Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a39643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 9Y1N791CpJmkKCBc70WdL9f+7FkdSQaApRCu/wgp2kY=
Subject key identifier: AB:7F:D1:79:85:1D:71:F2:EE:C1:59:1C:4A:AD:69:9A:06:B4:81:86
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 48FEFCDDAEDD5BCB8B5703131A456D3683853D61
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:25 +0000
ROA not before: Mon 26 Sep 2022 07:56:25 +0000
ROA not after: Mon 25 Sep 2023 08:01:25 +0000
asID: 59282
IP address blocks: 2400:d680:9d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fe:fc:dd:ae:dd:5b:cb:8b:57:03:13:1a:45:6d:36:83:85:3d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:25 2022 GMT
Not After : Sep 25 08:01:25 2023 GMT
Subject: CN=AB7FD179851D71F2EEC1591C4AAD699A06B48186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:74:98:3f:30:02:65:53:f5:c4:c9:eb:72:
25:b8:4d:e8:4e:73:e9:58:8c:66:da:ef:60:92:ad:
76:4b:f2:fe:b8:e4:af:5c:cd:d8:d2:b7:de:0e:08:
55:3d:36:79:1c:f9:98:ba:5e:aa:ad:43:24:6c:6b:
09:a8:f0:1c:fa:5d:2a:80:15:41:a2:18:b8:4f:dd:
c7:fa:61:5d:e4:30:9f:af:42:d4:07:e9:5e:a8:8a:
4e:7c:43:a4:1b:f2:78:4b:64:d2:20:0d:95:ad:8f:
5f:40:dc:71:52:d7:ef:8b:c5:ef:67:f5:18:d0:98:
7a:64:4a:3f:e6:c3:9c:c9:bb:bf:4d:08:1d:d1:05:
c6:82:52:96:1f:45:f1:88:6b:46:44:24:80:e7:5d:
b5:f6:33:8c:a8:fa:77:4a:7d:16:08:d0:9c:b9:39:
a3:19:d5:bd:03:51:ac:e8:da:71:6c:6f:ac:d8:ba:
e2:88:ff:5c:8b:41:a6:6a:50:95:39:18:52:7d:11:
68:6d:66:a8:72:16:da:e2:b3:5d:d2:a7:16:aa:c1:
0e:52:bf:21:7b:61:c3:df:b0:be:8b:9b:a2:9f:71:
1b:73:97:09:99:f5:78:8b:ae:07:54:44:35:2f:2b:
be:e2:a4:e4:bc:81:e4:c0:79:09:11:78:ca:e4:4a:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:D1:79:85:1D:71:F2:EE:C1:59:1C:4A:AD:69:9A:06:B4:81:86
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:9d::/48
Signature Algorithm: sha256WithRSAEncryption
2f:12:b7:76:56:3f:02:fc:eb:11:5b:0e:42:ce:8d:a3:b3:2e:
70:ff:46:72:55:0c:05:c4:65:bb:4b:a8:54:5e:20:14:55:dc:
ae:3f:29:a2:32:e4:9c:4c:3a:cb:17:2e:2b:5d:8d:6b:ab:f5:
30:f5:1c:d6:38:00:5a:76:c7:70:82:13:be:b2:3c:70:94:de:
c5:43:6d:92:0d:45:ea:97:7b:46:16:d5:0b:d1:88:b5:f3:10:
ce:48:7b:43:b2:e6:7d:0a:a4:96:c6:06:95:21:90:25:a8:ab:
3b:02:a4:3d:10:59:2d:dc:9b:ad:12:cd:99:90:38:21:8a:17:
82:f9:93:c4:39:7c:d1:91:41:d8:16:f3:85:ae:80:e3:1c:4b:
39:bf:7e:d1:10:61:ac:8b:07:a9:f0:fb:8e:25:c6:87:b8:68:
76:4a:34:1a:cf:7c:e1:d2:27:0f:83:6f:67:0d:83:e6:9a:87:
ae:13:99:5d:95:4b:9f:c3:0f:55:60:5f:81:3e:79:d8:c6:bd:
30:65:63:6f:87:2e:d0:f9:24:a1:c1:1e:1a:a0:9e:c2:21:61:
a3:4b:3d:66:c3:9b:00:69:49:90:a3:19:6b:45:f3:d0:25:fe:
ca:86:68:6d:47:01:80:7b:83:b5:18:0c:27:85:ff:48:9a:f6:
aa:46:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org