Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: gheBg8VKnTNrelJgVVNdvddSF/LK+ydrtQsHRPPux1Y=
Subject key identifier: C6:63:83:72:B5:D3:FC:FF:90:AF:CE:6E:1B:28:D8:66:F8:05:FF:B1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 353B02761B27484FD6BB38867EFAB6FE885FA7D6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:23 +0000
ROA not before: Mon 26 Sep 2022 07:56:23 +0000
ROA not after: Mon 25 Sep 2023 08:01:23 +0000
asID: 59282
IP address blocks: 2400:d680:f3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3b:02:76:1b:27:48:4f:d6:bb:38:86:7e:fa:b6:fe:88:5f:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:23 2022 GMT
Not After : Sep 25 08:01:23 2023 GMT
Subject: CN=C6638372B5D3FCFF90AFCE6E1B28D866F805FFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:11:5a:3e:dc:6d:74:2e:2e:87:0f:c2:41:
82:5e:b3:03:36:dc:32:b2:86:ee:ef:b3:f8:4d:14:
07:d9:42:81:b6:5b:91:81:e7:59:ce:f6:e0:21:c8:
33:4c:e1:0f:4a:f6:72:f2:f3:3a:c9:0a:e1:3e:7d:
11:cc:93:10:73:e0:e9:8f:50:57:c7:4b:77:55:7b:
b2:c1:0d:35:84:a3:30:a9:f9:29:8e:3c:97:08:81:
45:5b:48:78:8a:55:e5:97:7c:fe:18:e1:68:aa:4c:
b6:28:00:bb:3f:02:41:02:32:db:d1:66:c6:a5:8c:
05:47:0f:67:6a:ce:8e:a2:14:2b:cf:9c:b7:f6:be:
c9:48:cf:62:4b:41:09:d2:b3:94:4d:c4:e5:14:f0:
2a:c6:40:5e:9b:5e:c6:39:9d:f8:83:be:bb:4b:89:
26:c2:8d:16:86:0a:74:62:8f:7e:22:97:64:f1:86:
a3:39:4a:73:68:8d:fd:3d:94:61:24:9b:73:ce:16:
3e:13:f8:8b:2d:73:a7:ab:b9:ac:29:45:75:c2:49:
fb:d3:13:3f:6f:2f:5d:d5:d2:69:be:e8:85:e3:96:
17:a7:97:13:de:5b:23:01:59:3c:40:34:43:8a:6f:
c0:e2:eb:51:a8:42:64:2f:b5:34:d4:df:d6:7d:75:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:83:72:B5:D3:FC:FF:90:AF:CE:6E:1B:28:D8:66:F8:05:FF:B1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f3::/48
Signature Algorithm: sha256WithRSAEncryption
4a:9f:b4:b5:fc:0f:37:c5:71:63:8e:1b:c0:16:37:b1:1b:83:
ac:bb:b3:de:75:16:62:22:f0:b5:d6:b1:40:d4:47:0a:71:1b:
11:1d:b0:14:3c:64:74:6c:8d:21:1f:e7:cc:cc:3a:e1:07:a9:
86:99:31:10:1c:f4:de:f0:0c:04:a5:a7:38:d9:37:87:9c:93:
24:15:b8:b9:3d:1f:19:79:e1:f4:11:9e:eb:91:34:a0:c3:83:
da:54:75:33:91:54:34:73:cd:58:37:63:d1:40:3b:03:85:38:
ad:7f:b0:60:72:55:84:78:1a:1f:db:a2:0f:0f:a7:30:49:2c:
53:7e:31:6d:d2:82:5d:25:93:c1:7b:99:88:08:bc:5c:1b:de:
64:c8:f1:4f:a2:fc:27:0a:9c:49:01:64:c3:b0:14:30:cc:6f:
89:fa:22:cf:c7:2c:1e:bd:01:94:f4:75:66:5a:6c:be:ea:f3:
6b:bc:e6:65:5c:df:3c:a8:c2:f7:a0:26:25:1c:55:27:16:cc:
f6:79:75:b8:13:69:0b:a2:28:78:57:54:70:88:5d:a9:96:f4:
87:20:e0:e8:d4:8b:58:91:60:a5:05:2a:e1:b8:ff:84:32:b3:
b1:cb:9b:15:6e:97:ec:75:85:0d:de:4c:1c:34:e2:8e:1f:aa:
bf:a7:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:11 2025 by rpki-client