Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: UGco/SDvHeKevorBwYr4dverxCKmMjXGtdG30e4QPS8=
Subject key identifier: 6D:50:18:48:FC:FC:6D:5A:38:47:68:9B:29:80:DB:68:F0:9C:60:ED
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4D7A50B7BB121497154F576E35025C1521F151CF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:35 +0000
ROA not before: Mon 26 Sep 2022 09:55:35 +0000
ROA not after: Mon 25 Sep 2023 10:00:35 +0000
asID: 59282
IP address blocks: 2400:d680:1a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7a:50:b7:bb:12:14:97:15:4f:57:6e:35:02:5c:15:21:f1:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:35 2022 GMT
Not After : Sep 25 10:00:35 2023 GMT
Subject: CN=6D501848FCFC6D5A3847689B2980DB68F09C60ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:ba:0b:2a:dd:6a:f8:95:1e:d0:aa:11:91:
8e:eb:c5:3a:a3:e7:1e:8b:46:93:81:6e:43:a3:66:
bc:ef:15:6a:70:be:21:85:8d:c9:bf:87:fd:68:dc:
cd:4b:e8:ce:04:c2:ad:90:ba:14:96:f4:c8:4d:40:
8d:15:8a:f0:13:53:6f:c4:e8:0b:8a:0d:e0:b4:f8:
a8:e2:02:bf:ff:bf:3b:fc:62:86:f1:51:8e:cc:35:
e5:2e:8b:d5:3a:44:19:5f:c5:b5:61:50:23:b6:bf:
73:39:5b:86:35:80:20:79:bc:68:4a:52:c0:e4:b9:
f6:94:75:c9:81:f8:3f:0b:9c:1f:19:a8:2c:84:55:
84:b1:b4:c4:f2:2e:e3:54:9a:a6:a2:a6:7f:9f:10:
ed:21:7a:2c:f3:6f:24:28:13:a9:a3:4f:64:d4:8b:
69:6d:30:0b:25:45:c7:7d:74:3d:3e:b1:88:2c:87:
86:65:c4:aa:c0:9c:6d:42:e8:92:7c:43:35:22:bd:
fe:59:67:5e:43:0b:c8:50:74:04:2e:93:74:9f:b3:
e6:f0:bb:64:47:dd:f9:d1:e5:20:e6:c3:56:19:d2:
88:90:9d:57:cb:3b:06:9f:99:74:7b:fa:42:bc:7b:
aa:b0:be:40:f6:aa:10:77:a5:bc:d5:7c:b0:08:0b:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:18:48:FC:FC:6D:5A:38:47:68:9B:29:80:DB:68:F0:9C:60:ED
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1a1::/48
Signature Algorithm: sha256WithRSAEncryption
13:85:c2:d0:bb:03:b3:57:5a:ad:47:35:ee:fc:ef:58:38:81:
61:c9:cf:7c:b9:d2:22:8e:41:27:db:8f:2c:00:bc:25:55:68:
75:6a:b8:6c:dc:00:1e:ae:a4:4e:93:06:8d:79:3d:ac:7e:d5:
ec:83:2e:a6:e1:c0:7d:54:ec:e3:d0:82:a7:2e:09:c1:7f:30:
04:ba:d1:aa:15:c2:68:d4:87:82:98:80:a3:cd:c8:b1:24:95:
6f:40:65:77:49:7d:d2:09:10:94:e5:d8:51:74:69:db:9b:0b:
cc:a2:62:a4:ef:b2:23:06:03:18:7e:02:0d:23:18:22:74:a4:
7e:bd:5a:bb:18:a0:05:02:5d:4c:82:0e:4c:3a:2f:12:7e:c4:
4e:34:52:80:51:38:a8:49:04:3f:39:71:c7:c9:66:c7:35:11:
e0:d8:2e:09:52:e4:72:81:b2:43:2f:cb:ea:91:e3:70:1b:f2:
e6:34:40:08:f4:d9:0a:c7:5e:0b:94:2c:58:a8:9f:59:54:75:
08:0f:67:18:07:fb:87:f7:f4:b7:8d:d9:ca:5a:13:bf:b8:96:
d3:8c:c3:ba:45:cd:0f:62:46:15:ae:3d:9c:30:c4:53:9e:2b:
57:3c:3c:f3:32:90:6e:8d:28:f7:7f:fe:ec:2a:65:d5:e5:d7:
9f:17:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org