Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0OLB8+bfWish4dAe85B/Lan+PH1dtyUyGfUEaGvCip0=
Subject key identifier: 7E:35:1C:16:DE:3C:B1:4C:0E:5F:7B:00:E8:C1:FD:9A:39:C6:BA:15
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2C54F5F20AB90E70BAA7F368297B038951470F37
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:19 +0000
ROA not before: Mon 26 Sep 2022 09:55:19 +0000
ROA not after: Mon 25 Sep 2023 10:00:19 +0000
asID: 59282
IP address blocks: 2400:d680:1a9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:54:f5:f2:0a:b9:0e:70:ba:a7:f3:68:29:7b:03:89:51:47:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:19 2022 GMT
Not After : Sep 25 10:00:19 2023 GMT
Subject: CN=7E351C16DE3CB14C0E5F7B00E8C1FD9A39C6BA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:a0:6a:b4:2a:bc:9e:75:d4:22:2c:57:a4:
61:1e:34:37:c9:e0:e8:38:9e:ad:15:ac:6b:c9:b1:
3f:0a:71:33:68:29:0e:b8:3a:10:04:e7:b1:06:23:
c5:38:73:aa:4b:d8:61:d8:9c:30:da:f7:8d:eb:d3:
7d:5f:24:81:43:01:b8:7d:47:a0:fb:c1:18:07:af:
23:91:e5:e4:c6:58:3b:1e:c3:e9:e2:e2:4c:91:d3:
f0:6f:13:84:74:6f:02:0a:df:d9:dd:d5:5c:a0:d9:
44:36:35:f3:d2:33:9a:4f:14:ae:6a:5a:ec:80:1f:
79:25:90:02:64:47:b6:03:22:91:1e:b4:21:ed:5c:
a4:f4:d5:31:e8:11:9f:b9:fd:09:09:a8:1b:45:e5:
93:e2:bc:66:03:7e:3c:f1:98:95:de:6a:d2:e7:05:
61:7a:e6:99:6e:92:96:9f:6b:01:7d:2a:3d:df:ff:
bb:bc:45:01:49:60:37:3d:4a:73:c9:da:54:00:25:
fe:31:a5:d3:ef:bf:58:6b:ba:6e:c7:cc:f8:42:06:
cf:8c:e9:04:0e:9c:00:4b:d5:52:6d:d6:ff:af:bc:
e0:b3:01:c9:1b:ff:cd:c0:38:67:5d:ea:85:54:46:
18:ca:74:0b:6c:c2:78:a1:ea:28:3a:98:36:d9:41:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:1C:16:DE:3C:B1:4C:0E:5F:7B:00:E8:C1:FD:9A:39:C6:BA:15
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1a9::/48
Signature Algorithm: sha256WithRSAEncryption
37:91:a9:5a:23:37:d5:d6:77:d7:69:28:50:25:fc:7b:7c:c6:
12:cd:da:53:a0:d7:a7:67:40:0b:b7:d0:ae:76:6b:95:01:91:
3d:8a:5e:31:d5:06:9b:13:db:22:ed:b1:75:a8:52:d2:5f:71:
12:a7:e6:67:60:fd:a2:cc:82:19:ba:d2:27:44:3b:84:97:3c:
1d:bb:27:36:bc:af:bb:f7:6b:98:08:8d:50:d7:98:0a:04:4c:
6c:4e:be:3a:d0:ea:6c:42:1b:06:bf:1a:bc:55:4f:47:d7:2a:
83:b1:09:70:e1:12:2f:3d:82:32:b7:40:cc:28:04:c4:33:28:
d9:99:a8:ab:60:ec:ac:f7:01:5c:0b:dc:db:54:da:15:4d:7a:
ff:58:06:09:a4:c5:72:2f:5b:66:b6:a5:65:a9:3b:ac:34:65:
30:3a:a5:87:ea:cb:82:f6:bc:34:23:3b:ee:85:e4:aa:df:46:
24:c5:76:2f:d3:b1:8c:c1:43:82:09:48:04:80:47:6f:2b:a7:
a8:8b:13:5c:b5:37:cf:fe:13:80:a0:e9:eb:53:e4:93:f7:a9:
19:80:03:b0:31:44:a0:a3:44:5c:3b:7b:83:dc:9b:4e:54:be:
e8:24:e6:27:58:de:1c:fa:84:89:af:c1:fb:38:5b:66:ba:44:
47:8f:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org