Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: qO6HMF4rAwCMhMceaDFIANM8Ejm40orQ2OGPzOe9KxU=
Subject key identifier: 03:26:46:73:B2:92:02:AD:FE:1D:3F:6C:24:1E:8E:CC:F9:A8:42:B2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 79F63AA8D3339052B432F4C4939F58B420B2A400
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:12 +0000
ROA not before: Mon 26 Sep 2022 07:57:12 +0000
ROA not after: Mon 25 Sep 2023 08:02:12 +0000
asID: 59282
IP address blocks: 2400:d680:180::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f6:3a:a8:d3:33:90:52:b4:32:f4:c4:93:9f:58:b4:20:b2:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:12 2022 GMT
Not After : Sep 25 08:02:12 2023 GMT
Subject: CN=03264673B29202ADFE1D3F6C241E8ECCF9A842B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:a1:c8:98:32:c6:59:06:fb:97:42:12:36:
fa:8d:3b:c1:1b:be:92:eb:1b:4d:5c:d3:0d:c4:67:
80:d5:b5:50:c9:60:cd:3a:da:c6:75:32:38:47:5d:
13:64:1a:50:a6:dc:cc:f8:38:97:a8:f2:cf:be:fc:
07:24:54:a5:42:e9:f5:8a:f1:fd:d5:7d:ce:7a:d0:
ce:e8:8f:05:09:ea:e4:22:4e:99:9f:c5:b8:25:e6:
cb:9c:1e:99:41:a1:c6:d4:49:e1:aa:a2:68:6a:da:
b4:e8:ab:22:78:d2:74:25:fb:83:7f:f6:62:83:41:
40:91:51:8c:0f:28:75:51:0b:0b:7f:a9:dd:65:36:
72:85:66:77:b6:ff:e2:9d:0f:bf:d4:f2:1b:fe:1f:
70:cf:68:c7:6a:19:53:e0:ee:a3:0d:10:05:c8:86:
94:b6:30:dc:0e:ee:be:36:f4:3a:7b:b3:36:aa:59:
43:23:ed:d6:76:49:39:69:71:5f:98:7b:9c:e6:95:
f4:35:15:b0:1a:ac:15:7e:03:3d:c7:9a:56:c2:2e:
85:73:1a:ea:3b:49:59:e5:29:7d:f3:ef:a7:37:95:
d6:6d:38:47:ab:cd:28:be:11:50:5b:3e:20:4f:46:
92:fb:e5:44:41:73:91:e7:62:34:ea:96:00:90:9f:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:46:73:B2:92:02:AD:FE:1D:3F:6C:24:1E:8E:CC:F9:A8:42:B2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:180::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e3:46:75:8b:76:c7:e6:de:8d:bb:8f:c1:f4:70:6b:09:39:
66:1d:f8:b0:e6:82:bd:18:ca:15:b0:e3:20:49:d0:11:90:00:
a1:bb:6f:2e:21:0d:06:2c:a6:36:06:6c:88:94:80:28:60:9b:
90:fc:4d:36:ea:3e:0a:7d:ca:0b:a6:1a:4c:53:36:e4:40:58:
67:9b:ad:9f:2e:9c:12:78:e7:04:7a:bb:1c:9f:ae:be:76:c2:
85:be:fa:50:93:60:69:e4:14:2c:c1:b2:6c:4b:77:a9:7d:13:
14:2b:ad:d7:f3:e7:c7:b3:a7:bc:de:47:61:7a:ae:a8:e5:f9:
cf:49:35:84:2b:a3:39:24:6f:3e:ef:99:77:19:f8:34:c4:bd:
fe:4f:85:61:d2:73:d8:5c:3e:09:28:73:1a:db:6a:0c:cb:3f:
9b:5f:b0:76:79:35:fe:05:72:f2:1b:64:be:2d:c9:ed:d3:36:
04:60:f5:de:61:fa:c4:44:45:74:8d:3e:67:42:58:f3:d5:4b:
63:f8:3b:82:0f:da:b3:f3:ab:f0:f4:3c:16:55:7f:98:a1:0a:
f3:89:15:3a:a0:fd:a5:45:68:e2:3e:09:b9:eb:c7:e3:4d:1c:
5d:81:6b:46:7a:a9:77:d9:98:5a:3b:5b:60:61:c7:c3:e9:89:
24:8a:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org