Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /R9fGrfAq6KoKXiHUpgYVO0dP2+CQPjq5Ph6oetc3AQ=
Subject key identifier: 32:9F:54:66:5F:80:11:93:35:5B:BB:0E:CA:3E:E2:9C:93:61:60:06
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 225552D72B973B9A78401B59D350D9C95C3E73C7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:20 +0000
ROA not before: Mon 26 Sep 2022 09:55:20 +0000
ROA not after: Mon 25 Sep 2023 10:00:20 +0000
asID: 59282
IP address blocks: 2400:d680:1b6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:55:52:d7:2b:97:3b:9a:78:40:1b:59:d3:50:d9:c9:5c:3e:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:20 2022 GMT
Not After : Sep 25 10:00:20 2023 GMT
Subject: CN=329F54665F801193355BBB0ECA3EE29C93616006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:36:2f:71:c3:2d:67:5f:76:36:f2:fa:06:
8a:34:9b:9d:2f:4c:32:c9:a0:8c:8c:b9:32:d0:c8:
dd:8e:d9:13:c7:a9:cc:81:0a:af:51:f9:a6:db:b0:
72:51:e4:8d:a8:64:f6:60:ed:ce:cd:fb:5f:29:32:
bc:3f:ae:7b:f4:b6:ea:00:e3:01:a1:1f:dd:8a:b7:
77:ae:98:31:16:30:f1:76:67:63:4a:f9:85:e9:d9:
64:2a:0a:4c:78:bd:29:0c:10:45:99:0a:11:98:75:
29:9e:d7:e3:d1:3b:9f:8a:53:ad:8c:2c:b2:ec:61:
d8:bc:c2:75:e4:52:52:0f:d3:13:c7:56:be:09:e5:
d1:09:48:ae:d5:db:0b:51:f8:73:3d:c9:f6:4a:8e:
ea:a6:f8:91:a9:5a:5a:9a:fd:f4:cf:0f:fb:f3:da:
58:19:54:c3:ed:28:01:87:fe:98:33:ea:49:e0:30:
ff:5c:5a:df:55:c4:c5:17:e2:89:db:06:db:5b:94:
32:68:13:9a:ed:13:52:68:1b:39:00:07:f5:50:13:
e5:c5:e4:03:83:0c:8e:ed:41:fc:56:b6:31:0b:60:
9e:ac:23:d6:79:ff:aa:c1:51:11:3c:7e:40:fe:a6:
34:9c:f1:be:2d:40:9f:c2:00:07:4e:92:5a:70:fc:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:54:66:5F:80:11:93:35:5B:BB:0E:CA:3E:E2:9C:93:61:60:06
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1b6::/48
Signature Algorithm: sha256WithRSAEncryption
a8:44:6b:89:02:9a:4f:fc:5b:39:b3:e4:e6:39:06:da:bf:8c:
60:af:45:9f:ac:fa:06:dc:6a:4e:04:a9:bc:3c:85:f5:19:fb:
b6:c7:6e:d8:ea:f2:95:38:b2:12:83:b5:04:73:99:1a:05:ba:
7c:2a:0b:8d:b0:53:ce:2b:a9:97:74:3a:43:40:2b:7f:74:2a:
c5:17:6a:8e:a6:df:c0:c4:b2:8e:80:5f:81:59:c0:5d:5c:11:
cd:27:82:81:e9:04:2c:88:a7:f6:89:d4:c1:4c:d3:dc:25:01:
85:ee:4c:8f:3d:32:d4:bd:2e:6d:bb:e7:a2:f3:b1:54:cb:13:
24:9d:57:96:a6:8b:6f:11:e5:6f:ff:66:d4:d0:de:2a:4c:29:
7e:4f:69:b6:5b:31:a6:a3:4c:3a:27:51:4b:77:d9:86:f0:5a:
98:d2:3b:07:21:d3:69:70:01:3b:49:32:82:cb:69:59:76:e9:
a9:6d:6e:0c:b4:42:6b:b3:06:de:17:73:17:62:e8:e0:0a:9d:
ed:be:bf:8c:70:8f:c6:94:91:71:66:b9:f9:cc:10:45:e9:c9:
f1:70:dc:64:2d:28:93:d8:9f:3c:3e:db:57:31:9d:2b:d9:82:
12:31:3d:1a:6b:17:09:c9:49:da:c6:7e:c5:2a:60:cd:2d:d5:
6c:a0:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org