Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0jXagIdgDbYXeIrhiGdAXz2K8cAsBUBLD/L/8tn0zv0=
Subject key identifier: 09:62:43:7A:A1:CD:56:C8:1F:82:9A:30:14:4B:E3:A6:A6:CF:71:F7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0FA77B93C64112B46EACAE6E018097F5D74910B3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:45 +0000
ROA not before: Mon 26 Sep 2022 07:56:45 +0000
ROA not after: Mon 25 Sep 2023 08:01:45 +0000
asID: 59282
IP address blocks: 2400:d680:a5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a7:7b:93:c6:41:12:b4:6e:ac:ae:6e:01:80:97:f5:d7:49:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:45 2022 GMT
Not After : Sep 25 08:01:45 2023 GMT
Subject: CN=0962437AA1CD56C81F829A30144BE3A6A6CF71F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:b0:af:ab:35:31:11:34:b0:4f:56:00:62:
a2:e7:0c:ef:5d:8f:87:8a:23:78:4c:4b:4a:e4:6d:
37:90:84:3e:4f:e8:ce:89:1f:1e:37:37:9b:71:7e:
25:82:c1:30:fd:9f:59:9e:76:a0:23:33:43:9d:20:
35:29:58:66:52:e0:db:46:07:a4:10:a1:37:5e:e9:
d8:9a:df:ca:e2:05:d6:e3:61:f1:93:e3:c5:d6:bd:
43:d1:66:f6:00:72:08:61:5c:e5:dc:a5:f0:b1:e5:
ee:28:ae:d5:06:68:32:c9:2f:ae:42:2f:91:d9:d1:
d8:46:9c:c2:a0:9b:fc:95:34:7c:d3:f5:2e:f6:9c:
29:93:27:9c:5b:1f:14:df:27:9c:b1:45:76:c8:f7:
79:63:f4:48:b3:f7:57:56:cc:b8:cb:f7:90:a9:69:
61:f6:3f:64:44:91:86:52:f7:d7:ed:7f:61:63:99:
95:2a:ae:93:ae:53:98:15:6f:0d:d0:29:25:a1:57:
db:23:c3:9d:86:8a:af:55:57:15:dd:57:a1:d9:ca:
0f:d3:da:37:6e:72:16:d4:36:25:ec:da:ca:e4:84:
69:42:c4:6b:55:75:04:fe:bd:0a:25:45:00:f5:3f:
bc:a9:65:b8:12:a4:92:ae:bc:84:70:b0:6c:40:9e:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:62:43:7A:A1:CD:56:C8:1F:82:9A:30:14:4B:E3:A6:A6:CF:71:F7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:a5::/48
Signature Algorithm: sha256WithRSAEncryption
72:f2:6b:d0:f5:a2:e9:5b:ec:64:e8:75:a9:08:2b:34:a0:81:
29:8e:b5:4b:d0:00:2c:ec:7c:04:fc:55:25:f3:81:8e:3a:33:
d3:55:4a:53:31:be:97:1b:a4:d8:19:26:76:60:55:24:3f:c8:
62:6a:df:44:d0:a3:50:46:18:0d:10:62:56:dd:46:7b:bb:b2:
d7:d4:06:aa:a1:b9:02:be:77:7c:15:0c:b0:6e:92:ce:5b:0b:
46:8d:67:f3:b7:a0:aa:7f:32:a4:7a:61:f9:f6:dc:b4:7b:d7:
a3:7d:66:7b:54:e4:6b:86:d8:67:50:a5:d8:99:18:8d:31:f9:
0a:ea:f3:02:a5:8a:ac:23:3a:ff:84:88:2a:b9:6e:0a:51:95:
e7:5b:1b:af:fe:bd:8e:d3:4b:04:1a:c3:4b:49:b8:6d:e8:b8:
3d:6f:a7:26:c2:5b:72:6b:bc:6d:b4:b0:58:e9:86:09:22:fb:
b6:ea:9b:3d:68:c5:17:1b:a9:ac:1e:57:5d:e8:40:fa:ae:69:
c1:c0:b6:02:61:4f:a9:c2:e5:75:26:8b:28:9f:6c:b7:ea:cf:
aa:aa:f1:e8:c5:14:30:44:a7:95:34:c6:33:be:fd:0f:3f:29:
d8:e6:db:e1:c8:1e:c6:3b:b8:32:3b:26:b1:05:46:12:41:57:
6c:a2:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:05 2025 by rpki-client