Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: zqPwbeMF1QMdBvHpsWlUqcoCmuFXcQ773rSrTrita/A=
Subject key identifier: F9:A3:52:CB:E1:E2:61:3B:AF:B5:11:42:45:37:15:D2:6A:44:45:FB
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 47D1AF2CD4B95778F6CA998A20F9EC2987FBA0C9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:20 +0000
ROA not before: Mon 26 Sep 2022 07:57:20 +0000
ROA not after: Mon 25 Sep 2023 08:02:20 +0000
asID: 59282
IP address blocks: 2400:d680:196::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d1:af:2c:d4:b9:57:78:f6:ca:99:8a:20:f9:ec:29:87:fb:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:20 2022 GMT
Not After : Sep 25 08:02:20 2023 GMT
Subject: CN=F9A352CBE1E2613BAFB51142453715D26A4445FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:3b:cb:63:a8:dd:e9:fc:52:22:b2:22:39:
e4:b0:51:0a:82:73:5a:71:d4:e0:9b:0b:14:68:23:
d5:70:bb:fb:6d:e5:18:53:9c:9a:98:f6:69:65:50:
9f:58:d5:f7:ec:8e:42:88:25:3a:90:b9:7e:86:ce:
85:ec:28:45:32:57:48:4d:a2:f5:35:d5:19:ed:d3:
c2:53:09:9b:51:49:de:ba:13:cb:b3:e7:7e:89:07:
68:f4:fc:c4:3f:52:d0:68:43:90:1f:13:2d:d5:87:
9e:97:66:05:7d:7a:4b:d4:6c:88:b4:f0:8a:65:93:
29:c1:76:3b:a6:85:70:d5:56:3c:24:be:22:d0:7a:
0a:3a:74:16:40:14:90:7c:b7:ce:15:76:77:af:1f:
7a:a8:8a:5b:5a:e0:1a:53:a7:d8:91:8a:bf:e5:8f:
81:22:d7:c8:c1:47:31:e1:19:fd:31:7d:b8:a5:ff:
f6:19:58:76:d7:aa:83:ba:f2:44:55:86:d7:d9:5c:
2a:3d:d1:73:02:7d:45:86:d2:50:f8:04:b4:69:d4:
a5:33:80:8e:84:ec:9e:c1:42:29:62:db:14:09:b9:
fa:a4:a5:e7:6f:22:a0:bc:bb:46:91:5d:6f:0e:51:
a3:82:26:b6:c1:a8:98:fe:fc:58:c1:62:40:bd:f3:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:52:CB:E1:E2:61:3B:AF:B5:11:42:45:37:15:D2:6A:44:45:FB
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:196::/48
Signature Algorithm: sha256WithRSAEncryption
a8:15:6d:62:89:00:bf:76:ea:04:6d:f2:45:1e:af:4c:d3:d7:
af:02:55:e6:12:c5:f7:19:62:31:ae:db:df:bf:8c:83:4a:f6:
e3:bd:92:f4:7c:70:31:59:59:6a:1d:e4:b2:91:6e:3a:4b:ae:
22:66:d7:95:7a:9e:03:c8:d7:9c:62:b5:b2:ff:2e:21:a1:7e:
32:48:fe:a4:91:8c:72:bc:b8:a9:8e:d5:f6:94:78:86:4e:3e:
cb:86:a5:6b:ad:93:44:60:f8:ef:8f:c8:32:08:f5:5d:77:6f:
29:f4:36:74:5a:39:10:3e:a4:2c:e6:07:bc:c5:b6:31:16:51:
43:a6:9f:da:35:18:db:52:f4:31:74:bf:53:2a:67:a5:e6:90:
c5:bf:38:4b:da:84:2b:56:00:33:71:3f:31:c8:29:75:75:8c:
ae:c4:bd:3c:55:56:14:83:d2:05:ef:8b:09:73:2f:a7:c3:3c:
8d:45:51:98:a4:4d:66:83:b5:15:e5:4c:f7:86:f7:e3:28:81:
a6:84:b6:66:b2:bf:a0:f2:ba:5c:75:d2:29:a5:89:f1:b1:15:
aa:27:24:da:ce:d6:65:66:00:91:8c:95:07:f3:ef:6f:2b:2a:
9c:3b:da:77:34:c9:38:87:0c:49:ca:ae:16:6b:3d:66:e0:ee:
7d:6a:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org