Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a64373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: tYIIrbjqkkwcGb/BkbQOnHdMEhJDbdL7y5ck9/nYkdU=
Subject key identifier: 24:86:91:66:81:BC:A5:3C:D7:CD:94:CC:6A:B9:27:E0:B3:8E:95:94
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 03C3FA274B1299DA20F3C8002D2599B2097F39CD
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:59 +0000
ROA not before: Mon 26 Sep 2022 07:56:59 +0000
ROA not after: Mon 25 Sep 2023 08:01:59 +0000
asID: 59282
IP address blocks: 2400:d680:d7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c3:fa:27:4b:12:99:da:20:f3:c8:00:2d:25:99:b2:09:7f:39:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:59 2022 GMT
Not After : Sep 25 08:01:59 2023 GMT
Subject: CN=2486916681BCA53CD7CD94CC6AB927E0B38E9594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:f2:f3:cc:8d:86:f6:79:c1:0a:cd:01:e3:
c7:9b:3b:45:c6:cd:29:34:72:d2:09:01:b3:c1:cf:
2c:e5:d2:65:0a:7d:a0:e4:1e:fe:ad:74:03:46:6e:
83:9d:d7:50:9a:a9:28:f6:16:f9:0d:61:3c:12:78:
4a:c5:a7:bc:95:e9:25:23:37:ce:a0:00:dd:12:e1:
68:ae:6a:ae:13:a9:da:93:6c:cc:ac:87:9b:83:23:
08:eb:dd:2d:1b:80:ba:cc:d5:9f:47:cf:bb:d0:37:
00:1f:6c:13:e8:cf:28:49:cf:75:a9:b4:10:ff:08:
80:9a:56:9b:67:55:5f:51:f4:16:d9:16:d4:be:2f:
83:4a:cf:a5:f8:c4:2a:b0:23:18:cf:95:25:69:76:
86:62:dc:dd:a8:ba:49:16:0a:28:90:16:ad:93:c7:
c9:85:7b:2f:b6:4b:4f:2e:98:01:79:ec:b1:49:5c:
db:0d:6f:1a:72:ea:c2:5c:c5:9d:43:f9:de:35:85:
08:a8:ae:7b:c6:d7:a4:75:06:a0:bc:a7:7a:25:ae:
cd:fb:00:8b:7d:84:78:04:e4:d0:d7:20:b9:47:19:
86:0b:0a:d2:80:3f:e8:cb:61:b6:81:3c:3f:0c:db:
8e:b9:c6:4e:de:19:21:7b:67:99:e6:c2:1f:8f:8b:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:91:66:81:BC:A5:3C:D7:CD:94:CC:6A:B9:27:E0:B3:8E:95:94
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:d7::/48
Signature Algorithm: sha256WithRSAEncryption
c2:07:46:28:d9:8a:81:3c:ac:7c:0f:35:66:db:f9:46:f3:a1:
c8:bd:76:8c:6b:a0:e4:c2:f1:de:d7:17:fb:47:93:c1:91:09:
58:10:6d:2f:91:3b:c6:0b:5f:5d:e2:ed:1c:f3:de:4f:1f:49:
b5:ef:52:fa:be:3a:55:6f:af:14:cc:ff:f5:b8:8e:e7:e6:45:
00:6b:0e:da:63:dd:6f:ad:c2:96:08:41:f6:26:dd:fa:1e:70:
18:5a:60:89:3f:93:ad:2b:11:d5:9c:17:aa:a3:ae:e9:ae:44:
53:cf:d1:e6:e3:0b:3f:c7:cd:13:17:f3:0d:05:68:0b:4f:0a:
57:b4:55:e3:c1:87:17:f6:b0:cd:41:2d:b2:f8:05:f0:d0:9a:
a6:75:7d:87:62:70:6c:03:95:5d:76:f1:d7:ca:cd:14:83:08:
eb:83:67:fb:21:56:42:74:69:7f:a1:ae:46:72:3b:b4:21:29:
6d:58:dc:bb:65:ac:46:a7:ad:7f:9d:54:f5:94:95:23:9f:d5:
f4:3c:5c:2a:87:fd:c3:ec:f3:5c:b8:ef:5d:c1:4c:c6:6e:47:
18:e9:77:19:b1:17:04:b5:cd:16:ff:fb:41:c9:25:9d:36:0f:
4b:09:27:9c:c6:59:5f:00:69:28:11:01:66:3e:47:6b:df:89:
70:5e:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org