Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FsLllL7Qq1P5Uuo4nEumP/Y4QCPeoZjtpiFT1aGahpg=
Subject key identifier: C9:0D:C8:2A:62:97:55:94:6D:1E:4A:A7:84:1F:49:3D:7B:86:4A:EA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 762B2BA133055BA954B0C9C230446F4D16D66AD8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:31 +0000
ROA not before: Mon 26 Sep 2022 09:55:31 +0000
ROA not after: Mon 25 Sep 2023 10:00:31 +0000
asID: 59282
IP address blocks: 2400:d680:1be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2b:2b:a1:33:05:5b:a9:54:b0:c9:c2:30:44:6f:4d:16:d6:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:31 2022 GMT
Not After : Sep 25 10:00:31 2023 GMT
Subject: CN=C90DC82A629755946D1E4AA7841F493D7B864AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:22:93:f6:07:50:44:b5:01:c9:a8:6e:ca:
2f:07:50:09:54:cd:56:41:97:36:ba:f0:4f:bb:dd:
73:23:70:da:6f:88:6b:b3:e7:0c:c2:47:ea:27:4d:
ee:b6:0c:04:72:84:1a:44:eb:9e:dc:6a:89:f2:9b:
0a:42:ee:0b:67:10:d2:17:ce:ca:07:a2:a9:53:45:
e6:21:53:11:c9:a2:fc:15:8a:c5:70:9d:4c:20:cb:
55:0b:e6:db:0b:b9:36:73:88:30:0f:fc:f9:ab:e4:
11:a8:c2:dc:fb:aa:6d:20:bf:c7:65:76:8f:4b:89:
8c:0d:58:cb:fb:87:d3:53:66:25:a5:76:22:4f:aa:
37:26:68:69:b9:bc:0a:2f:be:c6:51:32:b3:03:81:
38:d0:d0:fd:f5:65:b1:b2:4e:88:bf:9b:8a:4e:3d:
50:81:5d:d3:ca:79:4d:09:52:50:56:52:58:16:d6:
5c:d2:bf:44:bb:77:db:91:d2:53:7c:d7:53:3f:e4:
09:1b:4a:86:59:07:aa:f5:f1:43:df:38:fd:7c:07:
28:91:2a:18:60:98:b3:3a:45:34:ec:e1:d1:55:b4:
35:86:ce:bd:38:ae:9b:26:4d:ba:28:21:32:2c:51:
9f:81:2c:84:cd:92:a3:9f:fa:57:dd:30:93:d3:fa:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:C8:2A:62:97:55:94:6D:1E:4A:A7:84:1F:49:3D:7B:86:4A:EA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1be::/48
Signature Algorithm: sha256WithRSAEncryption
50:69:6f:52:5e:55:21:35:6e:62:7b:19:3e:5f:2b:68:27:d8:
4a:ad:75:3e:e9:7d:5d:10:93:25:5d:31:19:ef:b7:a2:25:8a:
d6:b8:a0:5a:ba:c9:14:91:66:61:96:8c:b3:ca:65:7f:f5:f3:
eb:61:98:24:9b:9a:c4:f1:c5:a3:e6:39:7a:62:71:54:34:d0:
fd:c9:cf:61:32:65:3b:f5:48:fb:29:38:4b:f8:c6:c0:1a:e9:
3f:03:06:94:0f:82:b3:60:ae:3a:07:82:69:ee:47:a2:8b:c4:
f0:8c:c5:e8:1a:82:f7:e2:71:ad:d5:7e:e3:6a:06:a5:ed:24:
b6:d6:c3:0f:27:b0:0a:ea:81:d5:f1:e4:34:5b:43:5b:da:e0:
7a:c5:c4:e2:22:00:fa:2c:e6:15:57:b6:48:1f:d8:1f:4c:8e:
f9:62:8c:86:b3:23:aa:30:32:b7:21:14:00:19:ae:2d:a4:42:
b8:fd:6e:c4:d8:cc:12:e8:e5:f2:00:7f:eb:81:b6:eb:ee:72:
8a:0c:2c:ca:0c:36:68:bc:23:0e:4a:18:06:83:ee:ad:2f:31:
e6:b4:f0:6c:0f:e3:17:75:7b:c2:11:41:7e:c2:ec:7a:a4:bd:
d3:a9:85:17:5e:20:c4:d0:a8:79:bd:4c:7d:bc:9a:cf:d7:b3:
b6:ee:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org