Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 5KZPbnlB1UwZzf93hafdnzZFRJdAWT00aTN5VSjZxOA=
Subject key identifier: 21:3B:B6:AA:1D:A9:B4:05:44:6E:E9:23:E8:AD:DE:51:30:E6:B8:E0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4B7C9BB8A35BF390171C3AC88BA7775F46E76954
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:02 +0000
ROA not before: Mon 26 Sep 2022 06:55:02 +0000
ROA not after: Mon 25 Sep 2023 07:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7c:9b:b8:a3:5b:f3:90:17:1c:3a:c8:8b:a7:77:5f:46:e7:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:02 2022 GMT
Not After : Sep 25 07:00:02 2023 GMT
Subject: CN=213BB6AA1DA9B405446EE923E8ADDE5130E6B8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:2b:a9:de:9d:54:92:84:b0:b4:1b:b3:d7:
03:5c:59:ac:2a:d1:2f:2e:19:22:ce:f0:21:1f:26:
b1:38:28:13:48:32:70:10:fd:91:02:0a:1f:c3:85:
15:ff:90:14:80:0c:d5:89:78:49:78:38:f1:91:36:
4e:32:37:66:bf:05:d3:30:8a:dd:76:87:d5:43:14:
5f:30:37:79:66:2c:e4:36:a1:e7:b5:f0:25:18:56:
94:90:33:16:6b:8e:ff:3c:93:05:49:59:3d:df:c5:
71:73:d9:b8:bb:c6:fb:17:3c:e7:76:8f:9c:5f:4d:
58:0a:6f:1d:3d:96:c6:91:12:c9:22:8a:55:fc:f0:
b9:37:3c:9b:df:5d:1d:ec:29:38:d6:93:7f:0b:7f:
cc:e5:55:36:31:74:41:b3:d8:9a:62:3a:4d:bc:cf:
ff:37:6f:ed:13:fb:16:2d:d7:ba:83:df:19:49:fb:
aa:00:ce:5c:e9:84:a4:2a:08:93:80:49:c1:fa:db:
65:e9:65:07:eb:01:cd:7e:18:15:10:1f:02:4d:84:
a7:03:98:8c:0a:37:43:50:c0:2f:3a:b3:a2:61:f1:
b6:34:a5:6a:89:06:d8:55:bd:c3:4d:dd:b1:23:61:
26:f6:0b:e6:9e:17:c9:23:f2:5f:88:7c:33:83:2a:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:B6:AA:1D:A9:B4:05:44:6E:E9:23:E8:AD:DE:51:30:E6:B8:E0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16::/48
Signature Algorithm: sha256WithRSAEncryption
5b:10:f8:4a:6d:ad:18:ef:92:2a:cb:83:e7:0a:31:c5:ff:13:
02:40:81:3e:37:7d:8e:53:f1:35:78:4f:99:e0:cc:5a:47:22:
22:d4:81:38:7c:b4:44:91:be:96:92:69:90:c2:69:f7:4f:61:
7d:52:57:91:1f:d9:fa:63:3f:16:89:c8:0b:25:96:21:33:5d:
ec:1a:5b:9f:08:55:83:23:13:f7:a1:24:8b:c0:c1:b2:f2:77:
63:db:31:f9:b1:8b:a0:8b:8f:18:b1:eb:81:50:29:8b:38:e5:
34:7b:a0:1f:70:08:f8:d2:bf:e5:37:a7:08:7f:fb:d9:7a:a1:
07:4e:ba:9b:95:5e:c5:57:c4:b9:7f:a4:5d:5b:4f:2e:cb:88:
fd:ff:63:47:f5:c4:85:33:42:d9:a6:6e:af:c8:16:cc:1f:2f:
06:dc:fe:c0:0c:93:ce:6d:5f:ec:b9:3e:47:e6:43:bb:1a:f8:
c7:0e:f0:23:42:f6:13:c1:30:9e:cb:41:ee:c7:99:ca:09:4a:
1c:33:ac:e7:f2:80:f6:71:bd:d2:8f:86:49:b1:3c:62:26:b1:
49:32:6a:de:c7:62:a0:f1:c6:ac:2d:5b:d9:ea:f1:41:e5:92:
09:a2:fe:26:6b:32:30:af:c7:19:99:54:9e:5d:e0:22:6c:db:
28:0c:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org