Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LX1GInQ6bm+8qfj2le/tY0flEXR7yZw/gqtZq6hQdEs=
Subject key identifier: 91:45:0C:A9:A1:6E:23:D3:37:57:29:A5:EC:BE:B9:F1:53:D7:16:86
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 509DB96849A7C7C9321EB13DA85859B8D763AABF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:52 +0000
ROA not before: Mon 26 Sep 2022 07:56:52 +0000
ROA not after: Mon 25 Sep 2023 08:01:52 +0000
asID: 59282
IP address blocks: 2400:d680:16f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9d:b9:68:49:a7:c7:c9:32:1e:b1:3d:a8:58:59:b8:d7:63:aa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:52 2022 GMT
Not After : Sep 25 08:01:52 2023 GMT
Subject: CN=91450CA9A16E23D3375729A5ECBEB9F153D71686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:0d:02:d8:f9:33:35:52:a6:25:e8:6d:26:
a3:c2:37:6d:38:59:5e:7f:c9:c8:77:ad:1d:30:4a:
15:60:cf:87:85:34:67:f0:2c:22:a8:72:00:ce:fd:
49:78:e4:3a:7e:62:05:c9:77:04:d3:d2:12:b9:6c:
66:20:48:6c:59:88:b4:b1:23:ea:6e:57:c9:ec:8a:
6d:04:49:95:11:a2:9d:f0:42:f3:01:25:28:cd:67:
74:05:af:49:5b:92:1e:f0:e4:5a:fc:eb:24:5a:3b:
f8:f3:a6:0c:28:38:63:eb:2c:88:69:2b:63:14:06:
d2:dc:cf:1d:a0:16:cc:bf:1f:6b:f6:7b:67:d4:3d:
d6:2b:53:a0:dd:2e:75:f8:f8:82:45:9e:7e:8a:90:
2a:c5:4a:cd:ab:f1:73:84:d8:32:50:50:0e:24:7c:
63:3e:33:8b:92:1c:15:17:3c:17:0b:a5:a2:f1:36:
48:14:96:8f:74:2f:6f:7c:c7:84:3f:d2:c8:4a:0b:
4a:cb:5c:2c:19:a9:84:7b:a3:e7:5a:7e:ec:d7:22:
97:53:3a:37:7b:d4:84:67:b3:cf:ab:d7:49:13:d8:
22:ee:b7:86:33:82:5e:f2:13:c1:8f:c4:f3:b7:b8:
a7:88:bd:87:f8:fa:9d:ea:80:25:3d:d9:3f:f4:ec:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:0C:A9:A1:6E:23:D3:37:57:29:A5:EC:BE:B9:F1:53:D7:16:86
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:16f::/48
Signature Algorithm: sha256WithRSAEncryption
0d:b1:7e:99:fa:16:38:16:ba:30:cd:91:10:c3:93:47:71:92:
a8:7d:d1:d2:4a:da:fe:3d:a8:70:01:00:77:17:bd:17:40:74:
25:56:84:cf:9b:c6:e4:19:5f:17:b5:0d:7a:0b:78:3c:e7:13:
dd:f3:6a:22:76:43:16:ca:3d:6c:9d:05:5e:b4:e6:00:38:38:
e8:84:d2:b2:f4:51:35:55:56:57:8d:02:52:83:3c:6d:3e:7d:
06:cd:3c:7a:54:e7:44:ed:6a:b5:c2:8c:cf:a2:a0:78:8a:a7:
c0:29:46:a0:41:c6:c2:6e:a6:c5:af:2d:8b:6b:ce:ad:c3:e6:
e6:30:f1:79:62:e8:51:6a:03:0b:e6:1c:e9:b5:46:b0:ef:8e:
19:79:2b:00:e7:51:a4:2e:36:c0:6a:ea:2e:ca:f6:71:9c:7d:
a5:6e:68:4f:b9:74:11:65:d1:b1:31:67:d7:b6:ca:de:61:55:
ee:b7:e4:72:5f:30:d6:c9:d2:44:99:53:c8:b4:25:e1:c0:31:
48:6c:69:45:44:fd:cf:0f:ac:7a:45:05:f1:6e:69:de:be:a2:
7b:5e:9b:72:ad:ab:51:b7:35:ee:ea:aa:bf:8f:17:e9:98:ef:
38:0f:83:2e:b0:85:3a:4f:1b:9d:c8:6b:33:1d:8f:34:5d:0e:
9c:70:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org