Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ihFCXAfcvm3vydeMPwa8+QuOlP3n2+wcULjowlqt4uc=
Subject key identifier: A8:82:59:63:62:65:3D:7C:98:47:BD:E6:34:0F:81:CA:B7:EC:84:E7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 46AE355B39FA7B91A4CE7D1552A78716A7117B1C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:31 +0000
ROA not before: Mon 26 Sep 2022 07:56:31 +0000
ROA not after: Mon 25 Sep 2023 08:01:31 +0000
asID: 59282
IP address blocks: 2400:d680:16c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ae:35:5b:39:fa:7b:91:a4:ce:7d:15:52:a7:87:16:a7:11:7b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:31 2022 GMT
Not After : Sep 25 08:01:31 2023 GMT
Subject: CN=A882596362653D7C9847BDE6340F81CAB7EC84E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:c3:78:49:eb:17:74:5b:e2:42:6c:cc:7e:
76:10:f3:2e:71:0e:68:bf:4f:db:04:32:27:f7:a5:
90:4c:a0:06:0f:8b:02:5b:35:d0:bf:3d:46:b8:7a:
d2:02:34:23:f2:63:b6:39:5f:05:71:e7:2f:e2:6d:
0d:da:f7:26:45:92:e0:57:1a:e2:ef:0a:8f:9c:c8:
4f:c1:bc:37:89:21:35:e8:0b:85:d1:65:94:0b:98:
95:48:0f:51:d5:d3:3b:57:bf:48:d2:92:2d:7b:18:
e7:cd:e9:37:c4:5d:dd:81:a7:74:0e:91:45:27:1c:
06:11:b2:44:c2:f0:95:b8:28:f1:35:65:56:83:eb:
78:d6:f9:da:bf:f8:52:5e:fa:8e:41:fd:2e:1f:c7:
b8:63:5f:9e:e7:af:53:18:52:23:8a:4d:7a:b5:af:
2e:3f:c5:75:3c:48:0d:60:05:19:54:54:6c:29:06:
a9:e0:20:58:32:1a:d5:9e:ee:e9:b5:f6:b9:72:59:
1a:11:cf:5f:d3:55:4e:50:47:93:f1:b6:5e:18:4a:
c9:e6:c1:83:3b:e3:3c:8b:00:77:45:8b:88:32:10:
9a:ae:9c:51:b8:26:cc:d9:35:8b:e3:af:4e:f6:1e:
f0:66:5a:01:ad:3b:e7:3b:27:54:ad:62:8e:50:bf:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:59:63:62:65:3D:7C:98:47:BD:E6:34:0F:81:CA:B7:EC:84:E7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16c::/48
Signature Algorithm: sha256WithRSAEncryption
24:f6:33:ca:82:eb:6f:4a:d3:20:8f:b2:14:05:4e:b8:9f:fc:
ca:13:4f:5b:3c:41:f1:47:86:7b:ec:9e:d3:ca:9f:28:66:2a:
29:a2:30:6f:f5:74:09:0e:fd:e0:38:0f:db:ff:cd:01:ed:af:
64:0a:59:25:d0:3c:08:09:c7:a4:80:f6:bd:1a:23:85:cf:37:
e0:2c:8f:84:bc:e7:0f:f6:94:0a:83:7f:66:d1:3c:80:35:a4:
9c:bc:44:43:9c:96:26:8c:67:e9:e2:d5:1e:c0:27:ae:e1:42:
c7:73:b3:b3:20:2b:36:02:5a:e2:ec:d7:76:90:5e:13:6f:71:
bb:3e:d9:fa:2d:e4:1c:0c:2b:31:4b:5d:48:7c:42:14:b4:eb:
17:f8:24:0a:a2:84:6c:1e:29:d5:d1:6b:24:5c:c4:07:95:3a:
1a:03:ec:d4:b8:2c:38:04:fe:da:14:e2:a7:73:15:d2:df:b5:
11:6b:88:67:5e:1a:f7:ab:1e:40:da:2b:90:02:5a:68:6c:13:
5a:b7:aa:28:4c:cd:d9:ed:f9:45:e1:7f:7f:16:ab:65:fd:c5:
cc:71:45:cb:73:ec:21:0e:27:b2:0b:72:ea:9f:b4:61:dd:76:
ab:8a:4f:02:50:0a:ce:20:6e:ee:63:35:39:cc:5f:18:9c:cb:
b4:e2:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org