Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: j/Y4P7dDuJVpEt8H9NTkRFFgHATzhYIp8RxirQhZMys=
Subject key identifier: 51:49:92:A0:EC:19:71:BA:93:7B:05:CE:AA:C8:F7:01:B2:79:68:16
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1B7A98E9E35578AD8527BF1E7E9279017DC7A2ED
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:21 +0000
ROA not before: Mon 26 Sep 2022 07:57:21 +0000
ROA not after: Mon 25 Sep 2023 08:02:21 +0000
asID: 59282
IP address blocks: 2400:d680:52::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7a:98:e9:e3:55:78:ad:85:27:bf:1e:7e:92:79:01:7d:c7:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:21 2022 GMT
Not After : Sep 25 08:02:21 2023 GMT
Subject: CN=514992A0EC1971BA937B05CEAAC8F701B2796816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:65:5c:7c:c5:98:3e:6b:90:16:19:5c:62:
ba:7a:53:60:24:73:30:e9:39:72:85:cb:e5:11:aa:
1b:0e:61:41:c2:67:25:5e:61:7c:2d:a2:1d:19:fd:
74:89:92:6e:c3:fc:15:f1:59:83:8a:f7:a7:b7:ed:
93:fe:5d:2b:ea:26:d0:26:41:07:17:a6:d1:3a:c4:
75:1e:6e:d5:ae:7b:b8:94:c7:cb:60:26:d0:38:e5:
9a:e7:1b:10:4e:0c:ec:9e:65:b1:78:d4:18:41:8e:
2e:1d:9a:61:1a:7d:9c:a3:7c:bc:9e:c8:90:a8:f5:
3b:91:83:bf:ca:8a:0f:4b:19:5f:c7:72:3f:9e:5c:
a6:41:e0:68:b4:3b:f9:e3:8a:c0:72:b7:05:90:f8:
48:db:db:39:b7:21:21:d7:4e:31:83:04:c4:a6:ab:
39:16:43:6b:96:d7:a7:22:64:17:c1:8c:6d:84:71:
65:b3:8b:d8:fe:bd:98:6e:1b:48:98:28:66:71:c1:
c2:ad:a6:65:fb:05:61:51:ab:03:97:85:ca:c5:ea:
ca:51:79:93:6e:1d:69:f6:0c:f6:40:ef:17:34:36:
17:05:49:43:75:71:69:3f:a9:fc:32:b5:06:98:6e:
4c:27:12:0d:36:71:34:c3:a9:43:40:95:c5:0e:e1:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:49:92:A0:EC:19:71:BA:93:7B:05:CE:AA:C8:F7:01:B2:79:68:16
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:52::/48
Signature Algorithm: sha256WithRSAEncryption
80:c3:db:9a:cc:e4:04:6e:9c:7f:26:44:d3:88:c5:85:0b:42:
8b:95:a9:25:09:50:03:37:0a:89:aa:bc:f4:20:9c:d6:84:74:
e3:24:26:b0:f2:a7:76:35:a1:61:de:7b:2f:67:62:60:48:47:
d3:e1:0e:e0:83:5f:34:cb:fd:cd:ca:79:6c:14:e4:92:e3:c5:
84:c7:d4:a1:11:e8:85:72:42:4e:f4:4a:fa:04:48:36:9b:a4:
f9:92:84:e1:17:ff:e3:b7:c1:81:39:73:44:c3:07:79:91:40:
7e:de:02:12:49:5b:aa:b6:ad:00:0a:10:fa:65:50:30:bb:16:
98:94:20:91:c7:db:05:88:21:5d:1e:d8:10:9a:a8:df:57:d8:
48:c7:2f:48:0a:8c:40:82:35:4b:72:d6:bc:77:2f:8c:29:8d:
2f:95:dd:cc:78:f7:0e:b8:bb:3c:2a:eb:9b:19:22:a0:5f:1f:
bc:7a:3a:64:d4:bf:c5:a0:5e:e4:e6:5d:58:32:a2:86:74:08:
db:6f:3c:e2:9e:ba:2b:e4:b3:21:52:21:73:c0:96:76:0f:e6:
5a:de:e6:0f:a5:73:98:15:25:6a:d5:f0:66:6c:1c:7a:8c:50:
99:4a:48:20:3a:ca:80:6f:b7:41:21:57:38:67:3e:8d:82:de:
5d:80:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org