Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: CZsc6pt38YWq1ngbW3305yadb6JGop8fTecFU9gkvL8=
Subject key identifier: 9A:3B:B8:70:18:BE:23:B0:3E:3E:78:10:EC:84:87:4D:78:3A:22:28
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 055D5DEDE1864EC297C09F36CF64D1A28CFE2259
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:29 +0000
ROA not before: Mon 26 Sep 2022 09:55:29 +0000
ROA not after: Mon 25 Sep 2023 10:00:29 +0000
asID: 59282
IP address blocks: 2400:d680:1bf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5d:5d:ed:e1:86:4e:c2:97:c0:9f:36:cf:64:d1:a2:8c:fe:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:29 2022 GMT
Not After : Sep 25 10:00:29 2023 GMT
Subject: CN=9A3BB87018BE23B03E3E7810EC84874D783A2228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:0f:af:d5:aa:67:e1:d2:cd:b2:4e:23:c8:
30:38:63:7a:cf:c7:a8:67:80:bc:2f:cd:1b:6b:85:
34:a4:6e:1f:8d:49:b2:b9:26:46:28:f6:e3:93:d6:
6e:99:88:49:05:56:e7:6c:65:5d:b0:88:de:e5:2d:
37:af:e3:a1:6d:5f:a5:3d:d3:2f:9a:0c:d7:2b:6f:
f8:31:2e:5d:fb:d6:c2:57:64:96:fd:46:b2:30:d8:
e3:85:76:25:48:4d:21:41:80:d1:ea:cf:41:85:ea:
0d:e8:1e:7e:1e:ca:66:b4:32:50:3e:7a:c4:50:b5:
03:bc:46:8c:42:0e:d9:0b:57:bb:c9:4e:f9:38:f7:
e3:40:b8:c4:a9:d2:a8:9a:8b:1a:b2:f7:8e:87:6d:
96:7e:3b:b2:d3:f2:9b:fb:be:1a:79:77:7f:6a:07:
e1:62:5e:d0:c2:64:6b:27:c4:2e:6c:0f:30:c2:3f:
50:40:f0:c1:79:61:59:81:1c:d3:9b:c3:ac:31:80:
09:2c:83:12:54:e0:71:a9:ea:3a:7c:0f:74:b0:de:
4c:c6:f6:5f:9e:43:45:f0:45:89:2c:29:d7:e7:15:
3e:be:a9:ab:7f:ed:66:0e:c0:6f:fb:92:14:2b:81:
ad:8f:39:ce:d9:91:09:64:2a:9b:1c:b9:30:fb:bc:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:B8:70:18:BE:23:B0:3E:3E:78:10:EC:84:87:4D:78:3A:22:28
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1bf::/48
Signature Algorithm: sha256WithRSAEncryption
c9:84:03:38:e4:75:ab:b6:05:b3:b1:ec:6c:e9:09:8b:f5:19:
3e:98:ca:79:b9:39:7e:d1:83:db:e3:7c:81:b2:0e:39:80:d0:
70:38:06:38:f3:6b:4f:c4:48:04:84:08:98:10:9f:1b:4c:86:
d2:97:14:d5:f0:b0:db:9b:11:ae:6d:ca:c0:f0:d5:2f:d6:ae:
a6:70:5d:b6:2c:eb:96:86:52:0f:84:76:0b:31:f0:ac:3d:73:
69:48:3e:c1:a9:67:cc:ff:c7:94:11:a1:29:5d:09:7e:9f:de:
90:39:7a:42:d1:6d:36:ff:2d:94:7a:25:c1:05:d4:18:cd:fa:
0d:95:d2:3a:92:5e:5a:c5:86:cf:6f:24:1c:14:d8:db:a4:db:
65:9a:b1:49:e6:75:68:7b:05:94:64:e5:89:6b:4f:2d:d4:33:
1f:77:da:1c:84:cb:37:b3:3a:90:ab:f7:8e:07:5c:03:a3:70:
3d:c9:88:6e:ef:c4:1b:4f:f3:11:4e:39:e6:13:cd:90:78:d3:
5e:bb:a3:c8:b4:24:d1:21:fa:d1:9f:29:8b:ad:73:a5:6c:43:
ae:f8:63:48:29:22:6e:b6:dd:0f:c1:ef:6c:7b:dd:de:83:6a:
05:e9:3d:38:0d:d5:8c:b0:4a:10:60:a2:81:8c:a5:7b:42:e5:
fc:60:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org