Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 8O6Y8YtSvKOmj1udJJJ9BqyCNAEgJe4fpJMpDMmhcI0=
Subject key identifier: 7C:E9:48:83:82:BE:A9:D6:74:59:80:86:ED:33:86:11:FE:F6:5C:30
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 21804935F59902ACA01E8AA01AAB26C7EC519CE2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:05 +0000
ROA not before: Mon 26 Sep 2022 06:55:05 +0000
ROA not after: Mon 25 Sep 2023 07:00:05 +0000
asID: 59282
IP address blocks: 2400:d680:19::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:80:49:35:f5:99:02:ac:a0:1e:8a:a0:1a:ab:26:c7:ec:51:9c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:05 2022 GMT
Not After : Sep 25 07:00:05 2023 GMT
Subject: CN=7CE9488382BEA9D674598086ED338611FEF65C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:46:3b:75:bc:7e:f4:be:0c:5c:cb:14:0f:
32:f6:04:3b:46:93:32:e5:51:71:0e:7d:2f:1f:ef:
77:34:77:e0:b0:b0:83:2e:17:2f:ea:a4:1d:a7:a6:
88:71:db:c9:36:31:df:a6:b3:0c:79:a7:00:b5:eb:
cb:19:f6:42:bc:7f:a9:01:af:8d:b2:08:a6:47:59:
22:53:b3:bb:1d:b8:2e:87:a8:c8:ed:0d:45:8c:f0:
40:a3:3e:b2:bf:23:17:47:c6:f8:5d:24:c7:e5:bd:
56:d6:51:31:f0:5f:27:6d:c1:4c:63:54:dd:ec:15:
30:9e:76:c2:52:68:d0:38:70:96:a5:5d:de:88:be:
c3:f9:a1:83:86:e5:51:a2:db:a6:e7:49:55:c6:14:
b4:b4:01:8b:06:cf:a8:90:28:ac:87:92:d6:a2:77:
f6:db:0a:5d:ed:00:da:0c:f4:99:e9:6a:50:1e:1d:
21:1e:4c:14:7a:36:b8:c4:78:60:eb:61:82:1c:14:
26:7e:ea:7d:a5:93:fd:ca:4b:97:a5:64:ca:91:7f:
9a:5d:e9:91:a8:f7:15:a0:22:e6:03:f6:f3:9b:9e:
3a:bd:46:e5:0f:94:27:bc:30:90:78:4c:f4:25:e9:
c1:c4:06:48:3e:2e:f2:20:e2:91:87:59:af:d1:65:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:48:83:82:BE:A9:D6:74:59:80:86:ED:33:86:11:FE:F6:5C:30
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:19::/48
Signature Algorithm: sha256WithRSAEncryption
0c:81:d2:d4:3e:d4:f4:40:84:a8:96:bb:88:7c:cc:3b:d8:29:
4b:98:c6:02:37:b7:56:e3:21:4f:1e:49:c9:2f:7f:18:02:63:
b9:fd:d5:91:e9:40:f2:ea:6f:ce:98:dd:6f:17:0d:88:a3:fa:
81:c6:80:26:15:3c:18:41:3c:53:06:5a:3d:30:67:7e:af:d5:
eb:73:7f:79:01:c0:39:67:48:29:c8:dc:4b:93:a7:58:71:5e:
13:05:71:5a:29:71:dc:bd:6d:d8:5e:dd:54:e9:ce:72:0c:51:
ec:a4:a5:e6:93:71:22:ca:37:27:0b:52:a7:81:1e:94:69:eb:
3d:6a:53:0a:53:b3:fd:20:27:ff:75:1c:8e:86:a8:97:ca:7b:
8b:db:32:f9:6c:f9:f1:30:03:3e:35:b5:6e:8c:d9:36:f0:ba:
52:31:4a:22:8f:0a:b8:92:98:06:e0:6c:b9:c6:78:9a:c7:46:
59:8c:ff:22:23:b4:84:af:48:18:c6:b1:de:06:a8:79:7b:69:
bb:cb:f0:88:79:9a:f1:4e:a7:09:f2:a5:05:45:8b:8b:9e:a8:
35:48:c0:8e:dd:ad:b6:4e:0d:68:91:78:16:91:30:07:35:d4:
a0:28:33:44:75:a4:0d:92:eb:39:9b:fd:50:33:5c:c8:65:86:
d2:f0:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org