Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Z3HKklO4HScG+2rmnEdpzd2T3Hk1nCFWr8JXDFl0ljs=
Subject key identifier: 3C:F3:08:44:D1:2A:0A:E4:82:A5:57:82:C4:73:E9:35:4A:A6:D1:82
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6D37A8064CB1983DD063D55C7D59D9A9FD604A93
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:40 +0000
ROA not before: Mon 26 Sep 2022 07:56:40 +0000
ROA not after: Mon 25 Sep 2023 08:01:40 +0000
asID: 59282
IP address blocks: 2400:d680:a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:37:a8:06:4c:b1:98:3d:d0:63:d5:5c:7d:59:d9:a9:fd:60:4a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:40 2022 GMT
Not After : Sep 25 08:01:40 2023 GMT
Subject: CN=3CF30844D12A0AE482A55782C473E9354AA6D182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:e6:87:93:89:9c:6d:53:20:19:68:af:a5:
a5:50:49:e0:bc:aa:86:f3:d8:6b:0a:e9:e2:72:3d:
7a:41:39:ff:2d:ae:b7:e8:5f:e8:37:59:95:65:7c:
92:9d:24:dc:76:4e:f1:ca:b0:2a:f7:eb:e6:a8:3c:
1d:02:b7:2b:f4:41:bf:6b:9e:d0:ec:18:72:1a:22:
e2:06:b5:b6:d6:b8:40:28:4c:37:0b:bd:52:df:35:
17:2c:36:df:76:73:19:a8:29:b1:75:ef:ce:19:df:
3b:18:3b:cc:be:41:aa:a8:5a:b9:9b:90:30:5b:a5:
8f:00:ad:86:e2:f3:fc:6d:55:dd:a2:7d:f7:93:3b:
1d:bc:3e:30:c5:1e:02:d9:1c:c2:6a:71:82:b2:1e:
b9:78:42:03:dd:10:03:b6:6a:c7:60:37:cc:63:52:
ca:a0:88:d8:a5:5b:e9:02:53:4f:d3:d6:5c:37:f4:
63:f6:ef:f5:5d:58:e8:40:ee:94:d7:bf:41:fa:05:
fa:c9:08:d1:5a:c7:27:9d:5f:7f:ed:73:74:5e:c9:
6e:0e:00:7c:37:b7:74:3d:a4:46:ea:c5:28:f3:e2:
b4:3b:91:3e:8c:2a:39:16:fe:b6:8d:d8:d1:ff:cc:
6e:24:78:ea:20:82:e5:10:b7:0e:c7:3d:6d:1f:88:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:08:44:D1:2A:0A:E4:82:A5:57:82:C4:73:E9:35:4A:A6:D1:82
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:a0::/48
Signature Algorithm: sha256WithRSAEncryption
a4:dc:6b:a3:e6:58:df:e1:dd:81:56:61:7a:cc:93:c9:a3:35:
c6:05:02:78:9e:20:ad:d9:ad:83:5f:30:0c:3e:16:ae:8a:33:
ac:ca:94:90:2f:10:e0:a3:2a:81:06:3c:9c:f8:a5:ab:b6:3f:
ec:3c:68:54:82:d5:25:d6:41:03:5d:03:c0:4d:11:6a:e5:95:
84:38:b2:af:19:75:51:11:2e:41:3a:51:24:97:69:86:cc:55:
5a:41:8c:c8:e1:7f:5f:73:72:76:11:03:08:46:20:3c:63:ba:
fa:0f:7b:97:bb:6c:fd:c9:53:cb:b2:f8:db:f1:62:ff:1b:36:
50:01:94:19:9c:cb:07:d1:88:10:28:64:33:70:89:15:e5:93:
8e:53:42:f1:b7:45:4f:81:33:ad:d6:c5:db:cf:92:c3:10:48:
30:0c:26:96:61:53:df:0a:e1:b5:39:da:97:88:06:a6:50:84:
01:55:d4:4e:d3:62:86:96:7d:55:31:b6:4f:fc:7b:97:d4:b4:
64:d3:3a:e3:f0:34:49:91:03:ad:88:bf:7d:14:40:31:61:e8:
8f:0f:49:87:06:ed:e4:63:a9:3b:3d:8d:37:52:c0:ab:33:f8:
03:45:5e:17:6e:8e:53:43:a9:c3:77:51:31:2c:ab:67:22:93:
cd:92:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org