Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3332203d3e203539323832.roa
File: 323430303a643638303a3a2f33322d3332203d3e203539323832.roa (raw, json)
Hash identifier: uS2TdgW8VvmvKZGxpTvRSNJkuG/vNu9GHWn2DyKWdnI=
Subject key identifier: 2B:07:C4:0C:BC:12:86:05:3B:9C:A8:5F:6A:02:19:22:D6:5C:AE:7B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 66B8664DD43E535CAFB4E98EAF7DA1322B7978E5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3332203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:18 +0000
ROA not before: Mon 26 Sep 2022 07:56:18 +0000
ROA not after: Mon 25 Sep 2023 08:01:18 +0000
asID: 59282
IP address blocks: 2400:d680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b8:66:4d:d4:3e:53:5c:af:b4:e9:8e:af:7d:a1:32:2b:79:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:18 2022 GMT
Not After : Sep 25 08:01:18 2023 GMT
Subject: CN=2B07C40CBC1286053B9CA85F6A021922D65CAE7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:11:99:f7:de:83:a5:cc:6c:35:02:1c:f9:
37:75:f0:50:5a:3f:6e:a6:76:10:fd:99:fd:b8:56:
82:06:57:91:bf:08:75:8f:88:43:45:69:c1:20:40:
74:83:cf:26:92:e0:ce:dc:2f:17:1e:5f:52:6f:59:
ce:fc:06:4b:16:7a:35:19:62:54:1b:fe:c6:db:75:
08:b3:37:b6:8f:6e:9f:78:ad:e5:a2:5a:c0:a5:c4:
94:98:e8:24:94:d2:b7:c7:35:ef:5f:1b:b2:47:d7:
b7:6c:08:d3:0d:c8:31:9d:5b:09:dd:f2:43:7d:dd:
b8:f1:63:b0:cf:6a:e5:f8:1c:07:2a:ea:d0:58:92:
40:88:24:aa:b1:38:71:0c:2d:02:27:90:17:0f:25:
0b:29:8c:87:6d:4e:3e:b8:40:f2:ca:75:bd:a2:14:
b2:4f:8e:dc:54:0b:06:03:f6:a3:63:f7:36:d2:36:
42:9f:93:ec:33:a4:5e:52:6d:77:dd:bd:68:d5:89:
4e:8f:a5:78:d5:81:e6:49:a1:51:07:bb:41:87:ff:
04:23:c4:ad:c9:2c:81:a1:7b:87:c2:df:80:2e:f7:
f8:4d:5e:9f:dc:97:93:d4:20:24:fd:f4:65:5b:43:
29:74:b2:85:ed:60:ba:3c:19:4e:d6:28:64:27:cc:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:C4:0C:BC:12:86:05:3B:9C:A8:5F:6A:02:19:22:D6:5C:AE:7B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3332203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680::/32
Signature Algorithm: sha256WithRSAEncryption
27:dd:a9:20:45:4d:43:59:8d:08:9f:21:99:ae:d7:1c:79:2a:
a0:e8:9c:c8:d6:da:5e:10:ab:9e:00:b4:d1:46:62:0d:2e:bc:
13:bd:8d:0a:f8:85:27:47:57:9d:e0:ee:10:b2:96:c9:f4:22:
ff:06:a0:e8:1a:82:be:94:19:3c:8a:64:e6:ac:c1:20:11:48:
82:6e:eb:4c:92:e4:85:aa:a2:01:6b:f3:76:19:0a:43:d9:f6:
71:bb:36:29:c8:4e:80:3b:e3:87:2f:97:7c:af:9f:91:2a:42:
87:39:45:87:05:ae:6c:a2:d4:43:de:4c:4e:ec:f3:58:79:38:
6d:46:65:19:8f:3c:d6:b6:d1:08:79:3e:f5:a2:a4:4d:a1:7b:
7e:72:6e:02:ac:b5:a3:51:cb:5e:7b:4a:e7:c4:33:fc:b3:bb:
c6:fd:54:47:64:54:a4:d6:64:2b:25:69:6d:f4:a3:0f:eb:f4:
2c:7a:46:de:ed:3b:24:0f:87:69:8c:c7:f1:b1:79:c3:86:08:
a0:1f:11:3b:d0:b7:20:9a:ab:51:7a:9b:cb:78:2c:02:f1:57:
8d:8d:f5:2e:cc:e8:19:df:01:65:49:ad:c2:9a:69:0b:27:df:
46:2c:32:4d:0b:06:b3:2e:fd:b4:7a:68:4a:4f:3a:b7:a5:0c:
bb:6b:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org