Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: XRZREsONWFjw0+qWmFOYfY0S+ILQqpyNdLGsV3Mgrso=
Subject key identifier: D2:A1:CB:63:F5:47:64:47:EC:F9:85:1D:68:B3:51:EA:63:31:08:CB
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4144A3F1EF2193AFAE8EBEB13546D75E56F0043C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:04 +0000
ROA not before: Mon 26 Sep 2022 09:55:04 +0000
ROA not after: Mon 25 Sep 2023 10:00:04 +0000
asID: 59282
IP address blocks: 2400:d680:1b1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:44:a3:f1:ef:21:93:af:ae:8e:be:b1:35:46:d7:5e:56:f0:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:04 2022 GMT
Not After : Sep 25 10:00:04 2023 GMT
Subject: CN=D2A1CB63F5476447ECF9851D68B351EA633108CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:4e:ac:ab:55:9d:ab:01:cd:52:bb:c1:61:
62:7f:9d:02:68:7c:c8:ba:49:5d:3c:b7:43:0b:ac:
21:df:dd:65:9c:1e:83:df:d6:20:8f:98:93:0a:be:
cc:fe:4e:87:2f:69:16:06:5f:e6:ff:cd:2f:eb:4f:
4f:68:bd:55:e6:19:be:80:de:0c:fd:39:4d:bc:59:
78:60:3b:dd:24:5c:d9:21:6a:57:6f:63:b8:3b:93:
1f:ab:b0:8b:06:50:f6:af:64:64:64:00:ec:11:18:
75:7a:d1:e6:7d:81:43:be:3e:a7:73:f7:9b:ac:6c:
05:70:79:28:c7:3c:ea:75:1a:2d:da:a2:0f:27:ee:
02:83:af:07:0c:9e:0d:d1:06:3d:2b:53:1f:b3:b0:
43:0e:8e:76:6f:2d:12:29:ca:42:af:a6:cc:2e:20:
c7:9e:e2:f5:f9:f8:44:9e:81:6c:c9:18:ad:2b:a0:
bd:9a:31:e6:83:0b:96:e2:2e:33:18:f1:8f:4b:eb:
77:42:f8:39:fb:9d:63:f4:cc:95:3e:94:c1:51:9c:
7e:41:1b:64:6d:00:21:64:77:9b:e7:ce:fb:0f:e4:
3a:08:20:2d:e3:0d:90:49:ad:be:00:8c:c4:13:14:
d8:cc:4c:33:a1:c8:0f:de:6d:72:d2:49:0a:49:6c:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:CB:63:F5:47:64:47:EC:F9:85:1D:68:B3:51:EA:63:31:08:CB
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1b1::/48
Signature Algorithm: sha256WithRSAEncryption
2f:91:c9:cc:03:27:ee:6b:5b:d0:ff:2a:cf:99:e7:1e:ed:3a:
23:a3:04:84:0d:55:f1:f2:c6:3b:7b:4b:86:c5:aa:85:2b:e5:
97:5b:7b:63:ce:6a:db:96:05:e0:fa:07:d7:40:d3:fc:0f:49:
ce:17:73:ce:ab:c7:21:0d:d1:87:8b:86:d3:aa:df:6d:a3:f2:
df:c4:b8:42:3d:00:21:1c:cd:3d:26:40:5b:6a:49:f4:1f:0a:
08:bf:19:85:0f:d2:40:ae:ae:66:8c:5a:13:2a:8c:fa:bc:f2:
89:85:59:62:a5:25:06:d5:2c:57:81:51:da:70:b8:d5:56:ed:
07:08:1e:82:3b:86:d4:6b:f9:5b:c8:27:32:cd:b2:84:ef:df:
ff:c6:66:a1:e7:6f:f2:a8:64:7f:e1:37:9a:a5:dc:86:eb:75:
94:34:ce:e6:db:6c:56:49:00:7f:fe:f5:84:3d:7b:1e:41:0e:
d0:8a:21:52:9c:9b:3f:a8:48:bc:9f:93:a3:30:62:52:06:22:
9e:b5:43:a6:16:e7:c2:ef:af:2a:79:70:cc:bf:2e:8d:b1:a3:
1b:94:a4:eb:b4:0f:3c:5e:89:49:46:80:66:45:3d:40:e8:48:
b7:c0:e6:65:9f:68:f2:d5:39:bc:2c:70:1b:6a:51:bf:d1:cb:
93:f5:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org