Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: bEyIgme5A4VrXM6Yv2hr9bXcv7360aZoZh6JCcVLuVs=
Subject key identifier: AD:20:F6:A3:40:98:2D:93:8E:EE:CF:42:25:DC:D8:21:81:A8:9A:1C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5FA4C7085292C87A36A42880AD0266F223052517
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:02 +0000
ROA not before: Mon 26 Sep 2022 06:55:02 +0000
ROA not after: Mon 25 Sep 2023 07:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a4:c7:08:52:92:c8:7a:36:a4:28:80:ad:02:66:f2:23:05:25:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:02 2022 GMT
Not After : Sep 25 07:00:02 2023 GMT
Subject: CN=AD20F6A340982D938EEECF4225DCD82181A89A1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:95:24:dd:77:5e:d0:e6:ee:16:c7:9f:42:
59:0d:db:54:a8:e4:2a:13:9d:7e:b8:f4:bf:5a:d6:
07:2b:60:31:dd:77:ad:8b:fe:e2:e8:ad:3f:bb:cc:
a0:e2:30:21:64:8b:29:64:83:4a:57:28:a2:81:2b:
94:ad:7b:80:c1:ce:c4:dc:05:3c:99:29:86:c4:f5:
64:61:d5:8b:6e:7b:8f:e0:f8:40:61:9a:bb:37:43:
67:6a:85:75:aa:bc:77:b9:f2:eb:a8:72:67:ec:91:
46:9e:04:7c:99:6c:2c:ab:7f:2a:d5:63:b4:8e:0d:
21:44:c9:6f:cf:97:5b:10:e9:e1:e9:04:05:84:bf:
e9:d6:c0:c3:0f:b3:8b:90:5a:3d:a2:53:59:f4:99:
4d:48:9c:93:1c:f7:f4:eb:d5:d6:ed:43:7c:38:e5:
3e:75:d1:43:cc:9c:ee:02:24:d7:fc:e9:ad:ee:b8:
26:5e:da:ac:66:66:70:fe:46:81:38:2a:43:ee:bb:
4f:6a:f6:1e:f7:7c:8f:28:e8:8f:9a:3f:47:31:3f:
7b:77:2f:6b:67:ac:4f:bb:26:fc:86:b2:28:27:f8:
d5:39:9e:69:00:37:db:ab:45:78:00:48:ba:5d:ee:
1d:26:77:48:9a:5a:db:37:82:f8:3f:54:fc:bb:81:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:F6:A3:40:98:2D:93:8E:EE:CF:42:25:DC:D8:21:81:A8:9A:1C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1c::/48
Signature Algorithm: sha256WithRSAEncryption
b8:36:1a:22:5e:a6:81:83:38:a2:10:2a:d9:4b:72:1f:1e:76:
2f:65:ba:62:96:d1:05:ef:ef:cd:8d:41:6c:ba:78:05:3c:00:
f0:1e:b0:c8:db:c6:62:44:23:64:f0:1b:5e:7a:a3:50:09:bd:
75:55:88:9c:07:af:c7:c6:ba:a5:23:4f:7f:69:a7:46:ea:12:
cd:4a:f3:19:86:a6:89:9e:76:df:59:18:f4:a1:38:7e:90:f7:
fc:40:03:33:93:94:12:ed:23:0e:7d:72:5b:f6:99:40:e1:81:
ee:32:e2:6b:9e:17:71:f5:d7:59:91:66:6f:40:9f:cc:54:b5:
b5:07:ae:7d:c2:df:8b:da:e1:7a:06:cb:c0:34:52:dc:28:1a:
5d:6a:ba:a4:aa:a3:8c:63:4d:f2:7e:ee:cb:e6:04:8f:52:98:
dc:25:0c:59:55:aa:69:93:cb:f2:d5:23:c2:c1:ed:fa:e5:bc:
59:d5:4d:b5:f8:ae:a7:5d:f3:ab:cf:0a:16:f1:51:e6:6a:d1:
6f:f2:89:23:6d:d4:77:37:cc:de:1c:f0:e0:d9:56:3b:ae:f9:
d8:93:e4:98:42:3a:38:11:54:1f:9f:ed:b2:51:61:6a:ec:6a:
f9:35:da:b4:16:ec:95:95:5b:6a:b9:3b:44:ea:bb:3b:1c:95:
d9:fa:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org