Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: pFa0O3/u224NjO/vfMsTXLk92SRwHPQyxsr4EDRZ3QQ=
Subject key identifier: FA:1E:23:3E:54:E1:CF:E6:E8:F5:26:3C:5B:FC:58:E8:12:1A:95:64
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2FB7068AFFC8534C785BE14429FCE5191A15CBF0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:07 +0000
ROA not before: Mon 26 Sep 2022 09:55:07 +0000
ROA not after: Mon 25 Sep 2023 10:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:1d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b7:06:8a:ff:c8:53:4c:78:5b:e1:44:29:fc:e5:19:1a:15:cb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:07 2022 GMT
Not After : Sep 25 10:00:07 2023 GMT
Subject: CN=FA1E233E54E1CFE6E8F5263C5BFC58E8121A9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:d0:fe:ed:62:40:9f:f2:c3:15:b9:2b:df:
fb:74:9b:3d:30:b3:5a:e5:fb:34:04:d5:d5:e7:15:
0a:da:bf:93:74:77:81:d2:88:87:e7:02:c5:c4:ef:
6f:81:2e:5f:6a:89:89:6f:02:00:54:3d:a5:e5:22:
cf:d8:3f:10:d8:cb:6f:40:2c:47:8b:46:6d:2c:c5:
c3:5a:e2:0a:8d:44:3d:a8:c8:7c:8c:1d:b8:1b:e0:
4c:81:b8:ce:5b:c7:36:a8:2f:ff:fb:2b:ba:fa:a9:
e4:6a:b6:4d:78:ec:ae:ba:ba:7d:94:1d:53:29:0a:
82:4d:7c:77:7a:f4:90:7e:7a:64:94:6d:73:5a:22:
d9:9e:36:8a:2f:0f:e3:16:63:80:f2:fe:03:1e:75:
22:63:c3:41:47:0f:5e:f4:d2:f3:4e:be:94:26:22:
ff:ac:31:33:f8:5c:14:19:e6:84:06:8c:46:b1:14:
1f:14:d8:dd:ff:19:1e:b4:a7:19:22:4b:f1:16:49:
bd:b6:87:fc:41:80:79:5c:5e:94:9c:33:ea:03:c4:
ee:47:3f:a1:af:9a:ef:b0:b6:f4:1e:8d:17:ac:6c:
65:f9:bf:35:57:2c:47:94:ec:02:0b:fc:e2:ee:67:
94:b4:46:fa:8c:20:dd:fa:0e:58:0b:4e:23:68:53:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:23:3E:54:E1:CF:E6:E8:F5:26:3C:5B:FC:58:E8:12:1A:95:64
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1d8::/48
Signature Algorithm: sha256WithRSAEncryption
bb:75:dd:94:0a:fa:46:ee:8d:3f:32:6c:c7:a9:13:cf:87:e1:
d8:f7:d7:79:b5:81:33:e7:76:bf:2f:91:eb:cc:9c:ff:5f:6b:
5d:15:04:09:0f:83:7a:b3:cd:df:b7:9a:2a:7d:3f:b6:1e:bb:
9c:4f:4c:94:29:26:ae:05:01:56:68:69:3c:4b:90:32:af:09:
2e:ec:9d:2d:36:c6:92:aa:0b:3d:ce:dc:6d:7d:62:c8:9b:cc:
31:02:0f:9d:81:4b:8a:e7:81:ed:f9:ab:55:05:11:8e:6a:d7:
f5:d0:e2:d1:28:75:e3:a1:6f:0d:2c:a9:b4:d3:f8:b5:f2:26:
4d:a2:2e:0e:87:3c:da:4a:af:8f:90:c1:ef:da:45:90:38:b0:
0f:52:6b:57:7a:7f:2d:d2:5a:3b:31:90:a0:43:40:b2:d7:66:
de:01:fa:3a:f8:48:2b:6d:63:8e:76:dc:a9:e9:6b:3b:90:ab:
51:4b:cc:35:d0:c5:50:a5:53:7c:24:00:4a:3b:81:ca:b4:d4:
70:d5:93:03:d7:ba:3e:62:e6:15:cf:ce:b4:88:2c:9c:81:b1:
44:27:b6:d7:fd:84:87:ac:df:6c:e9:de:0b:1f:35:97:a8:1b:
12:35:1a:78:3a:35:e2:7c:ea:1f:bd:7f:1b:6e:18:66:c4:e6:
ed:f0:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org