Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a3a2f33322d3438203d3e20313331373435.roa
File: 323430363a376530303a3a2f33322d3438203d3e20313331373435.roa (raw, json)
Hash identifier: 998W6qc+azC6Q80OAmaeC4AsuyTVqMaD+VGo/TA8K20=
Subject key identifier: 7F:98:C9:A8:F9:BD:45:91:96:3F:D6:1C:F5:31:07:E9:B7:24:34:53
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 4547A36FFFB73C4C3926D57944DE8A831FE981F6
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a3a2f33322d3438203d3e20313331373435.roa
Signing time: Mon 30 May 2022 06:17:23 +0000
ROA not before: Mon 30 May 2022 06:12:23 +0000
ROA not after: Mon 29 May 2023 06:17:23 +0000
asID: 131745
IP address blocks: 2406:7e00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:47:a3:6f:ff:b7:3c:4c:39:26:d5:79:44:de:8a:83:1f:e9:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: May 30 06:12:23 2022 GMT
Not After : May 29 06:17:23 2023 GMT
Subject: CN=7F98C9A8F9BD4591963FD61CF53107E9B7243453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:a5:ed:05:60:33:c0:b3:34:6d:13:6d:e1:
f6:58:21:cd:98:52:38:71:77:b6:db:13:aa:98:3b:
ab:ec:ce:79:b7:9d:b0:89:3a:7e:83:ab:81:22:b2:
20:c8:dc:a7:c8:6b:12:d8:c6:68:9f:1f:9c:e2:fd:
62:dd:59:58:c6:0a:ee:9a:94:0a:31:2e:be:b7:e1:
c6:e6:a0:c7:7c:a1:52:21:bd:57:d5:40:16:97:8e:
48:07:2b:af:6c:7c:5b:9c:c9:96:e6:49:7c:96:5d:
be:3e:65:4d:6c:41:f5:29:c0:91:a3:7c:04:ea:7d:
3a:20:71:eb:1c:ff:53:12:01:c6:cf:80:03:8d:f4:
d6:7e:e9:b7:92:d4:53:0e:6c:30:3e:5d:4f:47:56:
54:05:48:f9:c1:10:fd:45:1a:2e:d3:4c:75:95:ab:
41:0c:84:17:38:47:bf:e4:72:12:44:26:b5:60:24:
bc:71:6e:59:1d:7b:84:3f:08:df:91:b1:30:9b:ce:
41:8e:c5:f8:21:43:65:b1:fe:53:fc:e5:56:05:31:
c9:23:7a:64:3b:78:75:42:30:ab:2c:9f:3d:f2:7a:
9a:a9:96:60:65:b7:01:bf:46:fc:41:d9:a1:e2:db:
99:1a:63:07:1e:73:01:13:3d:55:2e:6e:25:a1:f3:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:98:C9:A8:F9:BD:45:91:96:3F:D6:1C:F5:31:07:E9:B7:24:34:53
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a3a2f33322d3438203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7e00::/32
Signature Algorithm: sha256WithRSAEncryption
07:31:70:8e:02:1f:d5:43:71:95:2b:28:a1:f9:6b:15:98:77:
c3:1d:45:1c:96:b3:59:0f:c2:24:bf:79:7e:d3:04:9f:fd:60:
99:b0:a9:85:9a:3b:f1:a2:a6:ef:3e:8b:7d:6a:1f:ee:f8:e1:
d9:58:2c:73:98:e8:36:c6:3b:6f:a5:c8:ea:9c:c3:b4:70:5b:
b9:db:fd:53:5b:4d:f6:63:09:a5:43:ea:86:77:9b:b0:27:43:
c3:b9:f0:58:24:03:3c:1b:d4:19:b3:fc:de:bb:3d:96:0a:46:
55:0e:96:df:5a:2a:e7:3e:fd:1f:8b:9f:8d:66:58:79:d3:38:
c3:9b:53:6a:7f:43:08:09:b2:1f:c6:a4:f7:8c:1d:12:5c:e8:
c9:b3:8d:6b:88:27:5c:ea:03:a0:cc:5c:6d:32:cb:90:e2:ea:
f9:87:61:d6:a8:e3:71:86:b8:34:63:34:2b:16:aa:6a:ee:08:
e0:81:80:d1:ca:b2:d2:7f:91:dc:2b:ea:30:a5:ad:42:78:88:
c8:b5:b8:bf:c0:4e:cb:a5:92:ae:13:a6:65:f9:f0:4c:36:46:
2f:d7:35:a1:06:13:ab:aa:db:38:03:71:9b:b9:02:74:02:0c:
b5:e4:d1:d9:73:44:6f:22:3a:0e:b3:bd:9a:e4:87:cd:1b:93:
ed:a7:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org