Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3335203d3e20313430343233.roa
File: 323430363a323063303a633030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier: 3u5rPvL9R1iFyTKFl+LhKIU2gjDZNAeltDqSyh66g8Y=
Subject key identifier: D2:5A:6A:4D:74:B8:15:4F:F3:16:EF:05:7A:68:92:47:1B:D0:8B:1B
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 17712A5134D722C059E8FB70BF5025678ACE5613
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3335203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:28:32 +0000
ROA not before: Thu 08 Sep 2022 04:23:32 +0000
ROA not after: Thu 07 Sep 2023 04:28:32 +0000
asID: 140423
IP address blocks: 2406:20c0:c000::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:71:2a:51:34:d7:22:c0:59:e8:fb:70:bf:50:25:67:8a:ce:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:23:32 2022 GMT
Not After : Sep 7 04:28:32 2023 GMT
Subject: CN=D25A6A4D74B8154FF316EF057A6892471BD08B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:cf:68:d4:e7:55:52:f7:5c:f8:99:8b:16:
2e:7a:ca:c6:c5:6d:99:04:be:45:dc:72:25:a1:fc:
5b:0d:8e:dd:0a:f8:b6:1c:8f:b5:9f:dc:fa:f0:58:
dc:79:14:42:37:a9:31:1e:7e:36:1a:a7:8f:f0:42:
3a:ba:09:11:15:7e:6f:fd:c0:17:45:ae:09:3a:3c:
3a:b7:fb:b9:49:3e:4e:cd:2f:40:2a:86:cf:74:7c:
05:fb:9b:4f:25:24:a8:f6:11:de:65:8c:f3:36:24:
60:ec:66:11:3f:72:91:ed:87:2e:1a:bb:e3:76:da:
af:12:ea:4f:d9:8f:d5:0f:a2:c9:fd:e2:e6:ff:f6:
19:29:45:82:b5:b3:b2:db:c4:de:16:cc:3f:c2:99:
95:b6:b9:04:59:8b:91:4a:1c:42:2e:08:51:60:ec:
e5:4b:de:52:4e:03:c4:38:98:3b:6f:64:10:2d:21:
7f:d3:87:63:c9:08:1b:27:bb:1b:c4:0a:d5:ec:a5:
e9:2a:81:c4:14:64:92:eb:c4:3f:f0:58:f1:24:34:
30:a5:ca:70:6c:59:3b:4a:24:ed:f8:e8:ec:9c:a9:
ef:8a:1a:1a:12:29:4f:3a:aa:93:93:26:4c:86:7d:
2e:23:ba:b6:8f:b4:dd:b2:d6:68:2b:32:6e:f3:c5:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5A:6A:4D:74:B8:15:4F:F3:16:EF:05:7A:68:92:47:1B:D0:8B:1B
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33352d3335203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:c000::/35
Signature Algorithm: sha256WithRSAEncryption
c2:3f:9c:35:53:0a:fe:00:7d:7c:b5:82:4a:db:7a:4b:b3:c5:
e3:c3:ec:78:de:19:de:da:c7:e1:47:9c:03:01:b4:f6:d0:67:
d5:98:7f:ce:cf:29:26:65:a7:c0:b8:5a:f4:04:f3:e0:c2:a6:
2f:fc:f1:f4:17:2c:ae:ea:a0:22:32:75:e9:1c:6a:79:7d:32:
51:96:ae:c8:b6:96:29:00:46:4b:63:2c:75:aa:94:a7:58:aa:
e9:30:43:1d:a0:23:77:19:aa:bc:7c:f3:f5:a5:d0:48:b7:d8:
ff:ec:e4:ca:1d:46:7e:06:1e:96:4f:fe:2a:9d:ec:f0:ea:c8:
f4:16:cc:da:b3:68:2c:06:1c:cf:8c:09:79:df:51:6b:3f:93:
bc:e1:64:ba:ba:50:cf:f3:46:01:b6:98:b2:e2:6c:0f:37:b9:
b9:a4:80:60:32:37:69:68:5a:2f:a2:cf:62:8c:23:1c:fb:79:
a5:42:ee:e7:cd:2f:c3:13:85:f6:48:ca:73:d6:b1:7c:42:87:
fb:4f:a4:f6:a8:e4:14:36:a6:d7:26:bd:dd:04:0e:b7:37:62:
6e:82:13:84:48:76:88:f8:24:06:d6:8f:01:d2:74:ec:23:25:
2a:aa:87:44:48:0e:9f:76:78:40:48:4e:9b:df:45:d1:23:32:
33:c3:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org