Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a63333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 9b+k+Qsxaz83uLqkbJxuHvaNCHXu/2MzutQJ2Gn7pZ0=
Subject key identifier: 38:D3:DE:0B:34:08:3D:A0:63:C0:38:DA:B3:30:91:A0:33:29:82:F4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 44C6EA033C3E48DADC5FFD0012BD5F88B8C5C46F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:29 +0000
ROA not before: Mon 26 Sep 2022 07:56:29 +0000
ROA not after: Mon 25 Sep 2023 08:01:29 +0000
asID: 59282
IP address blocks: 2400:d680:c3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c6:ea:03:3c:3e:48:da:dc:5f:fd:00:12:bd:5f:88:b8:c5:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:29 2022 GMT
Not After : Sep 25 08:01:29 2023 GMT
Subject: CN=38D3DE0B34083DA063C038DAB33091A0332982F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:16:16:ac:a0:1e:e5:eb:11:d3:b3:af:e2:
bc:b5:49:2c:c1:99:63:2c:2a:fb:54:87:71:9a:e7:
1c:7e:28:79:af:80:7e:81:d8:8b:fc:fc:12:98:9c:
e2:dc:06:59:e0:12:b3:94:3e:e5:51:8d:11:6e:4a:
48:d3:93:e1:36:1d:9a:59:9f:12:48:19:be:9c:95:
c7:eb:ac:eb:49:c8:ef:1f:8d:53:cc:c5:a5:e6:19:
64:f2:99:77:a2:a1:b0:8a:14:96:d0:e0:5f:1a:89:
df:59:3b:34:ae:69:a9:6c:3a:e8:5a:7e:6b:84:87:
18:b6:e7:b3:85:b8:3f:1c:6e:fd:26:b9:56:0d:ec:
ba:4d:15:19:d9:d4:b2:02:2c:fd:1a:54:25:ed:6c:
c7:34:7d:eb:f7:5c:c0:32:11:9c:00:5d:a0:36:f1:
20:1d:f9:f4:52:3f:57:12:b5:30:27:f6:ed:32:c4:
9c:95:ab:54:27:d6:50:37:a4:31:d4:7b:97:e0:b4:
0f:6e:38:60:37:3c:0b:e4:62:89:ef:88:89:e8:61:
27:40:b9:b5:14:38:6b:31:55:14:07:d5:c8:20:fe:
3b:dc:a1:31:63:08:9f:e8:87:83:5f:b4:a6:57:aa:
b9:92:88:f6:28:0c:34:cf:37:20:cc:fa:6b:75:af:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:DE:0B:34:08:3D:A0:63:C0:38:DA:B3:30:91:A0:33:29:82:F4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:c3::/48
Signature Algorithm: sha256WithRSAEncryption
11:75:01:1c:85:d5:e5:af:83:ed:18:e0:92:79:e3:02:dd:8f:
74:fb:d6:45:39:41:2f:bc:95:ab:48:67:42:42:e5:27:06:3e:
65:ad:57:13:08:4b:5e:b1:48:ae:9c:e9:de:76:7a:47:1e:35:
2f:c0:4a:16:a4:f6:e9:a5:98:64:ca:fe:11:b4:6e:84:a2:81:
68:a5:72:8c:4c:bf:85:34:49:5f:11:4e:fe:01:7c:b0:f4:2e:
59:81:94:b3:0f:4e:a2:15:33:34:3f:65:4f:77:aa:f0:74:9a:
77:3b:bf:8d:b9:eb:6e:bb:cb:34:4e:5c:b0:b7:57:50:96:99:
26:c3:4b:ed:2a:07:dc:42:28:0a:1d:d9:65:1d:c6:b9:bf:a2:
b6:14:d9:db:bf:28:92:ae:9e:09:c4:f7:d5:d9:15:5a:03:19:
ce:df:de:e5:d6:bf:ad:47:15:25:7e:95:30:17:9f:07:b5:15:
31:f7:2a:5f:9a:fe:31:65:a9:b2:f5:73:78:13:68:ba:34:9e:
bd:d1:25:21:f1:9e:6b:74:13:5a:28:74:3f:be:14:40:be:2c:
91:7e:c9:28:d0:67:e5:bd:d8:d6:12:fd:bd:c7:a8:5e:f7:9f:
01:ec:8c:4b:3b:55:fd:f9:dd:2b:fc:f9:13:17:3e:12:15:02:
a2:7b:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org