Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3137653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0aNcdLQORNl0tv+DPLxiIVC/alYz5XjMrpEuzchZrzA=
Subject key identifier: 34:3E:9F:28:0B:25:C8:A2:50:19:8C:AA:40:5E:DB:65:DE:6B:7F:EA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 67826173891D0629A827D503696AE9E5CF558CE3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:21 +0000
ROA not before: Mon 26 Sep 2022 07:56:21 +0000
ROA not after: Mon 25 Sep 2023 08:01:21 +0000
asID: 59282
IP address blocks: 2400:d680:17e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:82:61:73:89:1d:06:29:a8:27:d5:03:69:6a:e9:e5:cf:55:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:21 2022 GMT
Not After : Sep 25 08:01:21 2023 GMT
Subject: CN=343E9F280B25C8A250198CAA405EDB65DE6B7FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:82:fc:81:7e:c8:84:2b:8d:7e:13:c8:8e:
3b:ab:e6:9d:d8:00:e5:56:49:d0:9d:37:03:5b:1b:
b5:21:fa:9e:f0:83:c5:37:3b:82:36:c3:04:61:b2:
5e:f8:f5:1a:bd:79:ca:12:2b:f6:fe:c4:b7:64:a4:
ce:89:56:9d:34:9f:d5:bd:e9:df:02:5b:82:0b:99:
fb:10:be:c9:45:bd:26:f6:92:03:24:58:d4:94:21:
76:86:45:6d:87:05:ac:01:2d:11:bf:27:70:dd:2f:
50:85:c8:19:01:68:35:99:e6:53:8e:0e:be:10:91:
30:a6:81:66:d6:88:8e:1e:7b:33:0f:7c:f4:25:cf:
f5:81:7c:82:fc:e5:4b:4b:d0:32:5a:86:20:95:9e:
7d:d4:61:7e:fd:e7:05:cb:9b:87:ec:b3:29:80:e7:
b3:e2:6b:9b:d0:90:5e:b0:32:92:9f:54:83:02:ac:
16:3a:a9:88:17:23:3e:7b:6c:39:98:ff:01:b9:bf:
ca:94:17:e5:72:77:f7:df:91:b1:e6:af:e7:32:d4:
93:86:b8:5e:e5:80:8c:ca:aa:25:31:1c:2c:cc:f0:
4e:72:50:75:7b:da:2b:b4:8e:57:52:d0:9d:9a:73:
e9:9c:6f:f1:3f:e7:37:ee:7e:c9:78:40:e2:59:7e:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:9F:28:0B:25:C8:A2:50:19:8C:AA:40:5E:DB:65:DE:6B:7F:EA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:17e::/48
Signature Algorithm: sha256WithRSAEncryption
55:eb:cd:00:aa:bf:7f:52:63:85:91:23:04:3d:0a:a6:ef:da:
35:e8:4b:ab:41:dc:23:80:5d:0d:cc:d5:60:03:5d:0a:49:8f:
58:61:16:1b:05:f0:d4:88:8e:f2:23:30:76:84:49:9f:6e:15:
52:bd:18:77:c7:4f:44:c9:e9:98:80:b1:17:99:5c:fa:76:f8:
6f:98:92:9c:3e:d4:81:bd:0e:00:0a:89:7a:a3:ca:9b:43:88:
d0:3b:fd:22:4a:44:80:3a:4a:bc:54:df:79:15:79:9f:ad:25:
e9:a4:f1:06:93:11:bf:e6:19:84:1f:b2:b9:9a:3b:7d:20:bc:
fa:c3:14:e7:8a:8d:eb:25:55:d3:f8:1c:86:e3:d4:d7:98:f2:
d0:84:8c:65:66:b6:60:91:59:08:f2:d1:e8:b1:28:de:09:33:
38:99:a8:3c:f4:e9:1e:41:9b:9a:60:03:6d:10:c3:79:cc:d1:
cd:04:ad:ea:b5:c8:ff:26:79:10:ef:d5:d9:48:5f:73:37:e6:
1a:08:b5:7e:d9:ec:c3:45:d1:e0:9f:b8:35:ef:8b:71:17:f5:
a5:a0:66:ba:4a:e4:aa:eb:93:ac:b0:bc:9d:6b:f5:ea:3c:82:
5b:8f:be:70:d2:1d:a3:d7:7c:1a:80:6a:44:2d:7d:8e:d7:fe:
d7:05:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org