Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: BENwMCpmMPZRojpSNmjQyzCa2a3TukpzEo9nCCOH7BE=
Subject key identifier: 69:DC:97:73:70:0D:00:B6:1B:AB:94:ED:69:2D:E5:9A:E3:FD:4D:70
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 504C4BF47E0A70A92B84109A5CDFCC731A5FBAF2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:59 +0000
ROA not before: Mon 26 Sep 2022 07:56:59 +0000
ROA not after: Mon 25 Sep 2023 08:01:59 +0000
asID: 59282
IP address blocks: 2400:d680:89::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4c:4b:f4:7e:0a:70:a9:2b:84:10:9a:5c:df:cc:73:1a:5f:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:59 2022 GMT
Not After : Sep 25 08:01:59 2023 GMT
Subject: CN=69DC9773700D00B61BAB94ED692DE59AE3FD4D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:5f:3c:ac:d7:22:58:71:3d:2c:be:bc:e6:
88:d3:d2:e6:4a:2f:92:5e:76:ed:fd:db:95:87:0f:
9d:ae:c5:d3:aa:2e:a4:9e:0b:c3:f7:8e:8c:2e:6c:
27:29:84:64:90:5a:30:65:4f:ac:d9:ed:bd:65:2d:
70:89:f5:5e:46:61:81:10:3d:4a:04:3e:75:9b:99:
94:45:95:51:1b:96:2a:7a:b7:51:66:89:0f:7f:3d:
3e:35:b2:f2:0d:84:81:94:98:4a:41:5d:3e:62:b7:
b5:55:95:a3:ba:df:41:96:20:41:30:54:a1:95:ce:
da:2f:ce:37:f7:60:5c:0b:35:b6:1c:dc:89:d0:42:
07:48:59:b2:ea:8c:6c:ea:d6:3e:44:8c:49:f2:ce:
3d:e3:0d:cc:3b:39:08:c1:3e:6f:86:aa:4f:05:47:
72:30:85:7a:bf:1b:45:02:dc:27:26:2e:ed:24:39:
95:e8:70:6d:cc:cc:e1:e4:a5:8b:cf:f3:36:34:d6:
e8:9e:54:34:50:ef:10:07:af:ac:90:b4:7d:9a:de:
c4:97:da:61:0c:20:be:a0:9d:15:6e:40:52:b9:1e:
18:34:41:dc:48:fa:2b:dc:25:93:67:e0:06:b5:89:
e3:d7:42:92:a5:c7:2d:d8:b9:4f:8c:74:d7:ac:11:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:97:73:70:0D:00:B6:1B:AB:94:ED:69:2D:E5:9A:E3:FD:4D:70
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:89::/48
Signature Algorithm: sha256WithRSAEncryption
c4:45:43:e9:9e:03:27:2a:07:7e:70:1c:bd:34:c5:15:05:c9:
12:da:54:6d:cf:b3:b5:e5:e0:ce:f8:c1:50:d6:59:d6:35:f3:
08:2b:ba:99:f4:bc:0c:50:98:85:38:b2:ec:0a:1b:05:ce:f5:
ab:0e:75:42:68:82:e5:5e:58:52:86:42:e7:7f:ff:93:22:c0:
d3:73:bd:cd:00:d0:8b:7d:b8:0b:fd:d2:11:95:f8:25:f9:72:
72:cc:9e:93:96:48:d8:f6:a7:7d:a8:b1:b6:0d:90:34:6b:4e:
5e:e6:f6:93:fe:ad:b4:24:99:2c:8e:59:f0:2d:11:76:c0:98:
8b:a1:75:79:a8:b7:87:76:b8:92:78:05:b7:25:43:f1:d1:71:
13:d7:57:b0:41:d3:5a:15:6e:45:e0:ff:5e:b0:f6:10:00:cf:
f4:19:28:fe:ec:e0:b8:28:ef:81:88:4e:c4:e8:e3:8b:b0:01:
c6:48:d6:c3:a6:5a:dc:6f:9f:ed:43:ee:d3:f0:88:a3:c0:e2:
2a:3d:66:99:cd:a7:e7:d5:63:d6:08:fa:c1:7d:13:23:aa:2f:
14:7f:06:01:20:86:d1:f5:85:67:d2:96:0c:9d:7b:b1:27:13:
28:5b:c6:67:a3:96:c3:9a:f1:68:ed:44:fd:40:22:28:f6:68:
f8:d1:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org