Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ILnyrqidl1wN2rqPYi8+eqSiiMDQWWRX/ZUVr/MviyY=
Subject key identifier: BC:52:E2:D9:C3:1D:FC:B0:59:90:1C:C3:6E:4D:1A:D2:B0:8B:F7:E8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0FE6E0E5CA1430275D1239CFFD4D38E34CF2BD74
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:43 +0000
ROA not before: Mon 26 Sep 2022 07:56:43 +0000
ROA not after: Mon 25 Sep 2023 08:01:43 +0000
asID: 59282
IP address blocks: 2400:d680:188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e6:e0:e5:ca:14:30:27:5d:12:39:cf:fd:4d:38:e3:4c:f2:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:43 2022 GMT
Not After : Sep 25 08:01:43 2023 GMT
Subject: CN=BC52E2D9C31DFCB059901CC36E4D1AD2B08BF7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:14:49:7d:66:ae:36:1f:3d:70:4f:d0:57:
31:6d:0e:ad:16:01:51:e2:f8:4e:34:94:db:47:71:
0b:43:67:83:36:a3:35:eb:cb:ae:51:92:35:ee:74:
bc:a1:77:54:8b:86:9f:28:5b:11:67:12:60:23:6c:
e2:32:ed:11:75:d6:24:bd:14:1e:1b:fe:56:7f:d4:
1e:39:44:85:1a:63:30:c4:a2:91:5a:e8:10:41:95:
af:7a:34:dc:60:ef:82:c7:0a:1b:83:c3:3f:59:23:
33:61:ed:02:36:02:ee:b3:9f:88:db:f4:41:d8:80:
66:3e:50:b5:83:6d:93:31:43:7c:08:4a:a2:b8:f7:
c5:fe:7e:d2:da:02:27:42:95:8e:d5:f2:2b:38:81:
47:2d:12:91:7a:2b:7c:73:03:34:1e:dc:3c:1d:28:
ba:c0:2b:6a:7e:b3:f2:b7:cc:b6:87:bc:f0:d3:5e:
f1:42:6f:2a:6b:7c:21:b4:b5:d3:af:82:d4:14:a5:
29:f6:1e:d0:7f:8c:f3:da:da:39:b3:ef:fa:6c:00:
10:f8:a6:24:7d:e2:bc:5e:f3:51:98:91:de:f6:df:
7e:bc:0f:ee:8b:bf:00:9c:96:fa:a0:dc:ce:d6:01:
d1:7a:2c:3c:7c:42:12:20:fa:10:4b:7a:f6:84:e1:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:E2:D9:C3:1D:FC:B0:59:90:1C:C3:6E:4D:1A:D2:B0:8B:F7:E8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:188::/48
Signature Algorithm: sha256WithRSAEncryption
5b:96:2e:35:1f:15:7b:11:07:ab:8a:a9:52:21:04:b9:76:cd:
08:45:b4:9a:65:68:59:e0:15:82:67:aa:06:40:ce:e1:48:41:
a4:c1:d1:12:64:e9:19:52:0d:a9:c1:04:d7:4d:d0:86:3f:f9:
57:5c:aa:b4:29:fb:ba:9e:24:91:f6:3e:12:1f:35:2d:92:e6:
de:73:be:4a:3b:8e:01:94:b9:f8:f6:04:d0:94:e9:2d:b8:06:
e0:46:cd:98:4b:3b:09:dc:fa:c7:a9:ed:cc:95:0f:92:7a:3f:
a9:f4:b8:4e:4d:5d:9d:60:b7:8e:b8:79:9d:e6:50:57:d3:1a:
63:a4:06:2d:71:ae:08:e9:8a:be:ab:9b:1c:7f:8d:b0:ea:10:
c4:6e:b1:5f:b0:46:ab:ef:64:95:3e:23:16:c8:57:72:50:52:
bd:fe:d7:d6:f0:dd:ce:a3:4e:1b:fa:1f:db:4e:46:f3:c4:c9:
e8:8f:b9:6d:66:6c:63:40:cd:a3:02:a1:cd:6f:38:a1:ce:11:
63:ea:5a:52:ed:fb:5a:69:ee:48:2e:12:7c:38:1f:60:cf:69:
c6:e2:77:bd:35:31:99:db:c3:ef:3a:43:5b:a6:6c:69:e9:87:
cd:27:bf:47:71:13:94:f2:a9:6a:96:c2:ba:02:91:cb:ad:42:
da:44:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org