Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a63383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OaTzNHV7e7ZsO0svItJ0aNMYXIVl6gtDd7E6Eb3HhFk=
Subject key identifier: 86:63:8E:FF:0C:3F:CF:FA:F8:F8:E2:66:06:CC:12:0D:D1:51:66:E1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 27A0ED55AB475CBB3268993BE35323C9A46951EF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:32 +0000
ROA not before: Mon 26 Sep 2022 07:56:32 +0000
ROA not after: Mon 25 Sep 2023 08:01:32 +0000
asID: 59282
IP address blocks: 2400:d680:c8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a0:ed:55:ab:47:5c:bb:32:68:99:3b:e3:53:23:c9:a4:69:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:32 2022 GMT
Not After : Sep 25 08:01:32 2023 GMT
Subject: CN=86638EFF0C3FCFFAF8F8E26606CC120DD15166E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:b1:1d:13:88:7c:d6:8b:d1:fd:f1:7c:cd:
bd:08:f5:1c:ce:07:32:03:bf:4a:25:ae:7c:49:54:
c8:43:32:38:37:e3:41:85:79:5b:71:71:c5:67:ea:
af:5c:9f:8e:2d:e7:12:d3:f6:e5:30:61:d3:1e:6b:
72:5d:3f:eb:3d:26:14:3e:72:c5:41:a4:01:bf:73:
78:96:27:da:98:c4:54:fe:98:05:2d:57:a7:60:b3:
b3:ea:07:1c:61:2c:e5:94:67:77:71:4e:32:a7:ff:
93:cc:28:d3:7d:7e:dc:ed:7a:1c:e7:06:42:4c:ab:
88:85:7c:32:21:3e:e6:df:2c:74:ae:8f:86:9d:17:
02:61:4f:33:d6:0a:04:88:c1:ec:75:d5:2b:16:33:
e6:14:99:02:ef:60:04:e1:d9:84:5b:e1:b4:55:f2:
70:74:38:71:ef:53:ac:ef:a2:13:a0:95:eb:de:57:
e1:28:7a:bf:4a:e1:4f:0c:03:21:02:09:03:05:30:
43:ec:63:f8:26:80:75:1e:bc:ae:0c:dd:78:e6:94:
ad:11:02:23:fb:2c:3c:69:3d:2c:53:62:ed:ad:b3:
19:94:6a:fe:30:db:cd:d4:e1:26:1d:76:23:d4:b0:
b6:e3:19:fa:37:b9:e8:9f:c0:0b:64:cc:12:37:ac:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:8E:FF:0C:3F:CF:FA:F8:F8:E2:66:06:CC:12:0D:D1:51:66:E1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:c8::/48
Signature Algorithm: sha256WithRSAEncryption
4d:30:5f:9e:8e:c7:53:ac:27:4c:17:2f:f8:5c:1b:52:05:87:
cb:0c:18:ff:5a:17:0a:b8:3b:4c:10:10:06:96:22:e4:b3:5e:
9a:fe:d2:d0:cd:a7:02:89:ba:c6:c4:c6:78:0d:86:0b:55:46:
6c:46:7d:4d:f5:84:73:b5:84:78:6b:82:e1:91:f0:db:13:7f:
79:e9:cc:2d:70:fb:42:a7:b3:07:9f:d2:4a:8c:1c:ec:f3:d7:
fe:ac:3b:ab:22:de:e9:82:48:ef:4a:39:16:c3:f0:27:23:b6:
86:4e:af:bc:c1:77:b1:a5:70:3f:cd:f9:c0:c4:e8:8d:16:60:
61:0b:f6:3e:46:06:20:47:d3:e4:da:34:18:4b:75:2f:88:89:
8e:8a:29:71:67:6e:3f:43:5d:0e:e4:20:ae:83:7b:11:93:af:
bd:81:d6:87:ac:05:7c:bc:f4:37:e0:5d:a0:16:e2:74:82:58:
d2:02:36:58:3f:b9:b9:31:57:15:ee:48:b7:00:e5:89:07:ed:
41:46:ad:c8:ba:16:2e:29:dc:64:51:8b:f3:ff:0a:3b:c4:ae:
6f:43:77:f4:af:9b:29:21:4e:ae:61:ff:dd:7f:92:0a:82:7e:
5c:77:dc:ff:89:2f:4e:b6:8b:70:95:34:67:9e:c7:2b:38:af:
28:0f:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org