Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Kur9UKXerwMnOTCLSYQIjteWfuIEYPBDHzMU7Nagw+Y=
Subject key identifier: C9:C0:2D:D1:40:CE:53:F8:06:B8:8D:11:7C:03:33:EF:E7:B0:30:45
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: C845087FEE7A467DE6550A096B1F183B5EC07B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:50 +0000
ROA not before: Mon 26 Sep 2022 07:56:50 +0000
ROA not after: Mon 25 Sep 2023 08:01:50 +0000
asID: 59282
IP address blocks: 2400:d680:106::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c8:45:08:7f:ee:7a:46:7d:e6:55:0a:09:6b:1f:18:3b:5e:c0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:50 2022 GMT
Not After : Sep 25 08:01:50 2023 GMT
Subject: CN=C9C02DD140CE53F806B88D117C0333EFE7B03045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:92:84:fb:72:d5:96:e7:3e:96:a9:74:d6:
aa:88:27:d4:dd:9a:b5:6b:ee:89:54:e3:72:cc:57:
22:e8:96:84:f0:1a:cf:77:26:5b:44:ec:06:95:f5:
2f:79:b6:33:4c:9e:01:9d:53:66:07:45:60:65:48:
e6:ca:6d:d3:60:fb:ee:de:be:57:77:b8:ab:d9:b2:
82:b1:d6:a4:42:c4:9b:9d:3d:dc:ab:c9:8e:d9:e1:
8d:f0:cc:07:e0:cf:d9:11:a1:8a:31:ae:69:12:b4:
c1:44:4a:a0:a8:42:77:63:bb:83:43:aa:4d:2e:ea:
6a:e9:e5:f6:1b:b4:4b:8e:f1:10:14:78:fc:94:41:
0c:5d:71:81:b9:19:51:7b:7f:c0:a1:80:18:fe:00:
75:f5:cd:d0:fc:de:40:09:5e:b0:db:a6:cb:db:aa:
a0:7b:4a:9a:35:50:9a:ad:5e:2e:0f:8d:af:28:51:
78:ca:20:ae:d5:45:8a:ce:a6:c5:0c:06:d1:34:b8:
68:fa:12:60:37:7a:48:a3:63:e2:97:69:b8:16:b0:
f0:2e:ca:a6:8c:c7:12:43:a0:34:09:e9:ed:95:d5:
ac:13:42:77:db:2c:ef:6e:ce:46:c3:2c:03:02:be:
aa:31:69:0e:bb:42:f0:00:a1:18:ed:8a:01:2b:3c:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:2D:D1:40:CE:53:F8:06:B8:8D:11:7C:03:33:EF:E7:B0:30:45
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:106::/48
Signature Algorithm: sha256WithRSAEncryption
68:52:78:f4:7a:1c:53:cf:ec:94:44:bc:40:e7:f7:2b:d6:b2:
c6:af:8e:2a:f3:32:f9:4d:34:ff:f8:23:19:23:ac:bf:87:32:
f4:73:38:a2:99:54:0d:2c:d8:27:f8:fc:91:75:a8:52:bb:93:
be:91:1f:05:1c:1b:92:21:46:01:83:f1:61:6c:7c:73:c1:3c:
14:44:e3:19:a5:04:ee:e1:6f:a0:3d:b6:43:dc:b8:8f:b1:6f:
f3:2c:c1:c5:2e:63:10:e5:6c:67:83:0a:66:2d:05:50:41:9d:
9d:74:85:b6:38:2c:79:22:2f:24:48:bf:6b:74:fc:d8:a6:62:
73:e4:6c:f3:59:8b:df:16:c9:0b:3a:c0:87:7f:5e:46:61:b8:
6e:6b:93:a7:7c:74:22:f8:0f:ea:ab:27:95:f3:62:cf:01:e3:
73:70:bc:74:7d:f3:f2:97:a7:ad:11:d2:6c:16:a4:e4:58:04:
8a:8f:fa:c0:8e:b4:4b:bc:22:41:ad:fb:20:a0:a2:b6:c4:66:
ba:f8:13:8d:52:21:00:0f:63:20:17:12:8d:0c:4a:3d:ff:d9:
dd:e3:0e:c8:74:3c:f6:b6:3f:5d:14:4b:b9:74:01:7f:71:3b:
a5:98:a9:c9:ab:36:86:54:74:9d:5b:57:37:4a:04:6c:f1:e8:
0a:08:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org