Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: oV2zvJ2DALK1rzmJsl96bk1NNHHlCHESJH3iusPmw3o=
Subject key identifier: 13:92:57:00:A5:6E:9B:C7:C9:E5:59:76:00:07:D5:A2:11:08:E7:80
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0B43DBEC174E657D4FF9712AF6215DA285713FB2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:35 +0000
ROA not before: Mon 26 Sep 2022 07:56:35 +0000
ROA not after: Mon 25 Sep 2023 08:01:35 +0000
asID: 59282
IP address blocks: 2400:d680:16a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:43:db:ec:17:4e:65:7d:4f:f9:71:2a:f6:21:5d:a2:85:71:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:35 2022 GMT
Not After : Sep 25 08:01:35 2023 GMT
Subject: CN=13925700A56E9BC7C9E559760007D5A21108E780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:f2:c5:c8:6d:16:3c:93:be:f9:bb:62:84:
09:48:7f:8b:16:77:7d:ac:90:77:4e:1a:68:6c:4b:
d9:ee:34:a0:de:ea:ac:42:e2:bd:ce:0b:69:7e:f8:
2f:d8:d3:21:23:e0:35:d2:19:1d:03:f2:62:82:6e:
fe:cb:42:b4:61:cf:6e:d3:09:35:6b:3b:3e:75:73:
ba:4a:77:7a:12:ca:29:8e:39:d1:c9:71:09:53:48:
50:eb:78:ab:e2:38:d5:99:c7:7c:6b:c2:ca:6f:86:
89:5f:8c:8a:08:b1:04:27:d7:72:2a:63:1b:77:1b:
3d:6d:31:89:bc:a3:9d:93:d2:d1:35:a5:de:6f:4b:
4b:43:cd:11:60:81:3b:23:aa:61:10:bc:de:03:b9:
a2:c2:89:f0:0a:91:95:36:3c:b5:a7:b3:9e:85:cb:
8e:ce:72:53:91:0e:c6:e4:85:c3:e6:1f:9b:9f:c0:
9c:83:ec:e6:23:15:19:d0:d3:19:02:d1:5f:d0:cb:
bd:1e:67:6d:35:9f:c4:da:7d:e7:75:17:fc:f8:93:
69:8b:e1:21:85:69:0a:13:1a:9f:98:59:d6:85:51:
b1:c0:6c:6b:7c:e6:ab:95:91:35:01:b2:b4:ee:63:
f6:b6:9b:47:6e:25:e7:03:8b:95:8d:9a:9b:81:f0:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:57:00:A5:6E:9B:C7:C9:E5:59:76:00:07:D5:A2:11:08:E7:80
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16a::/48
Signature Algorithm: sha256WithRSAEncryption
68:fe:f8:03:ff:5b:fe:24:59:f5:e8:fd:d2:4f:51:49:0b:c3:
76:95:57:bf:29:1b:ee:1b:7e:d3:e9:e1:d0:86:15:f2:9b:25:
ae:83:b0:db:c7:b5:1e:a5:73:5e:7d:78:a8:56:e4:94:86:84:
90:1d:9c:1d:54:42:da:34:8d:00:98:7e:be:2b:75:18:23:92:
29:7e:58:e0:3d:aa:29:52:9c:e7:e1:33:3a:b9:00:97:36:b8:
96:4b:fd:ad:b3:12:d9:ff:46:72:a2:cc:19:83:3d:d1:50:cd:
12:46:ec:b2:48:0a:90:33:6a:a5:c4:94:91:96:57:50:de:d0:
96:39:59:e5:79:ca:fc:be:35:79:27:a1:86:ad:7b:9a:8a:40:
19:6b:32:6c:8e:bf:70:85:c7:1e:03:9b:3c:e0:4e:44:db:1b:
5a:8f:4b:5b:51:a5:70:39:b6:ed:d2:4e:d1:16:cb:71:98:86:
3d:91:d7:2d:00:bf:23:26:59:64:ac:a3:51:b1:e9:a2:97:5a:
01:b1:ee:c1:6c:01:90:33:fa:3f:a0:41:03:34:85:d1:9c:9c:
5c:62:89:b6:ad:ef:4a:00:a0:04:d3:ca:7a:88:dd:6c:0a:6a:
3e:2f:00:b3:e7:ee:7e:03:d0:e1:4f:79:88:ca:51:1c:e2:a7:
98:2e:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org