Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: VQEUv7kAfEvjLFIu5S+tyv9dsytIcEBmKHlD/J+Zls0=
Subject key identifier: CA:F2:F5:73:CA:BD:9E:C0:1C:B6:31:37:FF:A0:A6:1D:EC:C1:3F:E4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 35B7F12FD51BCB4029312EC5E29553F130BA778E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:54 +0000
ROA not before: Mon 26 Sep 2022 07:56:54 +0000
ROA not after: Mon 25 Sep 2023 08:01:54 +0000
asID: 59282
IP address blocks: 2400:d680:b4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b7:f1:2f:d5:1b:cb:40:29:31:2e:c5:e2:95:53:f1:30:ba:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:54 2022 GMT
Not After : Sep 25 08:01:54 2023 GMT
Subject: CN=CAF2F573CABD9EC01CB63137FFA0A61DECC13FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:42:5f:2a:85:d9:01:0e:7f:77:f2:76:08:
14:4b:38:d4:c9:b6:63:4c:be:a5:5b:05:5b:ac:68:
5e:f0:c6:d5:5c:c5:6c:19:41:e0:da:33:d7:f1:1d:
80:5e:df:b2:01:91:b0:3c:7f:56:41:12:84:05:1a:
68:d6:00:9d:5c:eb:03:93:96:60:42:76:e2:5d:51:
34:26:21:d4:a1:12:1a:81:04:c3:6b:d0:f3:6a:1d:
54:43:a5:71:11:29:a1:18:84:56:f8:78:5c:47:34:
3d:ec:90:f7:36:09:5b:ec:0d:ab:6e:e8:1a:1b:6d:
09:f1:cf:5c:ed:78:3f:0e:bc:0f:c5:e6:36:ab:09:
0b:d2:17:ff:f3:42:e5:1b:06:ef:46:0e:16:f3:7b:
9c:20:29:7b:3e:e0:24:9d:e9:a6:89:3a:58:17:63:
c0:b4:2c:20:28:8b:32:66:f4:82:b8:90:27:dc:89:
b2:10:ed:43:df:99:54:79:f4:f8:0d:1c:ec:3f:b4:
8f:4f:68:72:7a:13:87:1f:86:20:10:a2:13:63:b2:
14:82:bd:b5:db:77:af:76:c3:52:9b:48:31:c7:e8:
0c:b8:c5:20:75:41:c4:2b:2b:2a:1d:84:fd:e8:45:
3e:01:96:6a:9b:42:ee:a0:c3:ac:55:d9:21:e8:51:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:F5:73:CA:BD:9E:C0:1C:B6:31:37:FF:A0:A6:1D:EC:C1:3F:E4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:b4::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f6:5b:34:54:1f:5d:1f:07:42:7b:28:11:3e:c7:af:d9:fb:
db:13:00:f1:ee:87:10:53:12:c6:8f:a6:a0:19:b7:b8:81:e8:
b2:80:fc:14:c7:f4:01:0f:2a:08:3d:2c:f0:f2:b3:9d:b0:2e:
df:4e:59:bc:e6:6a:0e:7b:2f:3e:dd:8a:fa:2d:41:9b:8c:72:
9b:6e:4d:54:a2:5c:af:f4:b9:ec:d4:b6:18:c1:1f:c4:e2:c1:
8a:85:be:8a:4b:6c:c1:53:bf:a4:f8:4f:a0:f4:02:b3:cc:81:
1d:da:6e:2a:50:c7:3b:c0:5d:d9:0b:28:d9:37:51:5f:f4:32:
12:2c:f4:6e:a4:0a:9a:ce:f6:74:fe:f5:24:6b:4e:9c:09:9c:
c1:02:bf:ac:db:ed:32:7d:d6:67:84:c2:33:60:3c:d1:4e:59:
7c:c0:02:a5:6a:cc:ce:29:f1:91:de:ef:78:4d:0c:06:98:00:
14:8a:61:a4:5c:b5:a8:c6:65:1a:45:d6:b3:cb:78:fa:ac:5d:
e9:c3:2b:00:cb:41:74:a0:0f:62:5d:6f:9c:a7:f3:f3:28:13:
61:94:34:b7:b1:aa:29:c4:22:f5:81:4c:b2:3f:d6:20:2e:a8:
59:23:2f:b2:c4:4b:12:0b:82:dd:86:f5:55:9c:c3:13:fb:f6:
7f:cd:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org