Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0VzbkLQrrRArEpi1x/Q5b4XZGNxt63Q0k9TO7paemn4=
Subject key identifier: 95:CC:C3:10:38:39:D1:0A:97:C0:2B:21:F2:73:E8:46:B3:9E:CD:1B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 20C18C2F644240BA535EC2DBCFB0085BDABD9CD8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:11 +0000
ROA not before: Mon 26 Sep 2022 07:57:11 +0000
ROA not after: Mon 25 Sep 2023 08:02:11 +0000
asID: 59282
IP address blocks: 2400:d680:83::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c1:8c:2f:64:42:40:ba:53:5e:c2:db:cf:b0:08:5b:da:bd:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:11 2022 GMT
Not After : Sep 25 08:02:11 2023 GMT
Subject: CN=95CCC3103839D10A97C02B21F273E846B39ECD1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:a5:73:af:d1:81:50:74:5b:9e:76:5a:58:
d8:2a:00:45:6f:a6:b2:de:e2:52:c3:0d:d0:b7:e3:
44:84:6f:11:12:33:2a:0d:5b:ad:96:20:cb:46:03:
c9:36:ae:fb:61:99:70:ff:88:86:0f:b9:65:02:b1:
ee:70:1d:a5:71:bc:96:64:e9:1c:3a:66:c9:91:5b:
84:a6:93:b5:01:46:0f:9f:f7:0b:b6:ec:ec:7f:e9:
07:53:80:b7:67:c1:0f:63:21:1d:b5:ed:f8:ba:99:
af:af:ab:90:da:8f:69:37:a4:cd:5f:19:7e:96:33:
fc:2d:b4:9d:2f:e2:74:ad:92:24:6e:2b:a7:fa:f8:
e3:df:c5:67:fe:b2:20:7e:2d:8e:2b:ff:75:33:7a:
21:64:49:c4:d4:6e:50:cd:6d:39:3d:cb:54:dd:c7:
58:c7:30:e1:d3:f5:0a:fd:52:fb:a7:7f:c0:39:7c:
59:bb:58:ae:d5:0f:03:2c:b3:42:80:5f:41:91:c6:
df:2b:44:50:70:d7:0f:44:ab:a7:dd:18:10:20:4b:
5c:e2:09:53:95:b9:5c:80:37:56:04:03:48:2c:a4:
02:0b:66:3b:5f:49:15:01:b5:32:00:4a:01:44:21:
cc:bd:69:5e:89:5e:f1:dc:ed:18:27:6d:ad:d0:d2:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:C3:10:38:39:D1:0A:97:C0:2B:21:F2:73:E8:46:B3:9E:CD:1B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:83::/48
Signature Algorithm: sha256WithRSAEncryption
66:77:b7:a1:21:30:9c:47:fc:3c:4a:1a:76:bc:fe:30:58:ad:
8c:09:a3:89:40:1f:2c:21:5d:69:63:88:02:e0:b7:b9:87:6b:
a4:5d:91:ae:84:2b:32:b5:58:ad:b4:3d:b6:4e:49:8c:ca:25:
a7:6f:23:96:82:51:b7:1d:b1:15:28:af:c0:3d:4f:98:ea:00:
cf:5c:3a:1c:ee:be:2b:ef:bd:54:ad:aa:38:96:11:83:12:28:
a5:e4:75:fc:52:9c:06:11:fa:6b:6d:aa:dd:46:ba:8f:2a:1e:
5d:a9:28:18:4d:f4:cf:ba:c6:de:b1:4e:25:bf:07:7a:e2:79:
36:e7:f3:25:e2:c2:6d:bc:f5:d1:9a:68:32:71:67:05:8e:90:
be:22:af:bd:14:eb:6e:fb:f4:6f:85:58:5a:47:37:90:f1:20:
cc:c8:a3:9f:c1:ad:a6:cd:5f:59:87:d5:e5:fa:31:97:ee:52:
d0:4f:d9:85:ed:16:40:ae:b2:8b:ca:ee:61:5a:c1:e6:e1:ba:
93:ec:a2:0e:0c:9a:c1:43:28:5b:c3:5b:b5:1a:bc:02:50:37:
52:2c:38:0f:a9:0c:c3:43:15:3e:68:9a:3d:f9:02:3c:68:7b:
6a:0d:e5:6f:94:20:c2:fd:ba:da:e5:0d:ae:0e:06:b1:81:a6:
d1:dd:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org