Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: qef2biBsshcVBxS6nX3TnmpI5JTGg5rO3/9mB9shBwk=
Subject key identifier: C5:61:4E:3D:EE:73:C0:61:8C:AC:8F:AE:B6:69:40:4C:B5:D0:08:3A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3223FF5E1AC9AEFFA618C034A087BA35BB450E04
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:02 +0000
ROA not before: Mon 26 Sep 2022 06:55:02 +0000
ROA not after: Mon 25 Sep 2023 07:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:15::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:23:ff:5e:1a:c9:ae:ff:a6:18:c0:34:a0:87:ba:35:bb:45:0e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:02 2022 GMT
Not After : Sep 25 07:00:02 2023 GMT
Subject: CN=C5614E3DEE73C0618CAC8FAEB669404CB5D0083A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:e9:c6:f1:f4:6a:d3:19:a9:3f:2e:ea:ec:
fa:f4:f9:83:29:37:96:a8:99:20:9a:9b:a8:fe:df:
a8:cb:d7:c3:f9:89:ea:2b:44:7b:c5:e3:74:bd:cd:
65:f6:9f:6e:f5:36:69:22:b6:eb:73:cd:ea:7d:2d:
2b:c7:65:65:fd:a0:94:e7:6e:9a:37:dd:66:ea:d2:
cc:82:75:fd:85:02:51:cc:45:20:9e:6c:fc:02:b0:
35:50:fd:4a:43:cf:0c:e6:88:a7:4e:02:40:2b:45:
0f:f1:ee:ee:06:e5:c5:0f:71:4b:dd:20:b6:33:7a:
17:04:69:6a:20:7a:46:01:e3:88:2d:52:b4:77:4b:
1f:04:ed:e3:9b:0f:9b:3a:4f:6c:e3:6c:bc:2f:27:
3e:9b:3e:81:07:50:46:51:9a:34:20:a0:f4:fe:d8:
f4:66:8f:1f:cd:ba:e6:3c:37:1e:32:cd:b2:24:b4:
10:f8:bd:4f:72:3d:8c:4b:3e:c8:d8:e9:d3:d9:07:
2b:c0:96:f6:cf:e2:4b:77:65:41:92:18:30:76:97:
44:c1:3a:4a:3c:d6:a7:2d:82:e5:d4:b8:bb:d8:76:
5c:6b:09:81:94:1a:ba:35:8b:d1:d2:f3:3f:7d:71:
d5:14:b9:08:a6:52:10:a3:29:0a:57:0a:e0:2a:e9:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:4E:3D:EE:73:C0:61:8C:AC:8F:AE:B6:69:40:4C:B5:D0:08:3A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:15::/48
Signature Algorithm: sha256WithRSAEncryption
4e:69:92:c7:d9:8e:93:3c:96:f7:b8:b3:5e:31:7d:72:35:24:
0d:2e:66:2c:0a:f4:79:0d:68:e8:8a:ab:4a:1b:bf:32:bb:76:
81:39:ed:03:a2:9d:06:70:2d:21:d4:1e:8f:00:38:26:5c:36:
57:41:ea:fb:8a:2e:0f:25:a6:c7:96:38:14:27:b1:0c:75:90:
6a:a6:00:a3:46:a2:7e:6f:51:ac:b3:e6:4e:0e:95:13:52:df:
ca:ec:c3:cd:51:c8:1a:c1:52:c9:c9:eb:a6:d4:b7:a7:db:80:
70:b6:ec:bf:fd:3f:a1:12:04:1d:d7:1d:23:ce:f5:bd:50:b1:
85:c5:93:73:b9:38:72:56:e6:1d:94:29:94:da:f3:e8:c1:89:
5d:dc:04:c0:76:fc:f0:5c:a6:ac:87:86:ee:50:d8:76:3c:8a:
da:27:a2:2a:e2:b1:88:e9:b8:89:32:84:ac:aa:5b:6f:9a:d7:
89:ad:41:38:ee:d7:d4:14:20:24:51:d4:2b:2b:8a:c3:8e:5f:
4f:e6:f6:e2:ba:b8:39:05:9a:0b:5d:7c:50:71:82:cd:34:27:
84:30:49:11:3f:f7:f2:e6:13:22:cd:4c:49:51:99:bd:50:38:
e4:3f:d9:65:76:02:a8:9c:38:58:bc:0d:7e:37:cb:91:fa:06:
b1:90:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org