Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: hZDFEUEl9SlWTNIwOetOukKuK9tAJLqx6REViq/cQ94=
Subject key identifier: 06:31:E1:A0:85:EF:6B:DA:05:06:3E:11:D5:A0:51:89:4F:05:01:44
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 38B3C2D7E958A881C689FB244B38A272F8B749D5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:49 +0000
ROA not before: Mon 26 Sep 2022 07:56:49 +0000
ROA not after: Mon 25 Sep 2023 08:01:49 +0000
asID: 59282
IP address blocks: 2400:d680:8f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b3:c2:d7:e9:58:a8:81:c6:89:fb:24:4b:38:a2:72:f8:b7:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:49 2022 GMT
Not After : Sep 25 08:01:49 2023 GMT
Subject: CN=0631E1A085EF6BDA05063E11D5A051894F050144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:dc:99:76:6f:0d:5c:7a:ad:c5:dc:e3:a3:
71:d5:21:2f:aa:3d:c0:c9:c2:bd:18:81:56:8b:88:
52:12:09:55:ef:6f:4c:87:7f:5f:ee:76:cc:96:a7:
2e:8b:fb:10:85:56:0a:14:79:15:fd:99:08:4a:02:
35:bf:73:dd:3e:b9:b4:00:f9:86:8f:af:62:c4:fe:
19:29:4c:22:24:b4:7a:b5:23:b9:aa:82:bb:1f:6a:
ae:14:f7:c6:8d:93:94:d7:79:68:f3:3f:5c:88:b2:
6e:0a:29:ce:eb:5c:a1:a4:d6:68:9f:e4:8c:0a:c4:
66:dc:b3:1d:33:53:3a:c5:5a:f3:85:39:6e:8c:c2:
28:4d:c5:73:b5:e6:6d:73:b1:d2:74:f8:71:ed:85:
da:cb:4f:38:b3:e6:67:09:96:9c:0f:6f:15:15:54:
46:ab:5f:74:3e:44:23:3d:5d:b6:6e:db:db:b8:0a:
63:26:5a:13:23:5a:aa:34:0e:48:e6:55:4c:f0:7d:
13:cc:17:4a:1b:fc:9c:24:05:c2:60:96:60:08:ac:
cd:8c:fa:3f:77:7d:3e:4b:5f:70:15:3e:d4:eb:8b:
cc:08:af:64:23:3d:74:3a:28:22:34:70:6a:47:20:
c0:18:87:21:20:14:e9:ed:d1:82:4d:78:fe:90:94:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:E1:A0:85:EF:6B:DA:05:06:3E:11:D5:A0:51:89:4F:05:01:44
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:8f::/48
Signature Algorithm: sha256WithRSAEncryption
40:71:b5:5a:8f:e8:27:1e:b8:be:1a:0f:e8:6b:c2:bf:85:b2:
6a:57:34:ae:53:3a:bb:c3:cb:e6:04:3d:bf:6a:9b:ce:5d:a7:
17:ba:ff:d1:aa:9f:d2:c6:f8:61:c9:27:ec:c3:93:ad:f8:bd:
50:ca:73:ea:f7:8b:a0:04:9c:a9:8e:63:36:a3:fc:e2:0a:a9:
85:96:55:de:1e:57:ed:3c:ef:42:e6:08:5d:43:e0:2c:e3:a6:
69:ea:52:43:d9:f9:8c:76:95:f1:3e:11:78:d4:8b:80:d0:cd:
e2:07:00:7e:6f:fa:c7:8f:c8:5e:c0:12:4a:c2:4a:56:6e:bc:
bc:98:8c:79:79:91:ae:24:7c:49:fc:02:79:f3:21:82:14:04:
d8:7b:e7:ba:7d:52:cd:5c:fd:5c:be:93:da:23:c5:83:b9:d2:
b1:58:8b:86:97:22:61:c8:e9:87:52:b9:71:c5:67:82:09:f0:
e2:1e:4b:4d:17:1c:f7:39:39:a7:ea:b7:78:20:ee:d5:f6:e9:
cb:36:60:b2:12:3f:05:41:a9:b5:a1:1e:52:79:63:84:39:2c:
69:e4:ab:8e:28:7d:78:f5:33:9f:db:c7:16:91:84:ae:90:77:
6a:75:7a:2e:5f:59:31:3c:6f:bd:f1:ff:a3:e5:0a:fb:c2:d6:
82:6e:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org