Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: jVN+iXPbIr4vi2347C5G0GwCJwAQzo8H5J7Sd79cQ1o=
Subject key identifier: C0:C3:17:11:44:27:1B:6D:56:1D:16:E0:5D:FE:40:83:DE:BC:E2:C9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1A6DFF5A903E149BF1039D553070101696CB6E0B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:18 +0000
ROA not before: Mon 26 Sep 2022 07:57:18 +0000
ROA not after: Mon 25 Sep 2023 08:02:18 +0000
asID: 59282
IP address blocks: 2400:d680:164::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6d:ff:5a:90:3e:14:9b:f1:03:9d:55:30:70:10:16:96:cb:6e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:18 2022 GMT
Not After : Sep 25 08:02:18 2023 GMT
Subject: CN=C0C3171144271B6D561D16E05DFE4083DEBCE2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:44:68:8a:96:7c:a1:b6:bf:55:95:02:71:
a0:86:5f:55:21:fb:85:1e:85:ac:ed:c8:e4:89:b4:
44:c4:8d:ae:b7:ee:0d:94:7f:a8:e3:7a:c5:89:12:
74:f5:69:bc:81:f0:e7:a6:04:97:8b:a9:4e:69:e6:
2c:26:91:5a:e4:81:62:de:4b:ef:18:a8:7d:e9:c8:
2a:a9:e8:f6:b2:8d:55:3c:b9:ee:65:c1:72:7c:ff:
c5:7a:81:64:a1:2f:8c:51:11:40:dd:d2:0c:49:e0:
28:59:b5:4a:17:fa:26:17:2e:bf:24:94:68:c5:2e:
71:d3:de:e8:5f:e9:af:b9:9e:2f:e1:67:7e:08:a1:
0a:50:13:3f:18:7b:5e:6b:6f:05:0c:51:fe:8e:69:
74:db:4a:15:2d:67:a2:7f:5d:b8:fa:d8:0e:0c:7c:
ea:b1:c7:ad:2b:18:28:ac:1b:1d:f5:5b:37:67:0b:
25:a8:51:dd:02:74:da:c1:9c:86:12:76:1a:a2:16:
1f:00:95:6f:22:93:73:2a:a2:53:4b:55:4b:a8:9d:
78:33:fb:70:82:10:0e:3a:15:ad:f0:18:7b:5a:5c:
2d:c0:5d:0c:5e:98:c0:a0:99:5e:16:9a:56:f7:bd:
56:3b:be:d1:c4:5d:9c:03:67:af:f8:6a:b9:4e:eb:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:17:11:44:27:1B:6D:56:1D:16:E0:5D:FE:40:83:DE:BC:E2:C9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:164::/48
Signature Algorithm: sha256WithRSAEncryption
88:89:82:16:48:09:da:75:f8:f2:d4:b8:15:75:10:d6:de:dc:
cd:8c:5b:cc:be:e5:4c:be:62:ae:29:c3:a5:55:8d:df:c4:0a:
43:e4:82:8a:8c:fd:53:36:cd:3e:4d:10:9a:5b:cf:c6:96:96:
f0:b4:8f:a2:58:4b:02:6a:7b:13:55:e6:03:06:d8:42:90:ad:
9f:4e:fd:60:92:ff:93:71:b5:e6:6d:9e:9f:1d:dc:58:0f:c5:
ac:bd:5e:64:8d:03:cc:40:00:67:0b:8c:99:b5:b5:2b:10:43:
f4:d2:2d:f6:10:51:57:a1:d0:af:16:b1:10:f9:e0:9a:bb:14:
4d:88:48:db:8d:54:75:c1:04:8b:64:78:02:2b:bd:de:f1:0b:
59:cf:63:5b:9c:bc:e8:b6:9b:e8:60:e2:74:e9:45:98:c6:59:
10:14:23:03:fe:d2:2b:ae:25:df:37:33:d5:a9:44:d2:14:bc:
19:64:cd:43:07:44:05:6e:f1:5e:e1:71:69:03:92:d3:91:7b:
9a:07:ed:8e:e7:ba:94:b8:93:c1:4f:10:ec:14:1a:bb:0d:5d:
f4:82:f9:cf:bf:2a:32:59:af:35:a3:a6:aa:1c:4d:96:04:88:
29:74:79:7e:0b:3c:4f:11:28:ee:75:cb:9e:7d:be:48:4f:2c:
0d:30:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org