Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a39363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: U0s1jk+0VH0fAGL3+79M1drVtGNzAPf7IDMEMFHSXTg=
Subject key identifier: 83:25:10:33:C4:D9:C4:AE:56:2C:45:56:C0:15:D7:8E:41:6A:6F:AA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 10046D1A919A97CD3F9E4C0A75CC5DC0CC9907D5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:36 +0000
ROA not before: Mon 26 Sep 2022 07:56:36 +0000
ROA not after: Mon 25 Sep 2023 08:01:36 +0000
asID: 59282
IP address blocks: 2400:d680:96::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:04:6d:1a:91:9a:97:cd:3f:9e:4c:0a:75:cc:5d:c0:cc:99:07:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:36 2022 GMT
Not After : Sep 25 08:01:36 2023 GMT
Subject: CN=83251033C4D9C4AE562C4556C015D78E416A6FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:ba:62:1b:ac:38:11:be:45:d9:e8:3b:d3:
53:3b:60:a7:c8:6a:dd:40:1e:e4:9c:f3:a5:11:f1:
8c:42:14:d5:c2:97:6c:10:5c:18:95:c1:9d:07:ec:
ab:a0:4a:65:ba:19:43:be:78:1e:35:41:f9:ca:31:
e2:97:77:e1:b3:7b:c9:ad:76:b0:3e:15:21:50:a2:
cc:9a:3d:bb:d6:79:fe:2d:16:3a:74:cb:a9:08:5d:
8d:4a:a1:b9:91:6d:7e:d5:13:54:61:d5:24:ba:11:
f5:6e:ed:8f:49:5c:5c:e1:47:29:56:7d:e3:a5:ac:
d0:6e:ca:e8:61:6d:4f:5f:f2:bd:ab:24:0e:e5:96:
17:d8:c6:d6:11:1c:ed:e5:7d:44:f1:66:e3:1e:d3:
fa:3f:bb:bd:b9:13:45:eb:21:dc:34:c2:2f:44:24:
f5:40:c7:73:be:37:70:28:47:cd:0c:87:b6:32:b3:
97:b2:9b:2d:eb:63:e9:4c:a9:4d:08:fb:dc:2e:27:
c1:75:78:5e:87:95:d1:b7:ae:60:17:6b:29:33:d6:
fc:09:8d:b9:bb:12:51:3f:68:12:54:d8:dd:61:a5:
b0:af:95:c4:8c:67:ec:04:ce:24:24:1b:d0:4f:bd:
b6:41:0e:b1:0d:4f:fa:da:78:a0:84:e9:02:e5:02:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:10:33:C4:D9:C4:AE:56:2C:45:56:C0:15:D7:8E:41:6A:6F:AA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:96::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fc:99:fe:eb:d8:73:c7:6f:43:24:1f:41:30:45:a3:ff:e1:
7b:81:b0:75:84:87:74:80:80:f1:4a:cb:23:d2:04:a3:26:97:
ef:58:b3:e7:cf:71:fa:46:09:71:7f:8f:fa:b7:51:05:fa:a2:
fb:38:08:c5:00:65:8d:d1:50:76:bf:12:91:4f:74:0b:1c:76:
f0:2d:89:d0:56:82:97:d6:a0:f0:07:ba:9c:ab:f2:ef:03:22:
e3:47:35:f8:53:fe:2d:c6:24:05:31:26:fa:f0:8d:18:60:ab:
e4:9b:18:29:66:52:e0:00:3e:30:5c:cf:61:54:bd:96:cb:5d:
95:ce:e8:68:62:65:b2:7b:6b:68:11:a0:a2:92:8d:fd:c6:46:
88:ab:c9:4a:78:85:7c:6a:4c:1b:dc:fe:9e:77:c4:20:2e:f9:
54:8d:1d:04:fa:19:1c:fb:6a:b1:54:3d:d9:6b:80:0a:9f:e9:
6c:05:6a:51:d6:31:cb:39:77:26:82:26:90:51:5e:26:3d:89:
1e:5e:89:d6:98:21:8b:83:9f:68:fa:ba:fd:bf:df:a3:60:cc:
9c:eb:a7:05:2e:6c:46:b6:a8:32:7d:71:5c:fd:e1:ec:1b:0d:
8e:00:72:86:34:1c:84:34:96:da:52:71:7f:80:23:d6:ec:7c:
41:1c:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org