Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LUtGMrk5UaJ5pr8TGW0h+EDKTKydQiDNXnWe05cfgIA=
Subject key identifier: FD:25:B0:01:66:85:1B:B6:33:8E:91:B6:CB:C8:7C:FD:5B:A0:4B:25
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0F2FB87B57C95CABA07319FF08670FE8A2E4461F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:39 +0000
ROA not before: Mon 26 Sep 2022 07:56:39 +0000
ROA not after: Mon 25 Sep 2023 08:01:39 +0000
asID: 59282
IP address blocks: 2400:d680:8d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2f:b8:7b:57:c9:5c:ab:a0:73:19:ff:08:67:0f:e8:a2:e4:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:39 2022 GMT
Not After : Sep 25 08:01:39 2023 GMT
Subject: CN=FD25B00166851BB6338E91B6CBC87CFD5BA04B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:93:45:73:81:e2:4e:13:6e:fb:30:05:ca:
4d:81:1d:a1:80:32:e4:ce:5f:3d:be:36:24:d9:f7:
96:40:75:1e:24:65:65:6d:ad:fc:c8:41:83:9d:38:
a7:dc:d8:39:91:bd:26:b1:7e:86:d3:86:4e:9e:13:
14:22:4f:d6:9f:29:dc:cb:da:88:d0:c5:06:56:df:
e7:1a:e4:c1:02:b2:fd:3c:48:d8:79:ee:d0:68:5d:
aa:50:c9:dc:19:a3:7d:79:ee:2f:72:f9:60:73:09:
13:b2:35:8a:22:d2:b6:65:5c:cd:d5:13:7e:53:ea:
df:00:56:37:18:a9:3a:cf:aa:78:dd:ff:06:05:ea:
8c:87:44:de:12:0e:0d:f2:2b:64:a3:19:19:90:2a:
bb:c5:11:0d:37:2f:14:05:f0:f3:1d:f0:27:ed:90:
51:e4:ca:2d:7d:d4:39:4d:7e:86:e8:c7:46:27:c5:
83:57:87:a6:6a:fc:05:f0:b8:56:ea:4a:6e:a9:40:
14:16:4d:49:30:f3:de:8b:f9:3e:6a:96:01:da:77:
72:3c:51:25:f1:8a:31:e8:10:2f:0d:17:fa:9a:8e:
9e:56:1c:ec:96:06:b4:00:12:2e:86:4e:42:70:5c:
3e:b2:83:bf:7c:0d:c4:b8:17:a9:bb:39:54:59:2a:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:B0:01:66:85:1B:B6:33:8E:91:B6:CB:C8:7C:FD:5B:A0:4B:25
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:8d::/48
Signature Algorithm: sha256WithRSAEncryption
c5:4f:a7:bc:f4:ae:19:ca:bd:26:69:43:35:a4:28:15:54:e3:
ff:7e:23:5d:64:ff:72:53:5f:0b:18:c2:1a:33:b7:bc:a9:eb:
21:f4:83:1e:8b:df:d8:43:04:3c:c8:98:03:0b:97:5c:3c:99:
25:31:e7:cc:8a:ce:bd:44:41:c0:d7:33:ef:c4:0e:ab:3d:a0:
b4:2d:a8:ec:e2:73:1c:8b:21:56:5e:9f:1e:21:b1:93:df:4e:
82:2b:98:7f:77:40:f8:2f:30:59:39:1b:d7:e2:05:41:c4:da:
0d:90:3e:f6:1d:61:c4:92:cb:b8:16:31:3b:8c:b0:cf:f6:f1:
3b:6a:36:d2:ac:2a:73:7e:56:04:3e:70:b7:55:0d:af:d3:e6:
48:08:c5:3f:9f:35:47:28:2a:26:8b:18:67:68:85:3e:16:b7:
90:27:24:08:44:32:de:b7:f3:c2:5e:6d:e5:ed:05:92:d9:57:
5b:93:ee:30:76:11:69:4a:e2:fb:06:0d:97:bc:c5:b2:4d:43:
a6:dd:53:96:49:ef:33:3c:0e:22:f3:04:14:e4:9f:e4:da:e6:
55:06:74:d9:fd:2e:48:30:10:08:02:b9:56:4b:33:84:69:73:
94:90:47:72:28:d6:9f:82:42:c1:a9:5e:ff:73:16:ad:8f:41:
58:20:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org