Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3165333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6HLSqu3UWIH/2gKxsgmk49Ouv35OlosejL8+oOTBY5o=
Subject key identifier: 18:1E:31:00:10:E7:8D:D6:1E:78:C6:AD:65:15:5A:F3:DF:FF:8E:3E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 483AE0D1B17374040FB00FD94497C44043DAB219
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:06 +0000
ROA not before: Mon 26 Sep 2022 09:55:06 +0000
ROA not after: Mon 25 Sep 2023 10:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:1e3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3a:e0:d1:b1:73:74:04:0f:b0:0f:d9:44:97:c4:40:43:da:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:06 2022 GMT
Not After : Sep 25 10:00:06 2023 GMT
Subject: CN=181E310010E78DD61E78C6AD65155AF3DFFF8E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:66:07:ef:49:fb:41:16:72:83:89:61:6b:
af:a6:16:83:fb:fb:99:46:f5:ef:3e:1a:73:18:c2:
d0:fc:89:a8:c3:03:ee:01:b4:5d:ac:ca:3b:d0:5a:
4e:b6:5e:e7:43:83:4c:d1:e0:87:ca:cc:6f:89:47:
c1:5b:4c:42:fb:16:66:ba:12:54:9d:d0:c6:e2:4a:
be:d3:f3:9a:24:5b:2b:12:8c:db:1a:99:a2:06:5e:
cc:c3:36:cb:70:57:52:1e:0f:d9:d8:a4:6d:2b:4e:
5a:62:c1:67:9c:fa:94:fb:b8:c2:9e:87:08:ec:d4:
b5:bf:f5:c6:77:f6:60:ae:63:c3:e4:18:01:3b:5c:
f2:ce:f8:98:41:19:50:a1:88:7a:d5:15:2f:64:82:
ae:96:7d:95:c1:8b:a4:66:cb:29:4d:79:34:66:c7:
96:83:f2:6e:9f:9b:41:9b:76:ca:eb:6b:95:b2:98:
57:c7:7b:f9:2b:21:75:49:4f:ed:39:dd:cf:31:4b:
64:e7:8b:5d:7c:17:88:da:18:ca:57:c6:d8:fe:59:
d9:77:4b:27:39:ed:77:65:10:73:f8:62:89:fb:f4:
3b:1d:fe:2c:9e:94:c4:1d:1f:49:bf:ce:3e:43:3c:
2c:46:91:1a:3c:a8:9b:f7:fd:ab:2b:b2:1d:85:87:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:31:00:10:E7:8D:D6:1E:78:C6:AD:65:15:5A:F3:DF:FF:8E:3E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1e3::/48
Signature Algorithm: sha256WithRSAEncryption
ab:3b:c7:70:5e:5e:69:7a:b5:a5:9c:93:e1:3a:83:ea:ba:e5:
3a:d9:fd:b5:a5:2c:48:06:26:97:e3:81:4d:e0:49:1c:c1:d3:
24:fa:3e:ce:f5:f8:f2:18:c8:77:56:a3:5a:b6:d3:9a:7d:cf:
9b:3c:86:b9:e1:a7:5f:cd:b2:ab:28:4b:a9:2c:92:1d:37:53:
54:9e:70:f3:c2:32:3d:8f:e1:5a:a9:cb:a0:75:ff:38:2a:be:
1d:19:24:f8:10:98:85:79:bc:f5:b1:06:e6:a8:37:e6:ee:b6:
b4:7c:8c:87:54:01:03:b2:9a:2a:82:d9:01:7c:76:26:45:7a:
0f:d8:27:ca:95:32:ae:2d:bf:15:23:ba:f7:20:8b:71:d6:af:
f1:f2:ec:4e:f2:84:d4:c7:0d:9d:76:20:ef:89:68:67:df:8d:
59:5e:82:a9:d4:ff:3c:94:b2:2b:98:b6:6f:c1:c8:9b:01:7c:
90:02:83:2e:30:53:76:93:1b:0d:68:20:3b:31:61:e9:ab:7d:
7e:57:52:0f:6b:54:dd:1d:1f:9c:14:bc:35:c3:d2:03:f6:96:
e8:20:e1:ba:ad:84:f5:51:45:8f:5c:64:4f:17:a6:16:78:b4:
b2:79:b6:d9:da:60:38:01:10:be:63:81:23:09:84:35:3b:8c:
92:06:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org