Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: yDKlWGJ/F6MzJNMEElPvE469l/VxoAO0KbVG0y+dfms=
Subject key identifier: 7F:E1:71:BF:1B:E0:41:56:8D:05:9C:60:7A:74:7F:BF:8D:AF:F3:F6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 01C333D0B04CFCB25DB12B975965E06343D4B26B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:20 +0000
ROA not before: Mon 26 Sep 2022 07:57:20 +0000
ROA not after: Mon 25 Sep 2023 08:02:20 +0000
asID: 59282
IP address blocks: 2400:d680:198::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c3:33:d0:b0:4c:fc:b2:5d:b1:2b:97:59:65:e0:63:43:d4:b2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:20 2022 GMT
Not After : Sep 25 08:02:20 2023 GMT
Subject: CN=7FE171BF1BE041568D059C607A747FBF8DAFF3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:cf:26:61:7c:69:ec:ab:27:d8:f5:34:71:
0c:32:8f:c4:9e:3a:1d:d2:0f:3c:2e:90:7f:32:d8:
93:51:5e:54:d5:c4:cf:b0:b9:13:8e:05:44:e9:d8:
88:83:fb:ce:77:4e:91:8b:eb:dd:9c:84:2c:a6:41:
f8:8d:ef:60:ad:18:ac:cf:4d:ec:f3:de:4b:4b:d1:
6f:b2:1e:84:8a:7f:a2:8f:12:de:f6:6c:fb:aa:b7:
f9:97:1c:91:d4:31:83:e6:d8:5a:12:93:6a:eb:50:
c9:57:52:b1:78:f5:f9:d7:ec:8d:13:85:e9:a6:ad:
67:f4:67:e1:48:8a:29:a0:1e:bc:01:e5:e2:05:f8:
60:ab:2e:60:a5:87:9f:a5:a0:a1:b1:56:6b:0b:74:
af:a6:2d:ba:c7:ac:7f:0a:9c:a8:e7:71:5d:ed:af:
29:ef:b7:dd:5a:cb:8f:b4:5f:c9:e2:40:e5:b4:3b:
cf:54:8a:98:95:ae:53:ed:ed:95:8a:51:19:e6:e1:
6c:be:1d:e0:4d:64:10:89:72:5d:e7:15:62:d5:0d:
40:51:ee:17:19:6a:38:27:37:fd:d1:df:16:20:85:
2f:7a:2a:7d:72:02:d1:5e:02:cb:69:ab:bc:1f:93:
86:15:67:87:5b:ad:80:29:0b:18:21:11:8a:b0:c4:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:71:BF:1B:E0:41:56:8D:05:9C:60:7A:74:7F:BF:8D:AF:F3:F6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:198::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ea:b4:3f:cb:d3:a8:57:8e:40:26:02:d7:83:98:6d:4c:d5:
a9:46:39:f9:bb:82:d4:bd:26:1e:79:d4:1f:8b:15:99:29:f3:
a5:87:cf:95:64:a3:3a:9c:41:1e:d3:80:7b:01:8b:d6:fb:c3:
25:84:17:62:15:55:82:60:97:8c:d9:5e:44:d1:8b:d3:4c:ff:
83:be:69:bf:ec:9b:fc:00:3f:32:c4:d4:09:51:5a:c5:2e:59:
35:29:30:a0:76:e3:b7:6d:bf:d5:4b:ba:54:66:cf:73:3a:2b:
39:04:e8:e7:4a:1c:9d:34:58:29:77:af:a1:2e:1e:ba:13:33:
25:4f:c8:98:f6:81:56:54:01:6d:03:21:2d:95:c5:7c:36:cd:
87:13:c4:34:ff:bc:74:98:c5:ca:c8:85:92:49:06:10:fd:26:
fe:7d:0b:3a:f9:7c:b6:08:b9:bd:03:02:2e:53:6b:e0:c5:ee:
ef:4c:69:02:c0:0e:69:a9:44:d8:f3:fe:06:e5:6d:69:ea:6a:
c1:81:f1:1b:44:7e:3c:80:40:a9:b0:20:80:15:ff:46:10:6a:
70:3c:d8:35:e8:b8:da:7c:81:86:b4:ed:d8:d6:86:9b:d6:c8:
dd:08:2b:39:89:44:25:3b:c5:ed:55:c9:b2:c4:fb:8e:57:cf:
21:74:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org