Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Bqy9G/MSkPo+8aTe5XqFnv9bHTsYbH+QRBtof1wQElM=
Subject key identifier: 27:D8:B6:12:98:AF:73:59:B9:9E:20:CA:E8:EE:FA:4C:22:25:09:38
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 76A5CAC9E517D9538409FD9AC5A0085578812BD0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:11 +0000
ROA not before: Mon 26 Sep 2022 09:55:11 +0000
ROA not after: Mon 25 Sep 2023 10:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:1db::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a5:ca:c9:e5:17:d9:53:84:09:fd:9a:c5:a0:08:55:78:81:2b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:11 2022 GMT
Not After : Sep 25 10:00:11 2023 GMT
Subject: CN=27D8B61298AF7359B99E20CAE8EEFA4C22250938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:a4:26:c2:0c:f8:10:f6:63:72:a0:99:d7:
46:aa:e7:f0:28:e9:97:e7:1b:e3:62:cc:01:50:5c:
a1:a4:7b:20:da:dc:e4:23:af:f5:13:f9:0e:07:d7:
e5:40:20:28:ca:69:40:6e:f0:e2:64:94:7b:4c:36:
8a:57:92:f5:b8:fc:dd:66:11:39:d6:88:01:d2:a8:
aa:81:02:6c:96:eb:ec:7b:ee:20:48:f2:41:07:1f:
01:8b:0f:6d:31:e8:11:b4:77:43:16:4f:b1:93:dd:
bc:be:97:e8:71:30:b2:06:69:cd:48:69:d8:25:f6:
95:52:1e:99:b7:d8:a4:2c:d1:c9:68:83:b9:d0:12:
10:54:cd:d3:1c:75:15:21:82:f5:57:dd:2e:56:3a:
2e:34:1b:7f:43:91:ba:fb:44:e2:79:00:02:52:07:
8a:39:d1:12:91:59:ef:98:fa:d6:c9:76:83:cd:11:
a3:5d:60:6b:2a:e9:d8:57:e0:af:88:95:93:dd:f2:
f9:90:3e:27:3b:66:0e:36:bc:96:f3:0a:88:29:34:
1d:a4:80:9d:29:c0:21:c1:51:52:c0:76:21:4a:e9:
6f:2c:f0:4a:fe:0f:ae:db:d9:9a:2f:b1:f4:f1:9a:
89:95:06:86:83:7c:24:d3:b3:be:08:52:ab:40:c2:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:B6:12:98:AF:73:59:B9:9E:20:CA:E8:EE:FA:4C:22:25:09:38
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1db::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9b:bb:0f:b4:81:e7:23:bb:d0:22:de:f9:48:2f:a6:38:95:
ea:db:c5:c2:ee:b0:53:af:33:bf:e1:b1:11:b1:b0:0b:b7:22:
dd:2a:1c:63:59:df:59:55:43:a2:69:c6:dc:bc:e9:08:31:b4:
11:54:0c:d0:ef:21:d4:02:24:59:fa:6a:88:bd:45:3d:f8:51:
05:9b:02:eb:eb:24:84:91:ce:13:f4:e1:5b:35:1a:8e:7b:4d:
3d:b9:db:5e:65:04:c7:e4:44:b9:b7:d5:a0:51:11:c3:90:42:
2d:2a:eb:97:ea:65:7b:dd:02:cc:fb:83:23:11:53:6f:b1:ae:
0a:07:fe:75:22:8f:5d:dd:14:f7:21:72:87:75:d9:6b:31:75:
63:1e:2b:b8:3d:40:39:34:d5:dd:5e:48:eb:12:a1:5c:bc:b2:
a7:9a:25:4e:6f:49:76:29:a3:42:15:66:14:e2:87:a6:a3:06:
f4:40:1d:cc:82:5e:04:b6:05:2a:c8:a2:f5:5c:ea:78:ca:45:
97:ea:d7:1e:29:bb:fa:df:9e:4d:05:66:58:30:80:a8:22:db:
19:62:93:11:be:01:70:c8:60:7c:48:57:c9:c6:e5:3d:8c:23:
c1:4f:ee:f7:94:06:e0:18:1d:9e:e9:9f:78:91:78:9e:f4:c4:
a6:d4:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org