Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: pEChy4m/tPbeUoUIOsJnFoDBSbKs0H5QPWnbZ6tL8EI=
Subject key identifier: 4F:CF:E8:E5:C5:38:88:81:21:91:F1:ED:D8:BF:7A:E3:15:FB:01:00
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2C8A51E7A78450BF6B455CBDDE1999585222CE13
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:33 +0000
ROA not before: Mon 26 Sep 2022 07:56:33 +0000
ROA not after: Mon 25 Sep 2023 08:01:33 +0000
asID: 59282
IP address blocks: 2400:d680:b3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8a:51:e7:a7:84:50:bf:6b:45:5c:bd:de:19:99:58:52:22:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:33 2022 GMT
Not After : Sep 25 08:01:33 2023 GMT
Subject: CN=4FCFE8E5C53888812191F1EDD8BF7AE315FB0100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:ce:f4:13:94:82:53:23:7c:cb:42:bd:82:
ab:e6:d1:5f:f7:17:59:7d:11:70:d2:a1:e3:2d:de:
bc:c9:1d:d0:51:cf:3a:40:45:ae:26:3b:a3:35:ba:
c0:52:c8:6a:ee:47:f7:b5:de:35:2c:08:4a:e5:18:
94:16:4d:0d:74:c6:aa:9a:b5:96:02:11:ab:1c:5a:
c7:d3:b8:f3:29:af:aa:1f:dc:4a:2a:13:d9:c2:5a:
42:c0:08:bc:4b:99:d8:d7:61:1e:fc:d1:fd:5e:3b:
b8:d6:5a:91:72:b9:fa:48:8c:05:d2:4f:c3:7a:fc:
de:aa:32:40:88:42:1c:9e:b2:11:21:f4:b9:b2:c8:
a3:81:55:8c:bb:05:96:5f:b4:d8:da:a7:30:8f:77:
b8:a0:b4:39:41:10:8b:2c:68:44:cc:8c:3d:6c:81:
35:0c:71:65:d9:74:46:12:67:51:57:ff:e8:84:be:
cf:96:e2:fd:08:03:e6:33:ce:f7:34:82:e7:2b:19:
8f:3a:c3:f5:a1:a9:ae:f5:e5:bd:89:73:77:cd:7d:
b4:2d:f6:60:bd:7b:91:12:f3:07:54:99:91:6b:d2:
49:f8:d4:e0:d8:84:ec:e2:f0:ff:f8:c5:c3:3b:2f:
88:06:49:86:77:85:3d:3b:57:fe:a1:89:0a:60:2e:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:E8:E5:C5:38:88:81:21:91:F1:ED:D8:BF:7A:E3:15:FB:01:00
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:b3::/48
Signature Algorithm: sha256WithRSAEncryption
58:96:22:6a:dc:15:7b:b9:2b:b4:75:9e:1a:62:3d:a0:af:49:
68:9f:0f:5a:8e:6b:ba:a0:bc:34:5b:1d:e7:23:98:bf:ed:c5:
1a:15:1d:ad:c8:9d:64:73:09:ce:3f:5b:11:fb:1f:45:9f:ca:
f4:5e:7b:3f:f8:39:ce:f7:4c:4c:b2:cc:e6:29:3f:11:84:cb:
99:77:48:b6:36:1d:fe:e0:6f:d7:ff:5a:b7:61:e9:50:1a:0a:
51:ca:5a:61:5b:db:d9:92:fe:10:65:81:b0:dc:86:70:a7:46:
0d:32:9d:55:1b:c7:9d:6b:db:d9:c0:e7:b0:08:f0:38:95:2c:
79:ab:b0:d3:cb:b6:6e:db:6a:15:d5:d8:7b:3d:11:7f:3b:0a:
e8:27:6f:fa:52:39:73:bc:43:74:a3:b1:66:2d:a5:df:62:19:
1b:c3:46:4c:85:cc:8c:23:7b:f4:aa:a3:4a:bc:03:4c:c1:08:
c9:e6:bc:c5:1f:21:a7:07:13:7b:d1:4d:86:a7:56:69:52:a0:
c7:5c:a7:27:d1:e1:16:96:55:97:9f:fc:a2:8f:68:46:48:56:
c5:75:cc:5a:21:61:e8:52:f6:0f:ab:ed:79:3f:71:d2:a7:3e:
c9:48:88:4b:79:72:e7:13:5b:36:07:75:03:a6:19:67:d2:77:
29:4d:99:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org