Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: RyCE6NE+KrlKMGufNO8laA05o6gY2ZsDgiIlDU82jV0=
Subject key identifier: DC:38:34:A7:B5:03:51:70:AB:A1:1E:D1:02:CF:76:B3:99:69:6B:FA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6B9F5C1A9FF741BACB9AAF48D267D58609A31A0F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:34 +0000
ROA not before: Mon 26 Sep 2022 07:56:34 +0000
ROA not after: Mon 25 Sep 2023 08:01:34 +0000
asID: 59282
IP address blocks: 2400:d680:fe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9f:5c:1a:9f:f7:41:ba:cb:9a:af:48:d2:67:d5:86:09:a3:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:34 2022 GMT
Not After : Sep 25 08:01:34 2023 GMT
Subject: CN=DC3834A7B5035170ABA11ED102CF76B399696BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:da:b9:b7:c4:c3:0e:cf:7b:8e:e2:e1:f4:
14:8f:46:2b:85:8c:92:57:3d:46:46:f8:49:6b:eb:
18:49:15:01:ae:58:8c:ea:20:c0:41:fc:22:0c:d9:
dd:69:91:f8:be:51:26:5f:53:a1:35:5d:19:0b:86:
c2:e8:27:34:da:dc:a3:a9:95:47:03:01:6e:b2:19:
2e:e9:bd:fb:a8:62:bd:cf:4d:d4:d8:73:b7:02:bf:
86:4f:18:5f:01:d8:4f:bd:df:af:65:c2:1a:2a:0a:
f3:c0:52:58:83:ff:2d:b9:25:1a:37:87:10:53:2d:
09:c9:cc:04:30:dd:fc:1a:20:99:72:37:c6:6e:47:
7f:fc:8f:1b:95:ee:8e:bc:2c:04:e0:d5:2f:33:69:
06:63:b7:1e:89:3a:35:9a:b3:9f:0a:71:f2:ac:35:
e6:ee:eb:14:87:6a:eb:c1:fe:ff:cb:df:e6:b9:d7:
a4:00:f8:2b:af:4f:84:fd:db:c2:88:9e:73:24:f8:
33:e7:92:f5:6c:eb:8e:90:ab:15:75:01:61:81:11:
a7:ef:04:a5:9e:1f:c5:a1:29:b0:c6:e5:b0:d7:80:
2b:1f:2d:78:e8:92:bb:d4:68:15:5a:a8:d5:ae:8f:
e1:43:13:f1:1c:c8:26:f4:2e:4f:b1:00:48:fa:7d:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:34:A7:B5:03:51:70:AB:A1:1E:D1:02:CF:76:B3:99:69:6B:FA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:fe::/48
Signature Algorithm: sha256WithRSAEncryption
13:ef:0d:c2:77:8b:17:de:8b:c1:5e:62:b8:90:9b:67:13:fd:
a6:60:63:8c:17:78:00:42:0f:dc:df:9b:e1:6a:a0:a7:d3:11:
4f:52:7b:2b:c4:40:e5:75:d5:fc:a8:6a:38:2f:d8:9d:e7:1d:
4a:81:ae:8e:b1:ac:4e:b2:88:99:00:71:22:e4:b1:7f:4c:b6:
3f:2d:0b:d9:20:42:15:39:77:bc:e5:55:ce:5f:50:d8:ff:ae:
7f:08:ed:53:30:d7:87:97:0f:81:da:d2:75:83:56:6d:f7:59:
51:a0:73:e5:2d:01:ce:77:20:20:42:cd:6c:cc:65:9d:6d:26:
dd:cc:0d:16:2b:d0:ab:d5:8e:53:ca:82:d6:4b:5e:6f:67:66:
fc:23:b0:5e:dd:92:f1:6a:ad:a6:c0:df:f4:99:4c:fd:4c:e0:
4d:19:16:d4:b1:9e:91:e8:d9:15:16:93:f0:be:50:85:13:f7:
bd:79:d2:30:0c:cc:87:6c:68:11:7f:8e:91:c2:3e:88:1f:b6:
24:02:76:94:e7:0d:41:12:d1:5e:b2:f1:99:dc:6d:60:ee:c2:
37:83:be:07:e6:8f:f3:28:3d:1a:ca:24:c0:39:18:fb:06:c7:
9d:a6:60:85:1c:7c:11:3d:f2:48:3c:63:71:de:70:32:24:09:
dc:7d:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org