Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a37373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: wk51T9iGp2AhKqpQZxD6PQijCAFkA4LvUiOLuTh66pQ=
Subject key identifier: 0C:72:CD:08:28:77:C9:C1:DB:BA:20:75:25:32:20:5B:A9:28:A6:B1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7ED32480061947D6BB6E910EAB66FAD867D512
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:48 +0000
ROA not before: Mon 26 Sep 2022 07:56:48 +0000
ROA not after: Mon 25 Sep 2023 08:01:48 +0000
asID: 59282
IP address blocks: 2400:d680:77::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d3:24:80:06:19:47:d6:bb:6e:91:0e:ab:66:fa:d8:67:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:48 2022 GMT
Not After : Sep 25 08:01:48 2023 GMT
Subject: CN=0C72CD082877C9C1DBBA20752532205BA928A6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:b3:97:ca:c7:9a:bb:d9:1b:dd:cf:58:c2:
28:83:11:21:ac:8d:bb:86:b3:86:a2:94:f1:8b:0e:
5e:c9:2e:ee:35:cc:50:1c:56:55:02:9d:50:e2:ba:
02:7d:a9:c9:b5:10:85:bd:67:a8:94:9f:a2:19:1e:
19:a1:e6:fa:e7:c7:a1:55:14:79:7d:29:91:e0:da:
a5:31:f5:59:5e:15:11:aa:da:c4:a2:7e:2d:25:ac:
07:d2:59:f5:f1:76:c7:0f:3f:da:45:68:4b:f7:e2:
1f:b7:17:5a:a1:23:af:24:03:d7:54:52:72:e0:3c:
f6:5f:88:90:d7:26:12:42:7d:14:d0:ef:29:1f:04:
0e:56:50:b7:8d:06:93:57:7c:03:0f:30:56:e0:e1:
01:5a:d6:98:ca:b0:a9:68:38:54:f0:31:8a:60:be:
5c:63:a2:16:4c:30:13:6c:40:92:f8:8a:9f:ec:7e:
7d:7e:f4:fb:69:02:7c:de:90:26:37:5f:61:fd:2f:
5d:a2:8c:a1:47:3b:9d:77:73:cb:49:ea:2b:1e:f9:
73:a8:0b:a1:f1:fa:d2:54:80:53:99:54:a4:10:21:
93:54:53:fb:0d:19:50:f4:5b:7a:92:a9:b4:04:01:
e5:61:87:7b:7a:99:23:e8:21:f7:e5:1f:11:5e:5c:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:CD:08:28:77:C9:C1:DB:BA:20:75:25:32:20:5B:A9:28:A6:B1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:77::/48
Signature Algorithm: sha256WithRSAEncryption
98:a2:3d:08:25:52:de:d6:1e:de:1f:8f:ee:d7:f0:8c:ab:00:
e2:22:ce:cf:cd:81:ec:23:cc:a9:ba:9c:d8:f2:9f:e3:1c:1a:
66:59:6e:42:5e:8d:82:d3:10:21:0e:b4:46:24:2a:d3:b8:15:
f7:4a:6d:17:0e:b6:53:bb:6d:3e:1b:87:fc:34:15:40:fc:4a:
c4:11:f9:72:df:7e:9a:2b:5d:42:f5:af:fa:58:53:46:9d:43:
93:77:0a:b9:65:eb:24:6d:26:61:d5:39:f0:0b:c4:db:ee:10:
ff:40:51:6d:23:33:bf:b1:57:30:48:dd:b7:ee:7c:23:c6:e6:
85:fe:ec:e0:7d:d9:d8:9a:34:8f:4c:c8:07:9b:c3:54:35:26:
d7:4c:f9:72:da:90:c4:b9:99:48:63:df:99:8a:0e:07:35:24:
1d:c2:ba:60:53:4d:86:e6:dc:be:44:a9:f5:b6:67:34:99:ad:
5c:23:46:1f:41:17:c8:6c:56:86:fc:c0:b6:6a:0d:08:d9:8b:
9a:d4:18:f0:15:07:2e:5a:28:14:6e:63:68:ad:d5:d7:58:51:
7b:00:38:dc:e4:1e:8d:de:fe:88:f0:f5:e1:91:69:6b:c9:ae:
57:70:6e:2c:b1:78:48:5e:c4:54:97:a2:f8:84:95:e2:2e:dd:
bd:0d:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org