Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a39623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: zPt2DbCmvXtoQ8UWb3aR0KORBuBjMpdqw2uG7xteAoU=
Subject key identifier: EB:6A:ED:34:12:AD:A3:AE:CE:F4:D9:46:F1:12:8D:F3:53:F2:3F:65
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 208E6910548EF86AD5D34BE5BBE6C542B31EEAC9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:40 +0000
ROA not before: Mon 26 Sep 2022 07:56:40 +0000
ROA not after: Mon 25 Sep 2023 08:01:40 +0000
asID: 59282
IP address blocks: 2400:d680:9b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:69:10:54:8e:f8:6a:d5:d3:4b:e5:bb:e6:c5:42:b3:1e:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:40 2022 GMT
Not After : Sep 25 08:01:40 2023 GMT
Subject: CN=EB6AED3412ADA3AECEF4D946F1128DF353F23F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:24:ae:ab:89:f6:31:72:16:58:9f:89:40:
9d:3d:a9:a0:f4:8e:ad:26:85:37:bc:51:a9:0b:28:
af:75:8f:22:40:19:2c:02:9d:1e:74:97:39:c7:91:
9d:f1:89:a8:31:68:ae:3e:d5:0a:53:34:2b:6a:c2:
28:f7:d0:b2:bb:b7:bb:85:84:33:e4:74:c4:c8:c3:
2c:0a:39:ac:42:78:50:78:ef:7b:b0:a6:33:b2:dd:
cd:80:4c:63:d1:a2:5c:91:42:8b:7f:39:96:d1:2b:
8e:a1:b2:a0:27:e3:62:a4:0f:91:c0:79:90:75:d1:
8b:87:c5:88:9e:7a:14:6c:13:a4:35:98:21:1c:b1:
92:a4:83:0b:44:40:ce:58:9c:48:44:cc:e7:72:b7:
70:cf:77:a3:06:ca:bf:df:45:10:a3:c3:13:23:30:
d1:d5:0e:37:8a:99:52:b6:2e:2d:74:ed:88:8c:35:
55:c8:12:0f:a1:6f:80:99:48:8f:76:2f:05:5f:a6:
5f:36:08:5c:09:a3:68:24:63:15:5c:9f:77:e2:92:
5f:93:46:a3:f6:b0:f9:e1:e5:4d:32:53:92:22:c4:
55:eb:b3:78:21:5a:66:54:9f:80:6e:f2:12:9b:1a:
bd:5b:52:bf:6d:51:ee:f6:43:f7:6d:94:33:7b:cd:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:ED:34:12:AD:A3:AE:CE:F4:D9:46:F1:12:8D:F3:53:F2:3F:65
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:9b::/48
Signature Algorithm: sha256WithRSAEncryption
2e:f5:c3:c2:7b:e7:53:8a:28:63:74:04:ea:30:29:83:48:7f:
3d:e3:7f:9c:6f:50:f8:22:86:68:4e:9f:19:48:72:d9:76:fd:
be:71:d8:67:da:1d:19:10:35:15:46:45:2e:63:69:ba:8b:3a:
ad:da:0e:5e:13:b7:36:0b:cf:33:cc:de:2f:4d:46:18:ae:db:
76:1d:40:80:fc:d7:a5:fa:65:9a:7c:22:61:b8:89:af:89:2f:
79:05:8f:1f:38:5f:88:7d:0d:54:4f:da:0c:2d:d7:d4:72:54:
54:e5:27:ea:dc:81:65:b2:df:f1:9a:38:da:83:53:cf:c6:ad:
22:37:69:d3:79:87:11:10:2d:ab:b1:3f:7b:31:ff:5a:e4:aa:
8f:b0:7b:b0:69:68:b7:16:9d:f6:77:49:a9:86:65:f8:6b:bf:
59:7e:d9:ef:70:c6:21:9f:a3:8e:ad:b3:12:ca:f3:d4:ca:3d:
56:9c:26:cf:8c:45:69:56:99:cb:d5:2d:0b:14:b7:14:44:6b:
f6:28:fc:23:fa:e0:6e:fc:e1:c6:ad:cd:8a:8c:2b:c1:8f:92:
d1:d7:08:0c:4e:60:87:d5:31:f3:0b:a3:0d:f4:49:64:1b:3c:
b1:58:c8:cc:00:82:68:d1:78:e9:05:06:22:19:fd:c4:d8:9c:
b5:7d:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org