Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3135343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: H1sULOH9nF1EZBdBwH72p/NZKrD/py6gWUNqtLYQ1EY=
Subject key identifier: 71:5C:D8:DC:BB:14:37:4C:94:F6:7B:20:5C:CE:63:E9:03:3E:E9:BE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7F526A668D1E409B8AF465532D78AB6896C03B0A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:58 +0000
ROA not before: Mon 26 Sep 2022 07:56:58 +0000
ROA not after: Mon 25 Sep 2023 08:01:58 +0000
asID: 59282
IP address blocks: 2400:d680:154::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:52:6a:66:8d:1e:40:9b:8a:f4:65:53:2d:78:ab:68:96:c0:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:58 2022 GMT
Not After : Sep 25 08:01:58 2023 GMT
Subject: CN=715CD8DCBB14374C94F67B205CCE63E9033EE9BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:cd:61:17:19:a1:5b:dd:27:c4:20:e0:a8:
67:5e:58:a9:5a:ef:74:ca:b1:d8:1f:c6:85:28:8b:
4d:27:6f:93:33:27:0a:5c:a0:6a:cc:77:da:41:dd:
b6:66:7b:34:ca:ac:ec:a1:31:e3:a0:2d:f0:47:09:
85:27:64:f1:68:8e:aa:85:27:ce:3b:c7:dd:f3:7e:
3c:75:1d:3c:23:96:46:c0:34:74:ed:58:48:f0:b0:
4b:48:0c:dc:22:86:c0:91:dc:2c:d5:03:03:e0:07:
93:b6:ef:8f:bc:c7:23:6b:3c:87:78:9b:5d:0d:3d:
37:67:56:ec:b9:c5:bb:a1:84:52:a7:c7:31:53:5f:
12:5c:45:c5:b0:2c:5b:e5:d0:b2:aa:4b:26:f5:df:
fb:0c:01:da:ba:38:24:19:43:dd:d5:d2:06:7c:41:
90:6a:77:2f:19:25:ef:89:63:c0:d5:d1:c7:93:de:
0a:69:5f:1a:bf:3d:a6:bf:0a:21:cb:96:36:b8:ab:
38:e8:10:53:be:ae:36:12:83:e1:64:22:71:b8:47:
7c:b7:29:e3:16:d2:3e:14:e6:cf:7c:ad:b3:24:4a:
c7:30:cc:65:99:e3:db:71:e6:d2:cc:f8:a0:9e:be:
54:02:ba:b5:52:fb:60:2b:b7:a5:bb:ff:dd:b2:36:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5C:D8:DC:BB:14:37:4C:94:F6:7B:20:5C:CE:63:E9:03:3E:E9:BE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:154::/48
Signature Algorithm: sha256WithRSAEncryption
5f:a7:49:b8:5e:90:fa:5f:20:b4:e2:0b:22:b0:45:21:12:49:
ab:d7:85:a0:35:36:53:0e:b8:7c:66:3a:a9:25:e0:04:54:57:
23:6c:8c:ce:9c:a7:a1:04:0a:2e:87:d1:53:05:df:c8:59:23:
ad:73:03:87:11:d3:6b:de:39:39:d4:3d:dd:d6:be:22:9c:5c:
05:36:c3:e3:84:a8:70:82:55:48:f2:d3:f9:c7:7c:e7:56:38:
9a:2b:f4:f5:e3:e9:4b:25:8f:46:8e:43:7d:08:31:54:fc:57:
10:94:b7:6e:95:26:af:de:0a:56:fa:d1:d2:f0:92:97:20:c3:
09:67:6c:af:ea:53:66:d4:98:13:25:82:49:01:e5:ce:6f:66:
d0:f0:34:14:39:26:44:55:19:d9:68:79:c7:27:b2:ae:10:2a:
e7:bd:59:05:f6:ab:1a:4d:19:c7:51:03:58:d3:c9:2a:25:de:
da:7f:29:33:10:00:a9:d0:49:81:ec:ab:4c:b1:1c:7f:01:62:
1b:4b:d7:a6:56:f3:26:a6:ac:02:83:a2:61:47:72:ae:35:87:
8d:2c:72:a9:a0:47:32:22:43:12:d5:91:67:3d:2a:92:f2:57:
69:ab:53:f3:00:c5:92:34:7f:49:c1:1e:64:bf:89:9a:c4:ef:
ec:4c:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org