Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Q4pgpEqe5q3tD8LO86u9H675wgrqEyZM9JplyHLP7hk=
Subject key identifier: A0:42:13:8F:89:AC:3E:CE:A1:60:11:0E:5C:E3:81:92:80:CA:AA:50
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 425579EC2BDC4B5DBE5BF76045F9CB1FAE3F6AF0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:09 +0000
ROA not before: Mon 26 Sep 2022 09:55:09 +0000
ROA not after: Mon 25 Sep 2023 10:00:09 +0000
asID: 59282
IP address blocks: 2400:d680:1de::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:55:79:ec:2b:dc:4b:5d:be:5b:f7:60:45:f9:cb:1f:ae:3f:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:09 2022 GMT
Not After : Sep 25 10:00:09 2023 GMT
Subject: CN=A042138F89AC3ECEA160110E5CE3819280CAAA50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:f8:6d:53:94:41:7e:2b:6e:39:87:ad:a8:
e4:bf:b0:55:e7:35:a8:59:bb:1a:83:52:a2:88:5e:
fe:6f:a2:6e:5b:69:fb:48:58:95:9a:ab:c9:35:95:
76:0d:7b:e6:86:10:26:cd:a9:c1:e1:22:34:cb:35:
6f:b0:de:10:53:19:d3:15:71:69:03:44:5f:53:89:
75:6a:89:93:f6:da:d1:94:bc:17:6b:cb:46:49:c9:
2c:28:85:23:20:99:ce:c4:94:3e:1d:ca:7c:54:c0:
d5:65:e8:99:39:62:b6:d7:f7:3d:ea:ad:3c:52:8e:
dc:fe:d5:39:d9:eb:b5:d4:28:3d:3a:81:2f:20:3c:
0b:0f:81:11:ef:cd:9f:75:c9:da:f2:7d:30:d6:2d:
7f:e8:4c:f4:6c:50:d3:ef:cf:df:70:da:fb:c8:4b:
14:8d:15:70:13:1d:70:64:61:7a:50:a7:d6:9e:4a:
c9:12:43:b4:a3:73:92:aa:52:ab:6b:52:b7:cd:69:
10:63:38:3b:ec:40:7f:e2:82:d0:d1:c8:ef:32:d9:
c4:62:ea:9b:f1:d5:a2:bd:97:ae:0d:6b:68:21:57:
4b:a5:ff:18:43:22:fd:d6:10:08:3f:c2:00:17:6f:
66:79:51:61:22:4a:f7:99:df:82:1f:5c:1f:0c:66:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:13:8F:89:AC:3E:CE:A1:60:11:0E:5C:E3:81:92:80:CA:AA:50
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1de::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4c:4b:b6:99:9d:34:5a:1f:9e:c8:ee:8a:5b:d5:32:a3:ca:
15:cb:92:57:e5:dd:7b:b7:51:dd:83:b4:d0:27:1b:72:83:0e:
b9:4a:a3:39:14:d2:7f:9d:25:b9:87:df:f0:2a:46:49:89:59:
73:88:ca:0a:62:00:4e:97:7b:e7:a7:2b:7c:42:8e:0f:06:ca:
32:b1:5b:d7:21:87:41:a4:ee:e0:b6:ef:55:d7:b9:73:00:86:
51:79:23:36:22:e8:4a:eb:81:ad:0d:e1:49:be:af:96:82:36:
97:f8:1e:89:15:16:15:91:38:60:4e:0b:df:25:b1:b8:7a:bd:
71:69:02:0c:8c:99:50:2b:0b:27:a0:77:cf:2f:19:76:c4:88:
81:72:e2:8f:29:82:1c:a8:96:8a:5f:f9:73:5f:39:ae:d4:81:
07:92:66:1c:17:77:fb:44:14:86:c7:1d:e6:ba:15:28:4c:83:
bc:14:97:d8:20:ed:3d:73:78:d6:03:95:94:a9:06:de:22:1a:
d7:9a:13:a4:40:5d:2b:14:0c:24:38:38:1b:68:86:69:fd:45:
32:d5:1a:1f:c2:dd:c7:72:d1:1f:9e:58:50:ba:83:d9:87:b5:
fc:3a:ab:91:16:01:27:cc:7a:72:22:ee:3f:23:14:48:63:09:
d9:ba:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org