Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3134613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: F4e54rGdfED4keEcFKUiw+fUnZ8NfllHGjCG2P8aQLU=
Subject key identifier: 33:6E:7C:54:5A:BB:58:81:29:54:F6:6B:D5:D7:71:0A:8A:E8:D9:48
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4980EF2B4D470A2E305B920F513563190976848C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:02 +0000
ROA not before: Mon 26 Sep 2022 07:57:02 +0000
ROA not after: Mon 25 Sep 2023 08:02:02 +0000
asID: 59282
IP address blocks: 2400:d680:14a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:80:ef:2b:4d:47:0a:2e:30:5b:92:0f:51:35:63:19:09:76:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:02 2022 GMT
Not After : Sep 25 08:02:02 2023 GMT
Subject: CN=336E7C545ABB58812954F66BD5D7710A8AE8D948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:c5:c3:95:91:1e:28:0f:58:2c:1e:a4:6a:
66:66:b5:cd:3a:5f:a8:4e:f1:70:af:bf:46:7b:f0:
88:82:cd:05:30:c8:03:81:fd:7c:e7:09:b4:f2:a7:
7c:53:70:a8:5b:a0:07:65:e4:d2:92:82:1b:86:72:
75:7a:54:bf:d5:db:d6:60:4f:be:51:51:5a:29:d7:
1c:f8:e9:75:32:af:e1:ec:c9:f1:58:d1:11:84:0a:
db:f6:36:a8:da:b4:69:67:97:7d:66:cf:62:af:b6:
2c:df:ec:ae:6d:07:2b:52:d0:95:1c:41:ae:a6:84:
03:8a:55:3a:52:d4:83:bb:b7:f9:54:49:f9:4c:65:
3e:8d:ef:5e:4f:27:72:1d:05:98:09:4f:ac:21:7d:
0c:bb:46:5a:51:80:64:29:f8:53:16:a1:a7:a3:62:
fe:60:6b:54:ed:d4:af:9f:74:35:f0:5b:c7:9f:73:
51:68:36:83:e6:08:9d:3a:55:47:38:84:9e:d0:df:
e4:02:cf:9e:88:16:9b:5f:e6:b0:b1:f8:52:4b:b5:
ab:62:2f:7b:a1:90:74:bb:74:7c:ba:f6:02:1a:3d:
f2:3b:30:2b:31:0c:2c:cd:f9:27:a5:09:a2:cb:4a:
4a:c0:32:7c:68:0e:e6:65:31:5a:27:6c:73:6c:3c:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:7C:54:5A:BB:58:81:29:54:F6:6B:D5:D7:71:0A:8A:E8:D9:48
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:14a::/48
Signature Algorithm: sha256WithRSAEncryption
6b:60:4d:22:89:66:41:cf:0f:81:5c:64:95:d2:ca:38:46:aa:
a1:a0:cf:4d:b4:3a:1e:0e:8a:be:95:5b:6a:f3:ef:ba:9d:e7:
f4:85:df:58:d5:73:04:c2:4c:ac:e7:a7:bb:00:24:23:f0:aa:
5d:5f:aa:95:5d:9a:e4:7d:36:37:79:34:9c:8d:67:99:b4:ae:
d7:27:98:a5:17:22:f4:98:61:f0:9f:53:4b:df:33:db:09:ca:
3e:60:c2:e5:12:31:70:a7:60:e8:cf:2b:b1:88:b3:7a:58:7a:
41:e6:1d:20:85:d9:bc:a0:20:91:68:be:71:84:77:08:e9:3d:
0f:9a:0f:78:13:bc:b8:d4:01:3b:6f:5f:32:92:83:f6:e8:fe:
83:7f:64:8f:a6:65:88:24:41:30:7d:8f:70:5c:03:f2:e5:4e:
5b:fd:2e:9c:55:6c:08:b5:46:c8:d9:5b:fe:b5:19:8b:1e:f3:
7e:c0:fc:2b:1c:72:b3:7a:fd:e7:9a:28:56:bd:a4:57:54:87:
7f:4f:46:f8:be:df:21:c6:99:50:b3:4e:25:bf:dc:8e:0d:a9:
1e:61:df:41:8c:6a:1a:66:54:2a:f7:c2:7d:97:32:43:57:ac:
e3:08:df:00:6a:fe:a9:7a:76:fe:f8:47:38:34:fe:f6:ac:c3:
20:be:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org