Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a36393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: M4gfScaYIb7Ne+X4el3sL2ZCvbGXi8b3XLXb0gUsRkM=
Subject key identifier: 44:E7:59:07:05:95:F5:58:EA:FA:E5:5B:1E:CC:32:3A:F0:DF:54:C2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0AFA6FBEA6F890ADF3ED2C4D30D17569389DA214
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:32 +0000
ROA not before: Mon 26 Sep 2022 07:56:32 +0000
ROA not after: Mon 25 Sep 2023 08:01:32 +0000
asID: 59282
IP address blocks: 2400:d680:69::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fa:6f:be:a6:f8:90:ad:f3:ed:2c:4d:30:d1:75:69:38:9d:a2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:32 2022 GMT
Not After : Sep 25 08:01:32 2023 GMT
Subject: CN=44E759070595F558EAFAE55B1ECC323AF0DF54C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:b1:03:4f:c7:ab:18:34:48:7a:1a:9d:1c:
03:7b:47:63:b6:b7:c0:5a:c7:36:ee:72:07:56:26:
f2:22:d4:4d:a2:e4:eb:7f:d9:85:91:28:ec:6e:7a:
93:ff:6e:c6:3c:a7:25:46:82:f6:89:40:7c:de:44:
41:14:64:b9:20:12:1c:84:07:bc:6e:d2:e4:e3:f8:
41:0a:95:2b:08:9c:e3:a5:ff:aa:aa:59:61:4b:57:
17:cb:54:a7:fe:24:b3:d1:40:95:a3:de:cd:9d:b1:
5a:c9:a0:85:b9:ee:d1:19:26:df:fb:4a:27:c3:a0:
6d:62:f7:ae:f3:ae:0e:d9:7b:8d:d4:a0:d1:07:5b:
9d:33:d2:2c:d0:b7:dd:52:7e:2c:83:af:49:f2:97:
f1:e6:49:28:55:53:e6:73:02:0f:a1:0e:9f:07:54:
12:c6:eb:21:4d:6f:50:90:3f:85:9f:75:c5:40:ad:
33:b0:7c:4f:1c:3e:59:4c:36:56:1c:6b:56:f4:d3:
6e:7c:4e:58:10:3a:7b:38:e7:27:0e:a4:7b:0e:53:
a2:1e:51:11:91:45:a1:c3:f0:ad:19:87:14:3a:00:
63:6d:9b:21:b3:2f:de:3e:54:ae:a4:84:56:6f:a2:
81:92:db:b1:62:93:83:23:c3:c2:25:19:ae:db:78:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:59:07:05:95:F5:58:EA:FA:E5:5B:1E:CC:32:3A:F0:DF:54:C2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:69::/48
Signature Algorithm: sha256WithRSAEncryption
11:7b:d4:37:79:75:62:f9:c5:30:4c:88:4d:42:e6:46:63:48:
9a:a0:0a:f3:36:06:4a:17:43:76:bc:52:82:d3:41:ac:15:ad:
d6:bb:dc:f8:99:cd:ee:fe:c4:ac:60:ce:b4:14:35:a8:ef:98:
e1:08:70:b5:c1:bd:c4:0c:d1:0a:37:1c:53:0d:ba:fc:c0:2c:
e9:cc:f5:67:2e:a2:ec:1b:8a:8a:2f:5c:e7:15:bc:8a:03:99:
72:b5:94:14:02:e3:c4:04:b5:e3:4d:db:19:e9:95:36:d5:82:
25:82:f6:65:0a:6f:e3:77:19:f9:f9:0d:b7:20:8b:87:c1:43:
89:70:34:62:04:2c:ee:f6:05:a0:0b:54:2e:b0:29:77:91:fb:
6c:15:1d:97:e9:f9:45:40:ee:3a:f7:2c:df:e4:fc:00:ae:99:
5b:0a:c0:5e:00:78:5b:76:ed:78:57:0a:0f:80:7c:d3:0b:2a:
c7:d4:58:04:ff:2b:f7:98:fe:97:c1:b3:c9:21:52:2e:47:e0:
9d:c2:49:16:b8:fa:00:6a:bf:0b:a0:5b:33:8b:9e:60:6a:44:
34:45:3d:ec:ed:4b:40:2a:ee:4f:01:4f:ee:a2:bf:73:19:a9:
86:62:29:d4:d3:14:df:5c:85:3d:e7:82:2f:ff:92:6f:37:3b:
f6:c5:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org