Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: yQ2j0e24rIz/2MjetG0v/FqGzXPIhY9+SFKrlQ52gNc=
Subject key identifier: F4:C9:B3:05:80:21:BA:F2:C1:5C:69:D6:64:71:E3:87:52:6E:C8:35
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 213462D6257EC5F3C786A15227EAB2103CCD1E62
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:20 +0000
ROA not before: Mon 26 Sep 2022 07:57:20 +0000
ROA not after: Mon 25 Sep 2023 08:02:20 +0000
asID: 59282
IP address blocks: 2400:d680:e4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:34:62:d6:25:7e:c5:f3:c7:86:a1:52:27:ea:b2:10:3c:cd:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:20 2022 GMT
Not After : Sep 25 08:02:20 2023 GMT
Subject: CN=F4C9B3058021BAF2C15C69D66471E387526EC835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:60:e8:ec:d0:c5:87:6d:87:c3:f0:bc:d0:
00:b0:30:09:25:8d:c3:77:54:d9:e4:98:a9:07:80:
73:6b:ef:74:44:fc:4f:8c:62:68:a8:b5:c8:da:00:
35:38:68:a2:13:5e:df:42:2f:20:c1:6d:dc:69:4c:
66:00:35:18:e1:b0:68:8b:fc:b1:ea:40:22:93:43:
66:99:07:75:3e:2b:c7:d9:4a:b8:31:d1:ff:69:1b:
b7:a8:51:83:fc:f0:d2:96:0d:14:c9:ce:17:17:44:
29:17:68:5b:73:47:d2:1d:b8:e0:a7:3d:3e:da:69:
38:bf:ce:39:f8:41:76:db:8e:fa:12:e7:ab:30:e0:
ad:19:e6:35:28:99:d3:2f:d9:b7:f4:a9:bb:d0:28:
18:3f:15:fa:68:15:5c:c7:d0:2d:6e:1c:ee:11:f2:
19:7b:49:7b:c7:0f:4f:d6:75:57:11:b6:12:31:11:
54:49:76:7e:3c:ba:e3:84:34:63:e1:0b:e6:03:e5:
40:bb:de:2c:06:5e:7f:3a:6e:37:74:f0:9d:d8:18:
80:87:02:50:50:50:da:4e:59:09:bb:2d:f2:e3:9f:
b9:c2:88:c8:59:b1:76:4c:78:ee:b2:d8:f7:73:3f:
9c:c0:f6:df:eb:77:41:96:88:23:fe:e3:8d:94:8e:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:B3:05:80:21:BA:F2:C1:5C:69:D6:64:71:E3:87:52:6E:C8:35
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:e4::/48
Signature Algorithm: sha256WithRSAEncryption
00:86:bc:fe:76:71:fc:35:b1:11:c7:43:c7:ca:04:83:46:d9:
93:83:23:4d:4f:df:b0:3f:e1:d9:9c:bd:9a:92:82:50:af:8a:
98:0c:a6:24:1d:49:3f:1c:05:8d:39:8c:0f:f0:de:66:c3:b7:
26:b1:2c:e3:98:e8:50:ad:a0:9d:32:b7:29:bc:74:4e:ad:65:
fb:44:2d:85:4d:64:44:23:de:a9:07:65:ad:da:64:5a:5e:45:
cc:a1:2f:8d:2b:79:d9:b0:8c:df:76:4c:6d:09:09:e6:1c:44:
4b:e5:c8:3c:cc:6f:a5:49:a0:a0:1b:ae:27:ac:d3:b3:19:c6:
d2:ac:cf:29:e4:b8:44:43:76:c5:81:d7:2c:6a:8f:98:97:49:
2d:ef:cb:5e:d8:bc:cb:b2:88:ba:ce:fa:6f:0c:05:3f:9f:a1:
4e:96:f6:7c:11:4a:59:8e:a9:0f:ed:bc:6f:67:b3:23:33:a5:
1e:80:3e:4a:f7:90:91:52:77:16:06:00:a7:67:c1:fb:8b:f9:
93:75:b4:0d:d8:00:9d:15:d5:12:47:ea:4f:92:8f:22:fe:70:
68:9f:ff:d1:df:c3:e5:2d:57:c9:a6:6c:ef:c8:6e:58:f8:d4:
c2:22:83:1e:eb:d6:85:84:c6:7e:51:9d:19:5a:d8:b2:a6:68:
be:71:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org