Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a63393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: qpaXWwKI/LrhrVzMxhtd38mruvzyxJmHieUCQyIVn+4=
Subject key identifier: 36:D2:7F:AD:48:81:CE:92:DA:BD:C4:08:B9:88:67:BA:E6:8E:6F:E9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 361DDA1142FB813072B44E19072FD78058CC3BD4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:53 +0000
ROA not before: Mon 26 Sep 2022 07:56:53 +0000
ROA not after: Mon 25 Sep 2023 08:01:53 +0000
asID: 59282
IP address blocks: 2400:d680:c9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1d:da:11:42:fb:81:30:72:b4:4e:19:07:2f:d7:80:58:cc:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:53 2022 GMT
Not After : Sep 25 08:01:53 2023 GMT
Subject: CN=36D27FAD4881CE92DABDC408B98867BAE68E6FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:86:82:aa:b5:d9:ae:f3:39:6a:9a:f2:9d:
b9:94:7a:7f:30:b4:d4:4e:45:54:0d:a1:1c:17:a9:
44:45:6f:61:8e:4c:c5:8b:b1:45:c7:84:b0:b5:64:
d4:79:0b:c2:28:b5:a4:d5:7a:c1:b1:10:13:94:1b:
fb:5f:66:c6:a4:82:bc:29:2f:2d:ca:72:23:53:16:
06:9d:b8:a4:35:70:00:73:94:4b:5e:cc:ae:81:66:
cc:1e:a2:b6:16:d5:8d:0b:4a:09:9b:8d:1a:58:e8:
2f:ed:50:18:12:1f:43:4d:4a:46:c0:f7:8c:27:f5:
ee:23:50:95:c8:06:05:76:24:01:20:66:53:60:32:
cc:26:d9:5a:fd:c9:8c:85:47:fe:83:50:6b:b1:46:
81:7f:87:d3:83:a5:90:cf:b9:9c:b7:d3:85:f8:1d:
a7:81:6b:87:40:f1:a9:17:75:34:da:48:51:56:cf:
00:86:e5:97:14:bd:d2:c7:12:d2:c8:ce:26:a5:9a:
39:02:a3:fa:f8:8f:ec:b1:20:92:4b:7e:4d:aa:0b:
8c:f8:c8:dc:0e:da:9e:dc:a2:b4:3c:d7:fe:01:71:
22:07:22:81:60:01:3b:13:e9:bc:71:d7:2e:76:55:
d0:94:44:90:94:c1:03:a4:dc:42:4f:1b:6c:fd:e1:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:7F:AD:48:81:CE:92:DA:BD:C4:08:B9:88:67:BA:E6:8E:6F:E9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a63393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:c9::/48
Signature Algorithm: sha256WithRSAEncryption
cc:76:a6:36:46:4a:18:5c:aa:a5:da:13:29:3d:79:72:ac:7b:
4b:b0:57:ba:cd:7b:f3:54:c7:06:53:20:23:0c:c9:05:97:29:
c4:65:89:8d:ec:e7:0a:d4:82:83:10:dd:96:46:e5:1b:6e:f7:
6b:ec:c1:66:d6:ce:6c:0d:d2:3b:30:92:a9:44:ca:9c:0c:b3:
6c:d1:63:0b:32:98:73:ce:a2:8a:3b:ce:ba:f9:3b:79:51:93:
12:a7:a4:9f:f4:5f:3f:17:90:f0:a2:d0:7a:e1:87:65:d1:93:
3f:46:33:fd:66:47:f5:0f:f4:10:35:63:f2:e7:bc:12:f4:31:
63:34:dd:e3:35:35:4e:7e:14:d0:e7:7c:ea:63:21:9e:78:8b:
03:ed:20:e1:19:dd:e1:e2:7e:35:35:2c:4d:49:2e:79:e4:8b:
96:04:a9:84:12:a2:4c:e5:47:f0:7f:44:3d:fa:ea:42:fb:3b:
14:93:fb:8f:98:20:d7:36:fa:9b:e6:d3:b1:4f:93:2d:51:80:
15:83:e8:5b:99:03:66:b5:94:29:27:3c:a7:ed:f0:ba:c9:fc:
17:38:4f:64:a5:a8:38:40:aa:f1:02:6a:2f:2a:58:84:bb:86:
a6:98:cc:a6:20:2b:13:5f:c6:62:31:f0:ab:a9:46:65:2f:31:
ab:e4:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org