Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3134653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: sNscUkhJ30klKbl5osSAETLwwx47NdqG9MR7Cc6QdJU=
Subject key identifier: 7C:45:C9:FE:92:DA:21:25:72:2F:BE:C4:7E:25:1A:46:98:0B:DE:61
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: A405176C905A92B86261BFC4108EDBBC846841
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:05 +0000
ROA not before: Mon 26 Sep 2022 07:57:05 +0000
ROA not after: Mon 25 Sep 2023 08:02:05 +0000
asID: 59282
IP address blocks: 2400:d680:14e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:05:17:6c:90:5a:92:b8:62:61:bf:c4:10:8e:db:bc:84:68:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:05 2022 GMT
Not After : Sep 25 08:02:05 2023 GMT
Subject: CN=7C45C9FE92DA2125722FBEC47E251A46980BDE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:7d:b4:d8:f2:56:ca:92:da:56:fa:69:4d:
a0:df:cd:c8:ae:da:a6:de:9c:c8:3a:5f:c7:cf:c0:
c5:bc:9a:13:90:14:73:18:98:d6:b6:2d:83:e3:81:
2d:5e:af:78:1a:c5:12:44:50:c3:b7:1d:77:ab:66:
26:5a:3a:28:88:3e:5f:00:17:8b:df:1e:1a:27:69:
43:4b:ca:b3:61:43:42:93:85:a7:aa:df:77:d2:2e:
80:a2:bd:99:4f:4b:0e:e1:ee:a8:02:e5:0e:03:6c:
ca:6b:db:22:43:0f:c9:f4:bd:a3:e7:e1:83:ef:bb:
8a:a0:b7:b3:70:3f:78:af:a3:72:ac:db:c9:64:d7:
68:0e:dc:09:ac:fd:61:98:68:80:30:bc:89:e5:d9:
12:29:2a:0b:61:70:24:95:74:03:7b:57:a7:c8:08:
36:a4:b8:64:65:bc:11:77:df:ab:67:c6:f8:0d:5b:
a4:97:5c:ee:39:87:6b:21:b6:c4:6a:8a:e9:52:ac:
a4:cd:74:9d:e1:16:8b:c9:ad:9d:dc:35:f7:d6:69:
73:ca:4e:6e:b6:fc:43:f5:64:0e:4a:d7:c1:f6:ad:
c2:3c:5a:2f:13:b7:89:04:92:65:77:1f:66:14:62:
0f:4d:16:cc:55:f3:8a:39:46:2d:6c:3f:fb:1e:e3:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:C9:FE:92:DA:21:25:72:2F:BE:C4:7E:25:1A:46:98:0B:DE:61
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:14e::/48
Signature Algorithm: sha256WithRSAEncryption
03:fb:aa:ce:50:08:c9:83:9d:29:d1:3d:2f:1b:02:9a:0e:8b:
c1:24:9b:ed:5b:73:fb:47:6a:2b:b1:3a:f5:d1:38:05:d3:fa:
87:78:2c:e2:e5:a9:0e:e0:9c:32:4b:60:db:ad:7f:ce:c7:7a:
c4:c7:70:a1:c9:c4:d8:61:b1:36:54:40:6c:0d:a6:d2:5f:87:
3a:d7:39:08:73:f7:bb:9a:d9:f8:bc:77:29:74:c3:34:33:2b:
25:f0:cd:ae:2a:24:96:83:e2:db:bd:c3:f9:ff:f3:c2:e1:db:
01:bc:5b:9f:2e:2e:88:fa:5b:30:00:44:32:33:b3:8a:73:e6:
ed:35:0b:33:f0:c5:4a:d5:5f:a8:e5:9c:f3:c2:4f:78:a8:04:
98:4e:e6:55:ca:16:3f:9c:cb:c1:94:bb:3f:62:b9:b3:32:6f:
ab:1d:d3:51:00:14:a8:52:3f:47:4d:15:dc:d1:f3:38:4d:a6:
de:a2:df:ae:ce:fa:20:66:b0:ab:49:e6:be:92:ca:e4:9a:91:
d8:12:52:b2:f0:6f:0d:85:4f:28:b6:b4:9f:1b:d0:e7:4f:4c:
6c:16:50:c0:8b:df:9b:47:fb:2f:d9:3f:c3:34:c0:b9:49:ff:
dc:34:d4:52:24:52:2c:39:83:5a:2a:bb:7d:37:60:09:d5:31:
2f:1e:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org