Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3137643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 26QiLVBOqO7Hi5h6qvKyYuK4Vf/R/e27fJHE5AESIHM=
Subject key identifier: 28:ED:B5:86:5A:1F:C4:9B:2B:67:C1:61:D9:B4:11:6D:2C:FA:92:E3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2A410ED7D2B54E4F5F566130E1599E2199B8A7F5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:33 +0000
ROA not before: Mon 26 Sep 2022 07:56:33 +0000
ROA not after: Mon 25 Sep 2023 08:01:33 +0000
asID: 59282
IP address blocks: 2400:d680:17d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:41:0e:d7:d2:b5:4e:4f:5f:56:61:30:e1:59:9e:21:99:b8:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:33 2022 GMT
Not After : Sep 25 08:01:33 2023 GMT
Subject: CN=28EDB5865A1FC49B2B67C161D9B4116D2CFA92E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:bd:36:67:20:37:dd:5e:5e:0f:2d:e3:d6:
e7:f8:df:1c:73:64:ef:e6:5c:23:c5:22:cb:c4:8d:
b2:ab:7e:b9:42:a6:2b:1f:d9:5a:19:e3:fe:f9:b5:
cd:8a:9d:b5:f2:f6:6c:96:6b:3c:b8:f6:62:75:19:
85:4c:72:b6:ef:1b:c3:95:73:85:d8:56:d7:88:6c:
db:be:1f:e1:d6:18:8a:07:db:17:8d:c7:12:85:ad:
87:ef:bf:47:06:28:ba:a2:a4:ce:2f:bd:15:2f:31:
e7:94:9d:5a:b1:8b:f9:94:09:f9:33:43:2a:87:f7:
1f:3c:74:7a:2b:3c:94:5d:8e:69:35:0b:a0:77:67:
af:7c:b3:a0:cb:75:33:d5:c1:30:36:dc:b9:a3:5b:
8e:db:e5:eb:03:fe:be:0e:3d:b3:73:76:bf:af:13:
90:57:6f:e7:33:32:ec:05:49:2d:b0:8f:0e:07:fc:
05:3e:9d:08:65:33:0f:a1:8d:f1:c7:00:71:a6:57:
16:af:18:aa:df:84:48:66:82:b6:15:cb:3b:c4:fd:
80:77:4c:bf:a9:31:f2:44:d7:4e:1a:17:00:54:97:
35:66:58:eb:a7:6b:4e:4b:0b:86:07:54:bb:34:4a:
0e:7a:0b:80:e7:3c:22:c5:7d:a6:11:e5:10:1a:7d:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:B5:86:5A:1F:C4:9B:2B:67:C1:61:D9:B4:11:6D:2C:FA:92:E3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:17d::/48
Signature Algorithm: sha256WithRSAEncryption
11:ee:38:88:34:71:47:58:80:d9:a6:c1:2b:dc:0f:9e:77:40:
17:3a:55:a9:a8:33:90:e5:c0:4c:ff:77:71:42:10:b9:6c:13:
78:3f:b3:0b:5c:01:e4:37:40:84:9f:2f:15:ad:da:a8:c4:24:
99:59:50:64:6c:3a:85:97:c0:a5:b3:44:71:71:5a:a8:f8:86:
e4:5e:42:af:25:8f:cd:89:e2:a6:14:48:90:7f:fc:20:3b:8c:
de:c4:58:fd:4a:07:ed:61:50:a6:ce:3c:f6:d4:d9:5d:13:b9:
12:36:a5:0f:ca:53:79:b0:d7:00:19:57:7c:8f:e2:d5:20:4b:
c5:fc:a9:c5:3d:61:3d:21:ad:a3:c8:bb:75:9e:63:eb:3c:43:
69:a3:32:e2:cb:cc:91:f2:d3:64:0f:36:01:24:ad:a7:70:c1:
bd:ee:eb:2e:86:58:17:eb:7a:c2:57:ed:2f:4e:ce:11:58:4e:
5d:0f:df:51:12:50:60:20:91:cd:51:4c:c6:54:4f:fe:34:2d:
59:e6:0b:24:0d:50:be:ee:91:ca:14:92:04:3d:92:32:4b:e1:
d6:2e:52:90:14:22:25:9c:e0:5e:a6:26:4e:40:79:14:fb:ed:
01:b8:bc:e1:ee:fc:20:f5:7b:f6:e4:aa:91:57:8d:22:8e:ba:
39:c1:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org