Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3131363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: JYu077ApufxIg9JvOBk02fMk4aP1SKG4/6jb2VmEDo0=
Subject key identifier: 10:6B:A6:E6:71:0C:D4:A7:83:77:82:E6:A8:28:56:FE:09:C8:18:C0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4956FC604E658954A51174693D6B05640F774B53
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:40 +0000
ROA not before: Mon 26 Sep 2022 07:56:40 +0000
ROA not after: Mon 25 Sep 2023 08:01:40 +0000
asID: 59282
IP address blocks: 2400:d680:116::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:56:fc:60:4e:65:89:54:a5:11:74:69:3d:6b:05:64:0f:77:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:40 2022 GMT
Not After : Sep 25 08:01:40 2023 GMT
Subject: CN=106BA6E6710CD4A7837782E6A82856FE09C818C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:d0:00:9a:a1:02:2c:c3:cd:7b:f8:4a:37:
6c:7e:f0:8f:1c:19:96:6e:ba:f0:a0:c7:43:76:98:
65:5a:90:8e:99:d7:1c:71:3b:e2:30:39:e3:b1:b4:
12:9b:fd:90:31:15:da:54:f3:35:96:36:01:22:19:
bb:eb:46:b5:41:d2:34:b1:1c:ca:8a:7d:3c:a2:69:
d9:88:70:83:45:7c:97:9c:e5:77:20:e5:05:3a:b3:
24:d5:49:81:dc:49:e6:07:3b:14:2c:aa:f8:1e:6d:
ca:86:f0:68:d0:fc:1c:14:17:a0:19:56:78:5c:af:
a6:11:8f:5d:ee:7d:ba:e0:e7:3b:27:0c:3c:1d:eb:
36:72:ff:b6:ed:f1:80:b4:de:c8:36:be:d2:88:c0:
34:cf:23:fe:3f:f7:31:35:73:85:a3:64:86:33:a4:
51:6e:8d:47:f4:42:e3:ef:41:02:18:16:30:03:05:
02:bf:2c:c9:b7:e1:29:eb:29:88:87:f4:3f:56:cc:
c1:f0:f0:51:f6:36:7a:4c:f9:46:5b:b2:d5:16:65:
41:ba:e1:59:7a:1e:dd:f3:ae:83:c6:c1:8f:30:a5:
a9:99:67:63:17:9c:65:27:55:1c:97:24:4f:c7:ca:
99:cd:5d:8f:bd:3b:cb:ab:82:6b:df:41:28:7c:17:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:A6:E6:71:0C:D4:A7:83:77:82:E6:A8:28:56:FE:09:C8:18:C0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:116::/48
Signature Algorithm: sha256WithRSAEncryption
3f:fa:4a:bd:bd:80:66:77:3b:82:cb:2e:7f:41:ad:83:d5:b9:
9d:08:0c:22:27:54:d6:68:4f:58:17:b2:b4:73:8f:7e:53:cf:
4e:94:65:99:4c:83:74:94:4e:67:24:2d:ea:fe:f3:18:58:57:
3b:fc:0a:b9:69:1a:5e:8d:76:d6:0d:2d:41:10:e5:54:f9:6b:
af:7e:a3:4d:89:42:0c:a5:63:13:e7:e4:d4:48:7c:13:5d:12:
11:d8:b4:be:c5:1d:b4:22:bf:9f:7a:8b:47:b4:9d:8b:21:6a:
ca:72:89:85:2b:c7:a3:dd:68:52:4b:40:e4:a1:1d:41:11:40:
5e:cf:00:4a:3c:a2:d0:8e:db:3d:4f:8b:08:3d:01:9b:71:6a:
1b:fd:a8:0e:15:c5:e0:73:a6:08:0b:8a:ae:4e:27:45:c9:6f:
93:e2:b5:9d:03:23:58:c1:37:ca:47:6c:65:18:2d:ce:e3:f7:
15:3b:eb:04:37:af:fb:bf:4b:b7:83:c1:5e:eb:56:f3:e5:8b:
46:80:37:cf:34:14:95:dc:13:b7:55:0d:2e:4e:e0:b7:a4:95:
a0:4a:06:9e:90:b2:5e:01:66:44:ee:25:f1:96:20:65:62:90:
d9:94:7a:f2:32:5e:35:79:03:fd:c4:ce:23:dd:54:4b:2a:e6:
c5:7f:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org