Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Gaeg0gLmlYbh5qg9cn4Y4t7tcxXn0Tp4zW+XLofjK6Y=
Subject key identifier: 4A:12:A2:74:4D:34:39:EF:9F:71:33:84:F5:9C:C6:9C:D9:4B:73:F6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2BE268AA1C3C325829C10C3EF9D8325FC6F07C63
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:19 +0000
ROA not before: Mon 26 Sep 2022 07:57:19 +0000
ROA not after: Mon 25 Sep 2023 08:02:19 +0000
asID: 59282
IP address blocks: 2400:d680:a7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e2:68:aa:1c:3c:32:58:29:c1:0c:3e:f9:d8:32:5f:c6:f0:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:19 2022 GMT
Not After : Sep 25 08:02:19 2023 GMT
Subject: CN=4A12A2744D3439EF9F713384F59CC69CD94B73F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:0b:25:71:c9:13:51:43:f0:9b:a9:57:b5:
86:1b:72:db:9e:a7:ea:b5:90:86:e0:f9:ee:37:87:
78:e1:32:a5:88:15:af:06:45:d3:b7:87:90:7e:43:
9d:3d:57:e7:e4:fd:fe:35:cd:03:77:dd:a1:a7:bd:
05:d9:66:bf:76:fd:d0:72:2a:16:f3:0a:f9:47:ff:
a4:ff:40:25:05:04:d7:04:e6:f6:85:7e:23:ff:21:
42:68:8e:ea:b5:fd:8b:4a:33:a5:91:13:76:06:14:
26:25:bb:31:1a:c6:57:31:2d:f2:43:f8:62:46:ac:
cf:31:0c:25:2c:bb:35:76:c2:57:d0:d7:16:95:d7:
92:a5:ea:fc:0c:12:60:fe:f2:91:6e:f5:d3:68:f2:
9d:e9:3e:3d:e9:5c:0f:09:86:19:9f:af:e3:cf:36:
c1:08:fd:3e:14:d0:17:a1:8f:10:08:d7:33:02:bb:
21:45:7c:59:6d:9b:b6:9d:0e:70:bc:2a:c3:92:56:
b3:c9:ac:e7:b2:04:93:97:a7:c8:50:1b:ca:49:15:
fc:41:04:cd:54:ae:82:d2:0c:23:52:0f:63:e6:9d:
aa:de:aa:e3:f2:28:41:2d:34:5c:18:a7:9f:c8:e4:
4b:58:33:93:42:ef:50:92:50:f6:96:ec:20:66:ad:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:A2:74:4D:34:39:EF:9F:71:33:84:F5:9C:C6:9C:D9:4B:73:F6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:a7::/48
Signature Algorithm: sha256WithRSAEncryption
a0:7b:19:ef:bf:df:f7:a3:c4:cd:2f:99:b7:70:83:2b:e0:4f:
f7:a9:4f:7d:49:db:48:11:d2:15:e0:21:51:a9:a7:0e:c0:10:
78:79:18:11:24:f9:60:51:06:71:d2:66:0d:07:cd:47:17:8b:
7e:33:db:37:48:49:77:50:91:9a:76:90:f3:b3:15:b3:14:08:
83:de:58:24:77:82:6e:04:4b:63:b9:98:ce:80:6d:bb:d7:e2:
2d:d8:95:48:25:03:9f:54:44:ad:9f:91:c0:8c:88:27:49:dd:
48:3c:ba:9b:38:dd:2a:1d:8c:98:fa:06:2f:4f:4e:ec:a9:e6:
d3:00:3f:1b:84:27:33:5a:56:22:6f:93:c3:0d:99:50:8d:b1:
10:c7:0b:34:33:9a:87:f4:a6:ab:36:e6:40:53:4d:3e:dc:67:
a1:ef:29:96:dc:4c:ef:92:3a:05:b5:a3:38:a1:fa:bb:28:e8:
51:8f:0b:84:9b:7d:d2:54:3a:f8:d1:8a:0f:d7:56:af:6c:10:
12:63:57:62:fe:ce:17:01:f3:e7:50:e6:b3:bb:72:ad:7e:9a:
10:6b:0a:ed:b9:e9:e8:75:29:e0:e8:48:f6:75:8f:af:81:79:
12:81:53:fc:67:d5:91:fc:a9:dd:83:da:d3:ef:15:90:32:b7:
a0:a4:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org