Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: CI2E6TWICFFavxFGwgZwdIswgx42PMB0g9OA14uLw4E=
Subject key identifier: 9A:85:5F:38:B0:39:1B:0D:EC:43:65:8D:FF:8D:ED:5B:36:68:F5:C2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0AEAD1348E74B91E247650A6171E0ABD83FE5F10
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:23 +0000
ROA not before: Mon 26 Sep 2022 07:56:23 +0000
ROA not after: Mon 25 Sep 2023 08:01:23 +0000
asID: 59282
IP address blocks: 2400:d680:169::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ea:d1:34:8e:74:b9:1e:24:76:50:a6:17:1e:0a:bd:83:fe:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:23 2022 GMT
Not After : Sep 25 08:01:23 2023 GMT
Subject: CN=9A855F38B0391B0DEC43658DFF8DED5B3668F5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:85:d8:ea:73:fa:0c:3b:01:64:6d:c0:9a:
f8:7d:44:fa:e0:a9:9c:ed:c5:ba:9f:b5:c7:47:f2:
10:17:39:98:c3:36:c2:64:d9:55:b0:11:ad:e1:d7:
f3:6f:d3:ba:61:33:b2:49:79:83:6f:65:e3:44:4a:
b3:c6:48:ee:92:b3:fd:18:ee:77:b4:74:92:42:f4:
b3:aa:e0:5b:b0:5d:d9:ea:0a:ef:78:f8:4b:57:b5:
d1:5f:7e:a4:0d:f6:8a:64:65:b6:ed:c4:cc:54:13:
60:fb:66:02:4a:1c:14:19:59:d9:76:0a:a5:29:fb:
d3:dc:d6:27:d9:f2:49:c7:e6:25:e7:2d:09:31:69:
c2:97:90:ca:e8:e0:15:be:aa:8b:68:5d:f5:21:8f:
87:f6:f3:7a:d3:bd:22:d1:6a:25:4d:51:15:aa:d6:
90:19:2f:89:a9:26:2d:d5:17:85:6b:6a:94:ac:96:
cc:1d:91:f7:e6:26:7f:4b:60:3c:54:fd:6b:75:c0:
7e:19:67:5f:f8:81:66:1c:36:8f:0a:6c:f6:c2:e9:
ed:c1:e0:b5:b9:b9:d3:d4:88:33:cb:2c:74:be:05:
4a:58:ce:0e:f1:41:14:cc:a9:b8:28:08:27:7d:09:
2d:24:f0:14:34:5e:28:85:1b:99:84:90:37:f6:f9:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:5F:38:B0:39:1B:0D:EC:43:65:8D:FF:8D:ED:5B:36:68:F5:C2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:169::/48
Signature Algorithm: sha256WithRSAEncryption
3a:5d:43:d5:28:69:a3:c5:f7:d5:2d:a2:72:38:12:ba:64:9d:
62:19:02:52:df:57:f6:c2:3c:92:0e:6c:fb:00:8a:8b:c5:32:
89:a8:c8:ac:31:63:57:0d:80:f5:92:9e:f1:af:3d:57:5a:0a:
75:d5:91:79:fa:29:cc:8b:2f:58:4b:53:78:98:7e:a7:d2:46:
ee:3d:2e:05:65:6a:0d:0e:2d:4b:93:bc:73:96:c5:94:18:22:
21:1a:a3:42:22:05:b9:df:79:bd:1f:f9:53:b6:af:f0:9b:1b:
4f:aa:51:de:c2:c2:c3:5b:55:c8:65:63:25:a0:0e:27:6f:25:
1b:56:6c:01:26:1c:95:8c:00:51:f4:66:de:e6:46:e1:61:b5:
a7:3d:09:eb:39:47:53:1b:e5:26:f1:61:dc:0f:56:92:72:64:
03:46:e4:a9:b5:e6:b7:97:fa:8f:ce:57:66:7b:02:40:2e:73:
e1:c1:c7:d9:30:72:b3:40:e6:b1:b7:ea:29:b3:d5:b2:e8:e4:
f0:2b:a5:4e:18:f3:f3:26:31:ea:77:a6:79:f1:43:17:a3:47:
ad:b9:95:73:8c:89:db:6f:a6:37:87:0b:3d:51:67:24:8b:1f:
e7:66:f4:51:3f:f2:2a:1a:63:e7:b7:f6:29:1a:9b:99:dc:70:
e9:cd:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org