Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: anSYSJsZZmMBQvlJOb540fkeHTgATUw3RCnclZq/i84=
Subject key identifier: 76:10:14:4C:C3:A5:9E:AC:7E:76:EC:E9:CF:1E:CE:5A:06:57:00:35
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3D3A5CA28346952FF81E86801AA1C7EB1E33FE55
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:04 +0000
ROA not before: Mon 26 Sep 2022 07:57:04 +0000
ROA not after: Mon 25 Sep 2023 08:02:04 +0000
asID: 59282
IP address blocks: 2400:d680:192::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3a:5c:a2:83:46:95:2f:f8:1e:86:80:1a:a1:c7:eb:1e:33:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:04 2022 GMT
Not After : Sep 25 08:02:04 2023 GMT
Subject: CN=7610144CC3A59EAC7E76ECE9CF1ECE5A06570035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:c8:66:46:48:30:a3:b7:25:de:3e:47:62:
1d:97:80:5a:5f:eb:e1:09:fa:b3:af:07:05:5c:42:
f8:f8:55:00:c8:71:f0:3a:d6:2d:01:4e:90:d2:76:
85:9d:a9:c2:42:03:e5:51:df:64:09:c0:47:5b:00:
d4:c4:90:d1:97:62:e8:16:31:b2:bc:11:55:f5:c0:
b5:6d:f5:77:af:b4:fd:03:f7:02:37:cf:ec:13:23:
1b:83:e7:a1:24:06:c0:c9:99:d0:f7:aa:23:ce:3e:
cc:d9:a9:d9:79:7a:b1:06:87:2b:41:ce:9f:64:9f:
8e:95:f8:ef:ea:49:ec:6c:e1:02:f9:6f:cf:ec:69:
dc:ce:a3:73:8a:01:12:ed:c8:58:2e:73:37:08:cd:
b1:96:9a:d1:81:23:a8:e9:24:fe:4f:c6:ba:26:e1:
ed:18:e1:1a:60:32:99:fc:d3:17:4c:4a:e9:42:b1:
c4:00:c7:58:aa:bd:bb:23:b2:0f:37:10:a0:b2:98:
fa:a5:ab:22:84:ad:77:af:c6:10:af:98:07:c8:44:
27:93:d1:b8:a9:c9:18:0b:c5:ad:8e:df:da:f3:22:
90:db:27:48:2d:0f:a4:27:52:db:2b:e2:f3:bf:95:
09:28:4f:da:4e:f2:72:b1:04:22:17:06:b4:0e:1d:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:14:4C:C3:A5:9E:AC:7E:76:EC:E9:CF:1E:CE:5A:06:57:00:35
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:192::/48
Signature Algorithm: sha256WithRSAEncryption
14:50:8b:7c:de:f8:b7:18:84:25:da:03:64:90:d9:c7:35:0e:
92:2c:12:eb:19:dd:4d:fe:bf:5e:e3:16:4f:15:eb:33:2f:f2:
d2:bc:a5:aa:8f:af:1b:4b:95:c6:d9:67:b2:ec:c7:c0:da:a2:
f4:b8:ae:fe:19:1d:f0:57:99:a5:bd:cc:1a:99:e4:ba:7a:bf:
13:dd:2e:96:34:dd:8a:fa:8b:85:d9:46:3a:e2:67:91:e4:fc:
80:70:20:89:7f:e1:ae:44:74:02:ae:68:b9:b9:08:e0:71:d1:
7d:85:77:67:4f:1d:cc:58:58:c8:d2:7d:62:f2:44:33:9c:ee:
d9:c3:90:14:71:e5:21:8c:52:9b:6e:e4:55:f8:ee:4b:6b:bd:
58:b4:b8:f3:cf:0b:58:61:74:3a:ec:14:12:ba:58:f3:f7:2c:
3e:fb:58:35:7d:04:fe:76:72:0f:62:1f:d2:00:ce:0b:65:0d:
85:b9:03:d8:a9:c7:68:ec:32:a4:cd:f0:70:f3:5a:65:e3:5f:
3c:d4:6e:f8:9e:2b:e5:98:1e:97:bf:90:51:f2:ed:eb:a7:27:
94:7c:b6:43:e2:6c:4c:d9:7b:48:13:f5:c4:ab:b5:c4:72:ff:
87:59:81:ef:a8:fe:5f:00:7a:e1:49:9a:62:30:84:5d:b1:79:
22:1a:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org