Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Dte7gRIv1eL+W34XOwfCVMzg2tN83LQgf5I5ek0lEaU=
Subject key identifier: 72:28:06:E4:24:7B:C6:0C:84:3C:16:67:9A:CD:9E:A1:17:91:24:97
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4612D742D2AAB50A2B667D30FF6BF287CC46A731
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:33 +0000
ROA not before: Mon 26 Sep 2022 09:55:33 +0000
ROA not after: Mon 25 Sep 2023 10:00:33 +0000
asID: 59282
IP address blocks: 2400:d680:1b7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:12:d7:42:d2:aa:b5:0a:2b:66:7d:30:ff:6b:f2:87:cc:46:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:33 2022 GMT
Not After : Sep 25 10:00:33 2023 GMT
Subject: CN=722806E4247BC60C843C16679ACD9EA117912497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:e8:b8:a4:98:e2:a3:3a:52:2e:41:63:98:
55:10:00:3c:fa:47:29:b5:26:21:bc:ad:fd:8d:dd:
a5:f9:a2:54:c3:e9:a6:ec:68:50:3a:a5:b7:e7:ac:
d6:b7:f3:6a:8a:8f:6a:77:77:5c:bd:3e:9d:4c:df:
76:4b:05:15:e2:7f:46:b4:86:5d:68:f3:7f:8e:3b:
87:54:aa:07:c5:17:ec:2d:ec:1b:67:39:b8:43:d3:
d2:b4:42:e1:b0:f8:4a:e4:88:1f:34:24:a5:9c:19:
29:eb:dc:ee:d6:dd:b5:18:58:5f:f3:b5:ce:f9:d9:
14:cf:c5:10:5c:00:32:45:de:24:c8:6c:f5:2b:0e:
df:20:9a:7a:55:0b:85:f2:4d:bf:47:65:7a:55:01:
db:d5:15:a8:c9:d8:4c:06:81:31:ef:a2:d7:0f:a9:
7e:dc:29:86:3a:5f:ef:a2:e2:d2:cd:12:0c:b4:3e:
79:ac:1a:75:19:7e:c3:b7:1f:fe:64:3a:49:64:92:
15:f9:fe:9a:d8:55:85:c9:7e:8a:60:1a:55:a6:b0:
7b:50:c1:c0:53:82:3d:99:27:74:eb:52:c6:ad:7f:
24:94:fd:15:97:ad:c8:d2:3e:1e:c2:f5:db:d4:ff:
f4:2d:3c:22:1a:95:d7:c5:7c:e0:5e:68:8a:e3:f9:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:06:E4:24:7B:C6:0C:84:3C:16:67:9A:CD:9E:A1:17:91:24:97
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1b7::/48
Signature Algorithm: sha256WithRSAEncryption
80:fd:43:43:3f:87:6d:0e:2c:9c:31:4d:ce:76:da:88:d0:06:
77:a2:90:7e:13:3f:8e:97:fd:3f:b4:50:0d:83:bf:b7:d5:fa:
43:16:38:3f:7c:ec:61:c1:06:d1:99:94:1f:af:c9:e9:1b:a4:
2a:1f:9c:9b:a2:4f:93:c8:18:bc:83:95:a5:37:d4:02:b2:e6:
e6:e3:36:02:cc:7a:2a:4d:bc:ec:67:1a:15:5c:33:c3:aa:a9:
43:3b:d3:82:c2:98:1c:5c:a9:ed:89:5e:62:ce:ed:55:98:26:
97:cc:bd:74:34:a1:2a:f8:6f:03:83:e4:b0:75:24:9d:34:7f:
9d:94:d5:2a:3a:36:4a:df:c2:63:c6:32:75:28:d6:32:84:33:
64:6a:78:02:2e:86:b3:8b:b2:0a:da:35:ee:dd:f4:1e:7c:1c:
2f:b2:7c:2d:4d:55:d7:88:15:2b:07:97:91:a2:e2:31:8d:4f:
97:8a:db:de:d7:49:10:2c:1f:e7:3a:2b:ca:df:d7:64:8f:ab:
f4:3c:95:a9:95:06:8f:07:bf:79:6a:0f:ec:ac:72:ab:10:eb:
76:c1:92:fc:c9:d9:0e:89:2d:2d:52:fd:81:b9:1d:45:6f:20:
2a:59:ad:22:3d:82:b4:34:8d:a0:7e:aa:fe:08:ad:f1:44:19:
15:ad:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org