Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: yel26grPjzdhCTUyElTbkh7O9HluwtnxKo2Swuz5ebo=
Subject key identifier: 39:0F:F4:CF:3C:6E:74:98:8F:9B:C9:75:ED:DF:03:60:C9:0F:89:99
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4E89C1417265087BC67DE5934D9462C152B265A0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:56 +0000
ROA not before: Mon 26 Sep 2022 07:56:56 +0000
ROA not after: Mon 25 Sep 2023 08:01:56 +0000
asID: 59282
IP address blocks: 2400:d680:13f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:89:c1:41:72:65:08:7b:c6:7d:e5:93:4d:94:62:c1:52:b2:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:56 2022 GMT
Not After : Sep 25 08:01:56 2023 GMT
Subject: CN=390FF4CF3C6E74988F9BC975EDDF0360C90F8999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:f7:71:3c:24:67:65:ae:23:16:27:5b:e6:
57:11:2c:0f:ba:94:2d:d5:39:f9:d1:07:d6:96:69:
c0:fd:14:b2:c2:92:d5:93:6e:bc:d6:26:40:47:03:
52:96:67:1e:03:ff:ce:25:1b:38:47:5b:27:51:96:
37:b1:92:ff:d5:f9:63:a2:58:06:10:eb:f0:ea:62:
90:d2:8a:dc:31:ac:cb:d1:ce:d7:64:06:4e:d9:a7:
ac:0a:5a:f3:5a:c0:cc:52:07:77:42:02:2c:86:4e:
df:fc:06:ef:31:1f:17:41:d6:c4:89:e2:16:80:1a:
d1:69:e3:5c:0c:11:63:ca:44:ea:91:e4:31:4c:1a:
55:d4:4a:a1:48:0d:c4:d3:90:a6:0a:63:3d:b5:c1:
63:16:8a:bb:d1:b7:28:3c:5b:5a:ff:02:ac:d4:53:
ab:60:d7:50:f0:b6:5e:d7:82:3c:14:32:49:1e:8a:
fd:fc:73:4c:60:5c:03:7e:fe:6f:bd:c2:06:13:67:
6d:4c:a7:8e:f4:2b:9d:09:3b:03:f6:dd:a9:2a:34:
28:0e:67:a2:2a:5a:09:e7:df:c5:1e:39:47:63:89:
e2:3d:92:da:43:98:6f:5d:81:48:f0:0c:68:8e:32:
67:8e:0a:24:99:9b:8c:49:ef:df:e1:27:21:be:de:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:F4:CF:3C:6E:74:98:8F:9B:C9:75:ED:DF:03:60:C9:0F:89:99
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:13f::/48
Signature Algorithm: sha256WithRSAEncryption
94:50:2c:da:3d:75:40:33:a1:4c:7c:13:e3:66:03:95:fa:10:
a6:29:57:50:00:c8:c6:ef:f8:a5:64:0c:b4:61:91:4e:15:ba:
e9:cd:26:3c:6c:1e:1b:96:fd:0a:2e:57:58:ef:f0:e0:fd:0a:
5a:04:d4:41:83:e9:72:46:a6:21:0b:67:7a:f6:c6:db:81:88:
ea:13:bd:93:a9:4a:bc:7a:5a:7f:32:08:1d:d5:77:e5:99:f0:
f0:07:1a:a3:66:1f:5a:4e:05:82:02:14:7b:8c:2c:63:0f:46:
52:51:5d:41:9e:00:78:3e:16:20:b3:45:fe:f5:63:fd:be:7c:
ce:cf:df:86:c3:9b:ae:52:94:02:a4:75:0d:70:b1:f6:82:3a:
31:54:46:42:63:18:4f:af:3e:a1:cc:bd:96:c1:a1:22:cf:43:
a3:e6:d3:78:98:91:88:e4:b2:b4:2c:55:5e:6b:e8:59:0b:7d:
61:d9:d6:1d:14:dc:d0:ba:e4:cd:5c:c1:cf:32:3d:30:60:c0:
ad:63:e1:3d:ac:3c:a9:da:d9:b0:38:f7:28:89:29:9d:7f:84:
33:db:f2:79:cb:06:27:8e:e5:69:e1:a0:d9:19:f1:78:20:35:
45:13:3d:e5:6e:0f:c5:fe:ce:4d:f5:0e:ce:0b:ee:2b:95:a6:
ad:f2:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org