Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: AzNZMmbYYGrJLBhyv/3ypH+DBgI1omzVnkX2FHjDdZk=
Subject key identifier: EA:DC:EC:C9:F1:99:35:A0:7E:40:D5:FF:B1:A4:5F:A4:25:07:C4:A7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7232902017F47C2ADEB38050CE68C732758E9411
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:02 +0000
ROA not before: Mon 26 Sep 2022 09:55:02 +0000
ROA not after: Mon 25 Sep 2023 10:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:1dd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:32:90:20:17:f4:7c:2a:de:b3:80:50:ce:68:c7:32:75:8e:94:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:02 2022 GMT
Not After : Sep 25 10:00:02 2023 GMT
Subject: CN=EADCECC9F19935A07E40D5FFB1A45FA42507C4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:63:e5:dc:54:c7:aa:bc:da:26:2b:57:fe:
b2:d7:ad:7c:44:ae:ec:f3:ce:66:74:76:98:25:9e:
1d:17:57:a5:1d:db:a9:79:f1:a6:50:11:8c:ca:6e:
64:7a:f7:74:3d:94:96:c0:04:a4:59:24:4a:44:a1:
ce:3d:b0:02:11:8a:07:be:eb:b5:5e:62:f2:27:c9:
6d:f0:fc:a8:c2:6a:b9:4f:6e:ae:14:f2:48:7d:2c:
83:17:bb:24:2a:32:3a:c3:a7:b3:1c:70:5a:35:99:
3b:a5:97:40:a3:fd:c1:28:ed:ec:74:b1:d3:c3:20:
57:0d:95:58:6a:82:e2:55:ff:a9:06:7b:c0:ef:09:
88:58:a3:18:3a:57:e2:0d:b5:1d:bd:65:40:a2:75:
2e:46:1b:3e:da:83:2b:20:0c:ed:e8:83:85:12:fa:
66:2c:11:5c:69:f4:37:cd:00:ef:f3:d4:a4:12:e1:
10:80:0b:13:2f:1c:27:70:5d:dc:6c:12:c7:ee:40:
df:11:2c:39:0b:de:6e:aa:92:6c:89:21:19:c3:27:
25:18:99:b2:2c:75:69:60:94:26:e6:17:74:32:83:
b8:87:12:53:70:15:3d:a5:18:63:db:5e:86:f6:cb:
65:e4:b2:65:e5:0a:50:5a:9e:2c:21:09:3c:4a:bf:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:EC:C9:F1:99:35:A0:7E:40:D5:FF:B1:A4:5F:A4:25:07:C4:A7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1dd::/48
Signature Algorithm: sha256WithRSAEncryption
31:8d:6b:95:30:4b:0a:e5:df:22:4a:12:92:d0:0d:fd:89:0a:
70:d7:2e:66:6e:5e:7c:80:50:78:11:b7:e7:17:2b:00:e5:3a:
43:7d:d4:c5:bc:6b:9a:8a:ec:a6:6f:6c:38:71:05:fd:14:5c:
0c:90:d6:29:16:02:2f:98:41:0f:ab:9a:6e:4e:9b:a4:64:56:
ee:87:50:8b:8e:e5:9f:f2:e6:c3:ad:4a:13:1d:04:ae:8b:3f:
fc:88:7f:86:b6:35:63:5b:3d:0b:df:fe:22:3f:e4:13:f7:c0:
8d:2b:13:87:55:2f:48:ae:71:33:a9:3a:af:c8:a4:5c:ac:3d:
91:b8:0c:8e:1e:4a:1a:a3:95:9c:b7:67:a5:24:fd:e0:a1:77:
92:b1:e5:1b:af:53:e3:fe:59:58:90:8b:d5:8f:67:b5:6b:20:
33:b8:38:57:65:79:7d:e5:88:a5:67:c3:90:74:4e:3f:a9:e5:
5a:d8:43:41:f0:2c:11:7d:95:fb:90:24:17:0d:3a:51:2e:8e:
ee:11:e9:f5:8a:6f:83:20:3d:6b:cc:7d:d2:9b:86:11:88:27:
39:de:e2:80:9b:1c:8b:11:18:f2:e9:36:04:47:6c:d0:7c:fa:
ed:df:1d:0d:a8:65:38:d2:c8:a7:16:44:27:64:6f:0d:16:f0:
8f:f9:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org