Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 4/W+4oEFmHeXDzgz6sDlPuicyG+wIos0VnQTX7/Iag0=
Subject key identifier: C3:25:08:10:DA:55:A1:26:80:B3:21:D7:35:7D:34:4F:15:8A:10:D7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 24E0BE663FA59DBD1F79E8241096E4D9ACC53983
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:12 +0000
ROA not before: Mon 26 Sep 2022 07:57:12 +0000
ROA not after: Mon 25 Sep 2023 08:02:12 +0000
asID: 59282
IP address blocks: 2400:d680:12c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e0:be:66:3f:a5:9d:bd:1f:79:e8:24:10:96:e4:d9:ac:c5:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:12 2022 GMT
Not After : Sep 25 08:02:12 2023 GMT
Subject: CN=C3250810DA55A12680B321D7357D344F158A10D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:55:5a:01:32:13:fc:c1:da:10:d0:fc:29:
68:2c:34:37:95:f6:36:94:2e:e3:4e:e6:60:f9:1d:
af:07:43:a3:c5:b8:2e:1d:fe:1c:00:16:ce:e7:c6:
ca:a9:a3:6a:01:5e:9c:2d:33:23:f2:53:83:91:f2:
a1:3a:b5:24:75:13:46:0a:16:b7:54:d2:28:de:b5:
06:b1:25:4b:29:6a:ab:e2:f9:da:c2:07:fc:f6:d7:
53:88:e5:dc:f1:73:ac:40:33:4c:f6:26:29:a5:2c:
ec:ad:5e:2f:73:be:48:6c:fc:10:c7:fd:e0:85:0e:
b3:50:c7:f3:51:70:3e:b5:24:9e:dd:ed:05:a6:e9:
f8:f7:dc:92:b0:b6:c1:7c:9b:03:3d:3f:82:f3:6a:
f9:80:62:21:76:30:66:43:e9:bd:14:e3:69:f0:9e:
8d:fe:05:e2:97:ac:3a:63:be:b1:8a:25:a2:23:17:
37:d5:67:77:77:05:e8:54:d7:68:e1:a0:5b:10:0e:
c8:0e:17:6a:5e:b1:35:16:d1:01:b6:5a:24:6e:05:
a0:de:5b:93:d9:9d:de:78:d6:27:a8:58:e6:3c:0f:
b8:77:4a:8c:f3:bd:ad:0d:bc:73:78:2b:7b:88:92:
f4:c9:b0:e6:d8:e2:02:d0:85:cc:b8:49:64:0e:be:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:08:10:DA:55:A1:26:80:B3:21:D7:35:7D:34:4F:15:8A:10:D7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:12c::/48
Signature Algorithm: sha256WithRSAEncryption
2f:b6:d3:bb:cc:37:5f:45:12:f7:3d:53:e4:3a:82:72:76:d6:
7f:d9:cf:2e:f2:df:9d:e4:f9:cd:9c:b5:36:47:58:36:5f:bd:
15:5a:b9:15:e9:60:b6:a7:07:b9:af:0b:e7:df:20:09:aa:86:
17:4f:e1:71:2e:e2:7a:c0:4d:1a:08:79:1e:1b:b0:5c:7c:73:
ac:2a:6b:97:af:e7:a7:ef:80:99:05:5a:ed:13:54:77:9b:42:
e9:b0:cf:63:cd:08:58:ab:bf:0a:e6:64:09:ea:36:e3:33:ce:
87:c8:22:66:15:d6:06:14:e8:08:20:55:b8:7f:0b:54:a7:81:
51:0d:16:ac:55:db:85:52:07:a2:c7:7b:56:46:49:c2:21:b4:
f8:a9:f3:14:bc:a6:4a:da:24:33:7c:de:9c:db:be:68:f3:0c:
40:d6:bc:1f:68:3d:7a:de:1d:1a:10:2f:cb:a5:92:e9:57:21:
5c:36:b8:28:35:0b:d6:ee:4e:61:9b:06:fb:d1:6f:1d:95:50:
b7:76:c7:83:f8:1f:b1:d3:f3:95:ea:d3:08:93:54:da:af:e7:
d2:4a:cb:fe:e4:c2:1d:68:fa:57:8d:0e:8c:81:f4:7c:41:cf:
9a:27:88:0f:c3:41:4d:59:f7:46:ca:f2:2e:4b:c4:1b:d1:84:
07:2a:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org