Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ixvxJ7LdrL/O2aaDsE0vphev7A+uRt8LYeWJp/OK0TM=
Subject key identifier: 2C:F1:94:C0:BF:11:7E:9B:8B:FB:69:23:70:1A:D2:F7:14:C2:8C:AA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 14A0439FBFC08EFB6A20822BBD98039BAC45F1A7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:24 +0000
ROA not before: Mon 26 Sep 2022 09:55:24 +0000
ROA not after: Mon 25 Sep 2023 10:00:24 +0000
asID: 59282
IP address blocks: 2400:d680:1aa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a0:43:9f:bf:c0:8e:fb:6a:20:82:2b:bd:98:03:9b:ac:45:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:24 2022 GMT
Not After : Sep 25 10:00:24 2023 GMT
Subject: CN=2CF194C0BF117E9B8BFB6923701AD2F714C28CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0a:35:d8:86:6a:08:b1:f1:3f:57:db:29:d4:
cb:bd:ec:49:23:34:91:a8:9a:71:77:cd:63:a5:a4:
78:99:a8:f6:19:7e:f7:b8:b8:a1:d9:11:5a:32:5a:
6a:f7:5b:b7:f9:8d:a0:c6:2e:b9:69:60:e2:0e:f6:
2f:c8:0e:f7:07:0a:f4:f4:c2:76:8e:e9:af:9c:65:
fe:75:0b:03:df:71:7b:db:d4:40:d6:28:ca:41:59:
f0:4f:53:9a:bd:b1:02:e1:44:b7:ac:69:47:ad:b4:
9e:c1:83:11:f2:03:cb:5c:54:d9:b2:75:2c:c2:19:
96:ba:04:b3:f9:f3:3f:c8:df:a6:0f:a1:18:dd:ae:
9f:7a:c5:ea:b3:66:59:ff:6f:71:ec:fb:f0:71:9b:
3a:0d:11:81:ba:43:54:8c:80:23:10:64:c5:ae:70:
6f:f1:43:f8:7c:7d:44:50:88:46:27:b6:46:16:fc:
48:d0:5d:6b:25:ac:bd:63:97:95:7f:4d:33:8a:1a:
54:ca:c8:86:92:cf:e4:0f:8a:d9:c5:ed:8c:ad:60:
1f:fa:7d:fa:ed:6d:e7:aa:71:ad:e3:26:2d:01:c5:
42:4f:d3:7b:9d:10:d3:ef:73:5f:07:8b:56:e9:bc:
57:0e:4d:e0:f9:8d:ff:c7:cd:21:79:30:a2:52:81:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:94:C0:BF:11:7E:9B:8B:FB:69:23:70:1A:D2:F7:14:C2:8C:AA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1aa::/48
Signature Algorithm: sha256WithRSAEncryption
26:4f:77:1d:77:c1:01:d2:0c:03:e0:f8:ea:25:f6:0a:90:bf:
cb:8b:b7:46:53:58:4a:86:dd:6b:34:38:9d:d6:24:a9:ac:d1:
5f:66:bf:38:da:46:b1:76:fa:1b:cd:62:59:1a:06:03:60:00:
d5:2f:47:59:d1:d6:ac:96:c9:8f:a7:a3:6e:b4:34:bd:28:4b:
4b:f7:4f:a7:96:5c:37:9b:3b:fb:b4:73:a9:14:79:29:d2:f5:
eb:2c:13:5c:66:0e:12:7c:fc:09:b7:d8:a0:6c:e5:f8:ef:54:
1e:08:f4:c7:c7:40:f5:78:7a:cb:ef:94:7d:52:a9:bb:3d:e9:
8d:38:bd:39:0f:bf:d2:ce:c9:56:3d:83:4c:bc:aa:49:90:65:
29:ce:86:b9:c4:fa:42:8a:60:2f:a7:75:ca:43:b2:0b:09:f0:
11:fe:12:8a:ce:c9:d3:dc:24:94:e1:d9:37:04:31:f3:5b:02:
b5:74:b9:1e:35:9e:82:dd:b0:51:fe:a4:40:63:36:66:ef:54:
f5:60:69:b7:da:9b:2e:0e:c6:71:86:83:f0:ff:4d:f0:a0:d0:
9b:b0:1a:cb:5e:07:de:91:9b:0c:3f:09:fb:0a:04:e2:a3:b5:
bc:4d:05:34:c6:aa:0f:ff:8b:06:66:7b:c7:be:a0:75:2a:46:
a9:df:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org