Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3137313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0IH4rlsmO07ACSJcsQcU0EOA6iNnUOdBMWWmPGYV8eI=
Subject key identifier: FC:DF:92:A7:A7:49:42:EE:0F:20:AF:CB:00:6B:28:81:31:79:C9:15
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1C1F34A54772970F532533A5DAC5085FB53F6D0F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:58 +0000
ROA not before: Mon 26 Sep 2022 07:56:58 +0000
ROA not after: Mon 25 Sep 2023 08:01:58 +0000
asID: 59282
IP address blocks: 2400:d680:171::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1f:34:a5:47:72:97:0f:53:25:33:a5:da:c5:08:5f:b5:3f:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:58 2022 GMT
Not After : Sep 25 08:01:58 2023 GMT
Subject: CN=FCDF92A7A74942EE0F20AFCB006B28813179C915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:4d:35:89:30:95:14:99:08:21:fd:b1:bb:
aa:aa:e1:75:38:dc:a2:b3:00:c5:3b:49:7f:af:f5:
10:8e:f7:ae:4d:06:18:78:21:47:1b:e3:4f:a7:28:
b5:23:77:3c:8f:43:98:27:ed:65:6d:f2:90:99:59:
9d:72:ed:cd:8c:3a:bb:f9:1e:3e:d4:31:c6:43:10:
15:ce:b1:9d:b4:54:63:a0:3e:61:d3:bc:8a:1e:46:
32:38:d5:a7:d4:bc:3f:55:ea:2e:fd:c1:a2:b6:7b:
ed:c4:f5:20:f8:21:c6:4c:83:5b:6f:d1:d5:b3:b4:
5c:41:2d:f4:01:62:85:d3:a5:a5:ab:37:f3:10:7f:
a6:b2:7d:1f:b7:81:2d:72:30:08:92:51:1f:54:a4:
4d:d8:a2:3f:a6:31:76:ff:19:0c:9c:98:e9:1e:b8:
a7:cf:ed:d2:92:64:03:30:b8:13:31:4e:fa:58:11:
37:b3:28:77:13:cd:73:2f:14:da:aa:bb:c1:73:b8:
68:d0:39:a7:64:01:7d:fa:8b:fd:84:bd:45:62:66:
ad:7a:54:ac:84:31:a0:37:65:75:65:e1:12:b5:fd:
c2:c8:ca:99:9e:e4:9c:9c:7b:22:c3:5f:f7:e0:da:
eb:dd:3b:3f:e0:d0:17:be:cf:99:46:f8:19:65:07:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DF:92:A7:A7:49:42:EE:0F:20:AF:CB:00:6B:28:81:31:79:C9:15
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:171::/48
Signature Algorithm: sha256WithRSAEncryption
b9:1f:22:81:6d:7d:86:6c:02:14:a9:9f:88:f4:53:61:5a:91:
9e:a6:bb:b4:80:06:b2:ae:56:57:47:77:77:ee:35:39:b8:00:
e2:4b:51:81:60:63:48:c0:94:41:14:3d:c8:2d:8d:8d:ba:68:
5a:ee:f1:62:ff:32:72:66:1d:de:ce:71:f3:83:a5:03:b1:32:
e4:fb:22:ca:49:73:77:3c:40:33:04:6c:04:63:3d:a8:8b:b0:
db:28:c8:c1:0b:60:a1:0b:96:98:36:e0:21:1b:d1:82:85:93:
c4:2f:26:72:dc:a6:ae:76:78:a8:68:72:a2:90:79:bc:15:41:
49:cf:8b:e3:d4:31:51:88:fd:04:b2:f1:1c:f3:7a:e1:2e:9b:
44:15:a4:3d:0e:35:96:d1:9a:0d:e0:43:00:13:12:7e:c8:cb:
ef:cc:d2:1e:f6:4f:50:10:b2:9d:62:10:5d:2e:16:57:4d:47:
94:98:74:75:5b:f0:04:d6:89:5d:ab:01:e0:11:44:fa:d5:1d:
ba:fc:15:5f:a0:b0:a6:06:29:0f:70:d7:58:f4:52:de:81:9e:
5c:7f:42:e0:6c:da:9a:b0:22:ce:ae:24:ef:8c:33:7d:32:e2:
e5:5b:b2:7e:96:f8:0a:56:b2:71:30:89:d8:44:10:9f:df:ed:
9f:8c:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org