Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6Zp44l9+0yqhR50xu4b8rKhda2sdaTGVTRCAlfpEBe0=
Subject key identifier: A0:98:8F:11:A5:CD:75:0A:50:91:C4:25:0C:E8:35:BE:90:CF:1C:A4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7D1DA6297364D9990982E5F9C151338619B15C5D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:50 +0000
ROA not before: Mon 26 Sep 2022 07:56:50 +0000
ROA not after: Mon 25 Sep 2023 08:01:50 +0000
asID: 59282
IP address blocks: 2400:d680:16d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1d:a6:29:73:64:d9:99:09:82:e5:f9:c1:51:33:86:19:b1:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:50 2022 GMT
Not After : Sep 25 08:01:50 2023 GMT
Subject: CN=A0988F11A5CD750A5091C4250CE835BE90CF1CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:fb:eb:23:6f:93:50:8a:42:63:88:e0:0a:
6b:9d:11:60:fd:dc:c5:fb:db:42:cf:33:a6:61:3a:
6a:24:a2:00:90:7b:96:61:94:4b:eb:95:0c:7b:4b:
25:1e:96:14:68:af:f2:d9:72:7c:85:47:44:a0:b8:
f0:7a:e9:2c:d7:d8:1d:56:f6:ea:9c:41:8b:c9:44:
e0:55:d6:f4:3c:10:9e:f3:7c:9d:f1:ad:d3:45:3e:
25:8b:49:fa:81:d6:09:3d:c3:43:d0:9b:13:6f:72:
a0:1f:49:15:c8:ee:3e:77:89:e7:67:a8:27:75:8b:
6f:7d:e1:7a:8f:88:20:8a:92:1b:38:2c:f5:c0:c1:
8b:b7:47:71:11:d2:13:3b:e3:cc:03:2b:18:5e:65:
56:9a:e2:fa:fd:c3:45:f5:e2:63:0f:09:86:23:59:
d8:2a:53:1d:71:d9:58:bb:f5:f0:5e:d4:28:56:d6:
d3:85:fb:46:04:04:21:3b:4c:1f:c0:db:32:f1:ac:
11:63:0c:4d:dc:ca:d2:51:16:b7:ff:c6:e5:c4:a5:
96:b4:44:f8:ff:f1:0d:32:af:c4:f6:68:e2:2a:80:
47:d0:81:a2:bb:9b:32:a8:29:3b:11:21:e8:7a:62:
0a:e2:15:11:6c:1c:2c:f9:a5:0d:7c:c6:4a:c7:ce:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:8F:11:A5:CD:75:0A:50:91:C4:25:0C:E8:35:BE:90:CF:1C:A4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16d::/48
Signature Algorithm: sha256WithRSAEncryption
96:8e:9b:4a:52:e0:aa:31:a4:23:d5:8c:b6:cf:0f:03:70:f4:
26:18:d6:d7:3c:f5:f5:1b:4c:ff:75:94:37:46:42:4e:40:81:
64:73:f6:66:4b:d5:64:4b:e5:6c:c2:a4:89:1b:55:61:29:e3:
ab:5a:8b:f0:be:54:62:3a:59:af:f9:91:c3:40:c5:4b:df:3c:
56:32:f3:26:bf:63:2f:ee:a2:42:4b:15:1f:8b:fa:53:e3:65:
a5:f8:96:46:9e:21:da:5b:bc:23:3d:db:6b:d7:a4:cf:bc:8d:
b1:f2:a1:c0:5e:da:47:26:ea:0f:fa:0d:07:de:c7:22:c1:b7:
ae:44:b2:39:4c:90:89:06:fb:c6:02:c5:5c:1f:46:08:c1:8f:
37:5e:e8:93:93:b2:43:e3:18:21:06:16:66:2d:e4:fa:16:66:
8b:7f:5b:09:0a:9a:f1:e0:2f:eb:22:97:04:4a:93:a0:ef:61:
96:60:2b:7f:a2:04:c2:67:02:41:8d:2e:62:06:96:b8:f4:71:
d9:da:10:08:5b:55:80:d2:79:33:02:30:de:dc:4f:68:d0:18:
05:2c:37:a9:41:65:52:a1:bd:4a:58:d9:8c:39:15:a2:b7:c1:
1d:68:6c:fd:da:f6:20:bf:70:31:9f:cb:6c:8e:27:db:b3:9e:
02:5f:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org