de:6a:0f:52:6a:fe:a0:f5:aa:
ea:1c:c3:98:89:bf:fd:6e:ab:f1:52:a7:73:de:16:1a:cb:41:
f2:85:b9:2f:6a:fd:51:8c:e4:7a:79:16:dd:4b:4c:3f:74:28:
2c:9f:43:ee:9b:a4:aa:e1:fa:0b:13:eb:0f:c1:49:5c:5e:51:
60:e4:b7:2c:f0:ff:71:ba:6d:df:9f:75:cc:36:a0:d9:5e:b2:
9b:30:02:11:b4:d5:9b:10:3d:c7:ee:02:d4:06:1d:ca:3a:31:
eb:99:a8:18:db:d6:4e:25:b7:ab:df:cc:35:b2:2b:3d:da:69:
23:1a:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org