Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/323430343a663963303a3a2f33322d3332203d3e20313333383931.roa
File: 323430343a663963303a3a2f33322d3332203d3e20313333383931.roa (raw, json)
Hash identifier: QMIOK31m/aQPtTxR1TXrPoPYHVtUnns+bEvQ4PKaFkM=
Subject key identifier: D5:5A:81:1D:49:FF:B2:E8:89:9E:CD:71:7B:75:7C:99:1A:C8:A2:F8
Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Certificate serial: 0FFD46C940BA5156E6CEE6389F748F00CED1B8DC
Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/323430343a663963303a3a2f33322d3332203d3e20313333383931.roa
Signing time: Wed 30 Nov 2022 07:44:44 +0000
ROA not before: Wed 30 Nov 2022 07:39:44 +0000
ROA not after: Wed 29 Nov 2023 07:44:44 +0000
asID: 133891
IP address blocks: 2404:f9c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fd:46:c9:40:ba:51:56:e6:ce:e6:38:9f:74:8f:00:ce:d1:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Validity
Not Before: Nov 30 07:39:44 2022 GMT
Not After : Nov 29 07:44:44 2023 GMT
Subject: CN=D55A811D49FFB2E8899ECD717B757C991AC8A2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:13:8b:ef:7f:21:29:d8:a2:70:e1:8f:e2:
f2:61:94:92:3e:43:a2:82:c8:1c:99:3d:c5:71:16:
54:80:32:84:3c:f2:b0:24:d6:d9:93:7a:a2:9c:7e:
23:8a:d2:06:16:a9:e0:dc:04:d1:be:9d:f7:7d:08:
8a:f3:0f:8b:da:55:46:3a:51:b8:48:16:4f:2a:16:
e9:81:ca:c4:0c:b9:a0:76:fb:07:d3:56:eb:12:af:
f4:7e:ae:95:15:fc:60:fc:63:ac:f8:15:e7:69:b7:
38:97:98:20:90:e7:9f:e1:f2:29:07:33:14:75:e2:
cc:18:2e:4f:06:ff:62:b7:69:b5:ee:7c:13:72:a5:
ba:f9:cb:f9:2a:f5:e3:5c:52:90:e7:69:ce:aa:0a:
a1:be:af:b5:67:9d:05:49:04:85:38:6b:80:f7:73:
f5:c2:54:7a:05:49:dc:5a:83:99:3c:56:7f:95:77:
88:72:3b:a6:77:e2:d1:87:fc:ab:ad:c0:67:b3:8b:
cc:33:15:94:d4:4e:55:7c:c4:e0:c5:a6:c0:72:36:
0b:b9:84:7a:a8:49:28:ca:0b:13:69:94:7e:b3:81:
b3:92:0b:46:fc:6f:dc:eb:01:92:a8:40:99:a6:77:
b6:00:83:57:94:e1:20:dc:aa:66:b8:50:82:35:4a:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5A:81:1D:49:FF:B2:E8:89:9E:CD:71:7B:75:7C:99:1A:C8:A2:F8
X509v3 Authority Key Identifier:
keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/323430343a663963303a3a2f33322d3332203d3e20313333383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
09:ef:54:27:33:3d:58:61:e5:b3:29:43:79:b4:7f:d9:90:aa:
2f:c6:4b:a9:9a:d7:33:7c:82:b9:f9:45:a5:d8:7c:58:10:11:
86:53:ce:e0:0c:cb:88:71:d9:69:bb:e6:fb:d1:e0:91:b3:f1:
82:ec:7d:62:40:dd:18:e3:ab:2f:95:e7:06:cc:99:8d:d0:9d:
ad:8c:21:08:8c:01:fb:e6:9a:2d:b2:7d:9d:16:1a:cf:40:10:
5f:db:c5:6f:27:ca:b9:85:7f:27:fa:66:01:a2:70:cd:14:c3:
9b:35:23:6e:b1:6f:aa:6e:11:e9:ce:9a:81:07:02:2b:56:df:
61:6a:9f:ed:36:0e:4b:41:8f:86:50:ba:36:bd:f8:61:72:de:
a1:07:65:20:f3:6e:04:b0:1d:32:bc:b9:f5:93:6a:80:61:89:
4b:f7:e2:a1:f6:8b:88:9e:47:2e:f2:0f:5f:6e:fa:8e:57:3c:
be:5a:b1:82:e8:22:78:df:8c:ab:1b:bb:8f:40:82:cc:25:d4:
62:a0:fa:86:17:9d:7d:16:dd:4d:2b:a8:cb:d2:5f:6f:d2:73:
f4:00:ce:90:0f:23:54:d2:9f:25:7c:4b:f8:72:9f:d7:ba:c2:
17:96:72:1e:e2:89:f2:dd:73:68:a7:b7:81:e1:da:94:42:cc:
21:c9:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org