Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a37633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: L1G6hom4lLnxdK0mPE94P5IAJa8MtNHRRYOq3gBKito=
Subject key identifier: 93:91:52:5C:B5:5C:21:E8:3D:7D:03:CA:61:7A:F0:61:27:2E:E3:5C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2458E2CE9AC817EA95DB29D1400262FFED14B448
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:35 +0000
ROA not before: Mon 26 Sep 2022 07:56:35 +0000
ROA not after: Mon 25 Sep 2023 08:01:35 +0000
asID: 59282
IP address blocks: 2400:d680:7c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:58:e2:ce:9a:c8:17:ea:95:db:29:d1:40:02:62:ff:ed:14:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:35 2022 GMT
Not After : Sep 25 08:01:35 2023 GMT
Subject: CN=9391525CB55C21E83D7D03CA617AF061272EE35C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3b:19:b5:69:1f:62:c8:ec:13:ae:f3:d5:d6:
fc:23:bc:76:dc:0f:65:42:08:2a:20:3c:45:5b:4a:
35:40:a0:12:f9:2e:88:d7:1b:69:13:bb:cd:8d:b2:
b2:75:6b:02:e0:7b:1a:e0:f7:48:1e:bf:ae:a1:37:
90:4c:a2:35:8f:9d:9a:cf:4c:64:ae:84:70:7a:69:
b4:94:ce:95:9f:c8:b7:92:dc:ab:1f:ab:3a:fb:a8:
e7:9c:8e:01:08:96:99:7d:4f:e1:42:bd:4d:65:10:
c2:97:90:c2:d0:03:bc:6a:41:47:b8:c7:81:ec:23:
5b:00:32:22:b4:b0:d9:92:db:a8:82:22:d3:1f:54:
c4:32:35:a3:c1:9e:56:89:ee:79:5f:8c:48:9f:54:
7f:da:9e:a4:12:80:ec:26:5b:42:ab:bd:4f:3f:39:
e3:61:d2:f0:7e:b9:0b:4b:9d:2d:3e:6c:1f:67:0e:
c3:6f:cd:78:69:a5:1c:3c:db:1d:8a:07:ce:3e:bd:
5a:2f:57:c9:43:32:58:c6:f0:70:f8:58:66:ff:76:
c1:de:ab:53:0b:b5:d4:bd:0a:48:a4:80:81:c2:e0:
f4:49:00:4d:8b:06:d0:9a:2c:ef:88:1c:49:7d:51:
f6:1b:4a:f7:bb:ae:b0:2f:c8:34:00:4a:62:2a:ec:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:52:5C:B5:5C:21:E8:3D:7D:03:CA:61:7A:F0:61:27:2E:E3:5C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:7c::/48
Signature Algorithm: sha256WithRSAEncryption
42:f4:61:10:3d:81:a1:ab:12:b5:fc:ba:53:07:aa:fa:72:84:
74:aa:fd:35:0b:99:8b:22:b7:f5:bc:72:cc:c0:19:c1:f3:85:
ce:d6:fb:4a:41:17:29:48:8c:89:e3:3d:bb:8e:c3:14:a3:f9:
96:89:2c:03:59:d0:46:ef:9f:a3:23:75:ec:5c:f8:58:97:3e:
33:c4:71:f5:b0:01:17:ec:fa:19:fd:85:e2:f9:df:7e:8b:dc:
1b:88:25:03:e6:dc:1b:0f:61:75:cd:8e:2d:1d:9f:34:3c:cb:
6f:b3:55:de:37:2d:10:91:20:8a:d2:23:5d:49:27:03:5a:26:
e3:7f:9c:0e:cd:d7:2b:ad:97:86:ce:4e:61:75:b3:0d:0c:c6:
b7:9e:9b:52:0b:ae:86:b9:a5:75:27:b4:64:48:78:c0:5c:af:
e7:fc:40:e6:99:08:f8:52:a6:41:a6:7b:9c:ee:57:ba:c4:6f:
8a:04:e7:9e:41:31:c0:51:82:5c:e7:e9:84:92:ad:fa:e9:dc:
2c:9f:cd:bb:f5:a9:4e:90:a2:f8:50:17:de:f1:ee:c8:c2:02:
cb:7c:ef:7e:c6:39:f4:9b:98:51:dc:fd:41:72:a0:c6:b4:59:
bf:48:6b:77:79:e9:45:d4:4b:15:4b:b6:c6:70:c0:8a:66:41:
04:3b:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org