Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: KftdGQas1NV1faHy5KPTCBxcnLWLwuh80d8qEVnNchI=
Subject key identifier: AD:E8:62:CA:41:2D:24:78:72:78:00:03:29:A4:47:1F:62:D0:9C:79
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 544E78938F693017236F8155755FFFF3E38584C8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:13 +0000
ROA not before: Mon 26 Sep 2022 07:57:13 +0000
ROA not after: Mon 25 Sep 2023 08:02:13 +0000
asID: 59282
IP address blocks: 2400:d680:18c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4e:78:93:8f:69:30:17:23:6f:81:55:75:5f:ff:f3:e3:85:84:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:13 2022 GMT
Not After : Sep 25 08:02:13 2023 GMT
Subject: CN=ADE862CA412D24787278000329A4471F62D09C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:3f:c8:a7:04:eb:2e:c0:02:0f:ba:27:63:
35:63:b0:47:79:af:d2:a4:f7:bc:73:a4:af:3c:1c:
54:fd:27:87:07:22:0b:4a:a8:18:ce:88:31:4d:71:
47:65:b5:08:5e:86:c1:9b:3b:98:67:c2:44:c9:1a:
0b:bc:0e:54:3e:49:3b:3a:cc:49:cb:c9:da:3a:bc:
a2:37:c5:a0:7a:1b:e4:ea:66:ad:e3:56:ed:b0:ec:
bb:d5:af:2c:fb:40:d6:a1:7f:33:f6:3b:9a:40:f4:
33:25:20:0d:9b:c8:27:6e:38:de:88:d5:a2:d0:87:
c5:fa:e7:61:00:2c:25:be:c2:ac:b9:61:cd:41:29:
57:75:b0:97:79:62:87:6b:df:8d:00:20:e1:95:86:
2d:6b:44:8f:8a:c3:1d:25:f8:d7:f2:cf:b4:71:5f:
3c:ce:2f:33:b0:94:f2:ef:a7:ce:14:e3:5f:e4:ac:
01:87:f3:67:5f:0e:47:a2:34:ae:aa:76:d8:fd:33:
4d:d6:66:3a:c6:99:7d:3b:c7:e9:a0:c5:19:00:29:
26:c4:62:b6:59:5f:e3:37:3a:9a:28:d5:25:6f:dc:
e3:62:6a:93:1a:e8:22:84:d2:b8:d3:d6:6b:2d:f3:
ce:e7:cc:24:21:65:44:18:90:67:5d:a8:5e:e2:ed:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:62:CA:41:2D:24:78:72:78:00:03:29:A4:47:1F:62:D0:9C:79
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:18c::/48
Signature Algorithm: sha256WithRSAEncryption
00:fc:f6:6c:17:04:d6:5d:e1:fc:12:7e:6b:18:8e:03:2f:10:
12:6e:7f:ce:4e:48:a2:93:ed:e9:94:77:a7:ce:47:a2:e6:c4:
df:80:89:fc:16:37:42:59:85:d5:96:a3:77:69:c8:c4:fa:12:
5c:e5:c9:fe:4d:ad:2a:c3:50:94:23:33:8c:e4:d6:94:a1:8e:
c2:60:ba:4e:c3:40:a4:97:ea:30:32:eb:0e:e3:97:ed:49:83:
63:c6:45:28:a5:31:0d:5e:6c:bb:6f:95:27:08:12:4f:e1:5c:
e0:03:44:31:02:37:b8:65:a9:71:d2:a0:c2:4d:90:a5:71:66:
6a:78:41:ea:38:b4:11:08:31:79:a4:30:90:5c:2a:4c:a5:e3:
44:57:44:db:49:ed:cb:f5:c4:23:7a:11:02:af:32:c4:13:f1:
5c:31:d5:8f:12:58:9c:91:e2:d7:63:22:4c:1a:ae:81:29:7c:
68:43:2a:2d:7d:6a:ba:2a:90:5d:d7:80:0a:13:bf:99:d5:54:
13:e9:c9:bd:93:8f:a8:88:a0:78:6e:12:9b:74:21:99:1e:4c:
13:c6:e5:af:5d:79:9d:ab:de:26:1c:1b:4e:d9:e6:78:f4:4c:
e8:fe:01:28:5b:bd:b0:4a:51:1d:61:18:bc:b6:ab:81:20:3f:
e9:e5:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org