Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 00lsG97Ama3Aa5P/gTHUTvkQ8qxkgbMZD4OnWEKpPJQ=
Subject key identifier: FE:66:44:43:73:E0:81:CB:18:EB:FF:25:19:D2:E8:05:57:1F:93:4E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 137FBFC183DC111F2827EC7AB405C7255AF2D58D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:19 +0000
ROA not before: Mon 26 Sep 2022 07:56:19 +0000
ROA not after: Mon 25 Sep 2023 08:01:19 +0000
asID: 59282
IP address blocks: 2400:d680:146::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7f:bf:c1:83:dc:11:1f:28:27:ec:7a:b4:05:c7:25:5a:f2:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:19 2022 GMT
Not After : Sep 25 08:01:19 2023 GMT
Subject: CN=FE66444373E081CB18EBFF2519D2E805571F934E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:2c:03:f7:0e:6b:55:49:57:ae:c0:ae:f6:
af:f0:ff:52:86:70:d4:f7:85:69:d4:ff:d8:e7:a9:
88:c2:61:bb:8a:28:0d:6e:b0:64:05:31:87:9e:24:
02:6f:ff:3a:f1:59:3a:c7:99:5b:06:26:5d:fc:ad:
af:4d:96:0e:ae:55:7c:0e:8e:9c:41:c7:6e:3b:9d:
14:4e:27:a4:18:6b:69:39:5d:bc:d3:cf:a7:6c:c4:
6a:39:b4:55:4e:aa:d8:fe:3e:dd:cb:98:04:5b:d0:
32:73:6b:74:e6:b7:9d:c8:8c:cc:b7:fd:87:6e:4b:
36:fd:c7:ab:fd:79:74:df:68:72:2f:af:7e:58:78:
68:07:20:df:0e:b3:53:c0:6c:c5:39:af:30:cf:93:
2d:d9:7e:dc:24:a4:93:2b:5c:dd:de:da:65:97:8d:
da:08:08:ba:ec:b7:a6:6c:fb:37:64:06:54:88:62:
e4:ad:89:3b:e6:4e:f3:56:2b:a7:78:d4:00:64:90:
4a:b2:b2:70:fa:07:c8:22:8d:d9:bc:f5:5c:1e:42:
41:01:41:8e:62:83:ec:19:9d:9e:37:40:f9:fd:7f:
55:98:18:d6:2d:ae:0b:70:9f:83:e8:69:44:05:9e:
f2:30:d3:f8:53:e9:7a:2b:ea:5e:4a:13:22:00:9a:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:44:43:73:E0:81:CB:18:EB:FF:25:19:D2:E8:05:57:1F:93:4E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:146::/48
Signature Algorithm: sha256WithRSAEncryption
07:44:d8:2a:04:72:4f:c4:60:ba:96:9a:86:2e:c7:4f:60:5f:
83:25:46:7b:c1:85:75:eb:7d:87:e4:c3:cb:79:f6:d0:6f:e8:
3b:c2:db:a2:39:28:c0:1f:73:0a:e3:3d:09:bf:3e:68:41:cb:
ea:d5:6b:5c:5b:5f:20:e7:1e:f2:1c:11:76:6d:c0:c0:15:80:
16:4d:d6:84:39:30:85:17:89:2a:eb:c9:c6:96:84:2f:f0:83:
cd:4d:e0:d6:de:a6:5e:71:8e:fa:28:96:83:54:83:63:ec:0d:
53:c8:5d:81:47:9c:b3:e2:b3:96:70:69:86:6f:80:a0:a0:03:
4b:56:51:42:b5:38:90:bd:8b:8a:11:3a:72:33:eb:db:5c:57:
be:45:8b:b2:5e:37:a1:11:9a:1e:ae:86:44:74:c6:4b:84:90:
a6:d8:c0:e2:f1:fb:a8:e0:14:fb:81:af:94:85:76:eb:af:20:
06:1d:63:9a:44:0e:b1:22:33:7b:51:c9:0e:6f:8f:b1:1f:be:
05:4a:fc:f4:4d:8e:88:1e:a0:1f:fe:31:34:42:2b:79:24:b4:
a9:c2:78:c8:67:6a:87:40:ef:e7:e7:66:ac:79:95:33:ab:49:
c2:07:cd:bf:0d:f8:9e:a9:4b:09:d7:74:45:f5:3d:08:d4:02:
2e:03:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org