Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 2l1agWVUalvlFotY4x5O7YqykXSPMCNIxg50ITJsC5c=
Subject key identifier: C0:BF:FF:E7:9F:FC:AA:46:06:CB:81:D7:77:C6:10:5D:4B:CD:56:8F
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 48BF110E4CCF876C8C4FD53348AF4F16130F21D8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:31 +0000
ROA not before: Mon 26 Sep 2022 07:56:31 +0000
ROA not after: Mon 25 Sep 2023 08:01:31 +0000
asID: 59282
IP address blocks: 2400:d680:139::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bf:11:0e:4c:cf:87:6c:8c:4f:d5:33:48:af:4f:16:13:0f:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:31 2022 GMT
Not After : Sep 25 08:01:31 2023 GMT
Subject: CN=C0BFFFE79FFCAA4606CB81D777C6105D4BCD568F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dc:70:dc:ec:50:9e:46:54:b4:fd:39:22:1e:
ba:68:dc:e8:8d:ef:02:d6:e8:86:ed:d5:dd:5b:e9:
57:ae:4c:b6:9a:67:a8:51:0b:59:cd:b8:b2:2b:76:
ee:ed:68:a9:2e:f9:ed:89:e3:4d:ca:63:2f:7b:5c:
f3:5f:f2:4d:f3:12:55:ae:24:13:a2:7b:f0:49:fa:
1a:b5:6c:70:6b:db:42:bd:d9:b2:9a:bc:d7:ea:2e:
5c:87:ef:86:16:45:2a:1e:cf:e0:77:07:45:3e:8e:
23:26:f6:70:c1:ef:65:f0:94:13:50:2f:14:52:7d:
7f:d1:d2:ab:f9:e5:b0:6b:ef:d7:24:b9:75:b4:9d:
30:23:61:3f:cd:c3:3a:5f:53:47:af:22:81:35:fb:
92:06:53:a0:0c:b1:26:13:83:52:2f:29:56:c3:fd:
26:fe:16:e0:4d:76:d5:ba:70:72:c2:c9:45:8d:8f:
aa:19:55:01:47:b2:51:8e:a6:d4:4c:17:30:fb:e8:
33:ee:16:04:88:21:3f:b5:78:ee:3a:20:b5:8a:25:
c6:d5:89:83:77:ce:24:7c:8f:e1:56:92:2c:72:18:
a8:d1:03:1a:0c:a2:58:7e:15:17:56:6e:5e:42:e9:
3f:90:a5:39:02:81:10:78:98:fa:9b:08:66:7a:53:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:FF:E7:9F:FC:AA:46:06:CB:81:D7:77:C6:10:5D:4B:CD:56:8F
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:139::/48
Signature Algorithm: sha256WithRSAEncryption
13:d1:be:e9:73:77:e7:c3:a0:d5:0d:65:ba:91:1d:09:2b:bc:
24:6e:bc:b5:22:f6:69:cb:2b:52:e4:6d:ef:5a:4b:17:43:c7:
37:b6:ff:c1:ca:14:b8:62:62:02:f8:07:ad:f6:25:66:7e:d7:
0e:55:d5:82:fe:99:c8:1d:39:67:cf:ae:f4:69:57:ff:05:47:
fc:09:bc:5f:e2:c7:c2:aa:ba:96:1e:f9:7f:3c:bb:b7:50:f9:
60:6b:e6:0c:35:aa:cd:21:02:40:94:65:82:cb:8c:63:9c:00:
cd:74:d6:7e:59:03:69:94:1e:e4:b9:17:a1:45:8d:d9:9a:5b:
01:e6:27:ec:86:d5:c0:0d:14:63:03:d7:2b:e9:33:3a:dc:e5:
3f:53:57:9b:49:38:fa:2c:7b:a3:c2:5a:e0:37:e6:53:c2:31:
05:14:47:23:93:c1:9e:ab:e4:74:64:92:54:74:5d:94:0d:57:
43:85:54:bd:51:52:8e:6e:c0:fd:93:a9:38:a6:de:74:b4:b8:
28:c3:75:70:dc:d0:03:ce:13:1d:e1:6a:36:12:b6:fe:f0:e5:
11:35:69:3a:51:02:a7:20:6a:81:d5:8d:a2:fa:f3:a7:13:cd:
59:ee:2d:cb:c4:0b:c1:36:d6:40:7e:53:c5:b3:1c:2c:1c:45:
7a:83:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org