Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 28gTV8B7lgKOVa8dETXsW96xwFQvUZ0q0amyXj3eVkU=
Subject key identifier: B1:73:3A:14:50:A2:33:12:E3:78:80:37:49:B3:31:A3:A4:B8:9A:13
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78EE9E9A24730A20AB4266B84B7CDC2045CCB7E9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:21 +0000
ROA not before: Mon 26 Sep 2022 07:56:21 +0000
ROA not after: Mon 25 Sep 2023 08:01:21 +0000
asID: 59282
IP address blocks: 2400:d680:197::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:9e:9a:24:73:0a:20:ab:42:66:b8:4b:7c:dc:20:45:cc:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:21 2022 GMT
Not After : Sep 25 08:01:21 2023 GMT
Subject: CN=B1733A1450A23312E378803749B331A3A4B89A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:31:bb:42:9e:a0:99:23:59:40:ae:91:78:
e9:b3:33:34:ef:25:d4:eb:8c:de:d1:bb:97:97:34:
de:c7:23:48:88:b8:66:86:3f:e2:f5:60:99:bc:c5:
be:7e:c0:3c:d9:70:ca:a2:ee:53:b7:a2:a6:31:ba:
c0:eb:9a:49:0a:6c:82:27:ed:cb:bf:c0:9d:b4:75:
6c:21:c1:9e:07:d2:c1:a0:f9:d2:dc:5d:1a:e5:2f:
bb:c7:e4:d9:34:1b:ea:21:23:e0:c1:8c:f3:86:f7:
6b:b9:75:ce:8d:49:03:f7:1b:58:5d:77:3d:25:82:
e1:9b:8c:5e:56:4e:f6:a9:05:68:41:a1:e2:d7:1a:
f6:01:81:d0:e5:5b:c5:ff:a2:e0:d7:96:73:1e:91:
29:bb:6c:9d:4c:2f:f7:c4:75:f1:4b:72:d7:07:73:
c9:5f:1a:74:f5:45:b6:cb:e7:4e:76:08:9d:ce:1b:
c5:e8:2f:01:db:fe:a2:fb:9e:f9:25:2d:f1:23:2a:
2c:83:67:54:01:c9:3f:69:0b:14:47:3d:d2:f7:0a:
88:c3:80:32:a8:05:a1:2c:5f:b3:7b:e9:7c:89:99:
98:8c:b5:08:f8:c9:24:a7:07:84:ba:e0:83:18:db:
79:c4:97:ec:e6:0c:6a:0d:44:24:8f:15:ed:ab:fd:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:3A:14:50:A2:33:12:E3:78:80:37:49:B3:31:A3:A4:B8:9A:13
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:197::/48
Signature Algorithm: sha256WithRSAEncryption
d7:00:fe:32:7f:50:66:08:d6:1d:0f:09:54:37:84:84:91:3a:
3c:26:1a:d5:00:b7:ba:a7:cf:b7:ee:7e:c6:25:ad:c5:5d:3b:
17:a3:f0:14:1a:82:da:76:df:bd:74:af:e3:ea:37:68:26:d2:
30:a3:33:cf:7b:90:01:01:13:52:fb:a2:12:24:a8:c9:b6:f0:
7e:60:91:c7:07:1b:4d:70:a6:05:19:4d:a7:c7:1d:bb:53:f2:
6d:cb:3a:0e:d8:73:8c:03:95:93:f4:43:9f:97:2e:09:e9:d0:
28:6f:2b:a1:60:08:5b:5f:f1:83:b5:f9:2d:0c:f0:c7:a3:30:
71:38:0c:16:e5:5d:6b:e1:fd:43:c1:39:ec:1c:b5:1d:73:64:
e5:18:cd:36:f9:36:51:68:d1:60:b9:1b:c0:4c:5e:33:76:00:
de:46:d5:c2:e4:a9:3c:33:63:18:68:f6:c8:ce:4c:c3:8d:3c:
c9:fb:f4:f2:4f:64:44:d6:5b:7f:5a:26:a5:0a:f6:ea:de:a6:
38:10:cf:f3:cc:43:87:3d:67:94:91:26:9e:f8:b6:90:1c:af:
61:e7:60:7e:99:46:07:a3:dd:8a:2b:47:e3:bd:de:d6:38:3c:
cb:38:3b:00:de:62:d2:4e:1b:39:d0:23:fe:84:e3:76:3e:e8:
c3:6e:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org