Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 59Ph3CmTU2wJRSwDgcMmRhs0bbiiDinZE5ZzZa9tbxw=
Subject key identifier: F7:E7:32:3C:83:B0:6C:BB:61:3B:13:A5:2A:DF:A8:15:CC:4C:96:FF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 17EDE3E1E0A7C5BA83524447483E2793FD9C9E1A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:18 +0000
ROA not before: Mon 26 Sep 2022 07:56:18 +0000
ROA not after: Mon 25 Sep 2023 08:01:18 +0000
asID: 59282
IP address blocks: 2400:d680:181::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ed:e3:e1:e0:a7:c5:ba:83:52:44:47:48:3e:27:93:fd:9c:9e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:18 2022 GMT
Not After : Sep 25 08:01:18 2023 GMT
Subject: CN=F7E7323C83B06CBB613B13A52ADFA815CC4C96FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:b5:08:db:d0:43:75:08:08:ec:bd:a7:f7:
94:f4:b1:7e:8c:94:e5:13:3d:3b:99:7b:2f:4f:d3:
d7:6c:6b:ed:bd:fe:b9:8c:7d:7f:2e:f8:2c:ee:05:
87:a5:9b:5c:ea:b4:1c:5a:8d:e5:7e:bf:d2:e5:d8:
8c:91:c4:77:f9:c3:bb:a0:fc:d6:30:da:ef:55:80:
99:e7:79:c9:bb:4a:1c:8d:f5:91:e7:7f:de:6d:29:
41:ff:ca:e5:cd:23:a9:a4:bb:79:ed:64:88:6b:cb:
83:12:d7:e3:54:7a:37:39:6e:d3:f9:eb:2d:da:88:
35:10:8b:0d:4f:0f:61:1f:15:14:fc:21:ff:85:82:
c3:e1:98:41:ee:46:8e:8e:fe:85:24:5f:60:7a:07:
97:ac:56:98:6e:a1:dc:1a:fb:d7:f5:e6:25:68:c8:
c0:43:b8:6f:d0:52:57:f7:73:09:6d:b0:73:dd:52:
7c:f7:6a:26:d4:96:85:cc:3a:bc:95:d1:e5:df:51:
17:a3:48:ac:49:47:1d:7b:76:66:ac:3e:62:e0:b6:
c3:bb:e2:2b:f3:46:95:ec:2a:09:a2:6d:3a:c4:97:
2f:57:b2:02:c9:87:2d:b7:43:a4:51:e9:19:9c:c9:
6f:da:18:38:3e:15:44:75:68:ce:0f:49:4d:66:fd:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:32:3C:83:B0:6C:BB:61:3B:13:A5:2A:DF:A8:15:CC:4C:96:FF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:181::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ac:ca:1c:94:e2:25:e5:57:2f:17:aa:d1:3c:31:ea:97:3a:
11:d4:f4:4c:9a:21:03:64:62:75:97:01:91:6e:84:b4:d2:f2:
74:3e:a9:92:bc:e1:06:b3:7f:5f:24:7b:5e:6e:87:3b:95:6e:
cd:4f:b7:ea:f8:3b:8d:74:f2:7b:38:c6:5d:db:c4:07:65:2c:
24:c2:a1:3a:97:dd:f8:19:87:a6:d4:a4:2c:68:e7:89:e3:f6:
8c:4e:24:1e:2b:d2:1f:73:02:3d:1d:b6:81:04:95:37:c1:fb:
90:e9:e3:41:ed:f9:95:d7:5a:bd:31:c9:19:73:f5:c0:1e:ed:
ae:6b:cd:fb:e3:a6:65:f0:8b:32:f3:b9:81:aa:62:77:51:bd:
0c:f7:7b:ee:89:dd:a2:aa:d3:8b:52:33:15:91:9e:2a:07:6c:
05:5e:55:77:04:1a:0e:4d:ca:6b:93:ec:20:f1:40:e5:74:17:
18:94:a1:8a:31:84:f6:37:7b:8e:08:02:b8:b8:80:e6:ba:cc:
bb:c0:b1:60:f0:f4:0b:3f:fa:8b:27:4e:e5:5c:ec:b9:a6:5d:
de:1d:68:68:22:eb:6f:34:56:1a:7e:8d:78:40:40:e1:75:cd:
7b:87:93:79:91:be:56:22:53:9c:e2:ca:ae:39:96:79:a3:76:
fb:aa:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org