Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3165363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: RfaRasppY8Wai1CpPlFKAtM+phBcjzn+XPePVvTIqb4=
Subject key identifier: E2:39:7B:29:FF:EC:7D:4E:13:0F:D9:DA:81:43:63:D7:5B:A6:27:52
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1917E8F04021A635B3E6F2B69B8C60FD0F1EF4F5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:06 +0000
ROA not before: Mon 26 Sep 2022 09:55:06 +0000
ROA not after: Mon 25 Sep 2023 10:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:1e6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:17:e8:f0:40:21:a6:35:b3:e6:f2:b6:9b:8c:60:fd:0f:1e:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:06 2022 GMT
Not After : Sep 25 10:00:06 2023 GMT
Subject: CN=E2397B29FFEC7D4E130FD9DA814363D75BA62752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:c4:f4:90:cc:27:80:59:b8:43:74:e3:f2:
2b:f2:48:f3:9f:15:2f:4b:1b:81:ca:64:3b:f6:1a:
73:49:a7:05:31:fb:d1:ec:44:d3:64:42:ff:a8:74:
be:76:e4:97:cc:11:50:14:4e:69:28:c2:c3:c2:1c:
ea:e0:72:2d:48:ee:a1:18:a6:9a:79:c0:5f:dc:c4:
cb:f2:3a:6a:4f:84:e0:09:af:e4:1a:68:7d:ab:b4:
ee:11:d8:ef:de:fe:92:d4:b4:07:ad:b8:09:07:ca:
6d:73:44:9d:6a:1d:97:ea:99:a7:42:33:5b:6b:3f:
36:99:03:da:67:e3:36:ed:6f:17:0b:99:39:1a:47:
89:94:9f:0b:42:0e:48:f5:9a:d8:c8:f8:55:62:6e:
ad:d0:4a:a3:31:5a:f3:bf:49:55:1c:25:c2:70:56:
78:c3:a2:36:3f:fe:b7:06:1d:26:76:6b:d1:2a:63:
e2:d1:97:f2:8f:fb:08:b8:80:75:a4:b2:39:21:63:
70:82:01:a8:59:3e:ad:d1:cd:24:07:dc:3e:93:dc:
c3:43:3a:f1:08:4c:4b:c9:5c:dd:26:4e:c8:b9:b0:
51:50:08:a2:e0:b0:16:0e:98:fd:79:1c:12:b3:09:
8f:9b:1a:8d:aa:f5:b0:0b:3c:05:57:49:c7:46:74:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:7B:29:FF:EC:7D:4E:13:0F:D9:DA:81:43:63:D7:5B:A6:27:52
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1e6::/48
Signature Algorithm: sha256WithRSAEncryption
32:e6:d6:7d:30:a5:4d:8e:3a:c6:eb:35:c4:56:ac:53:f1:df:
dd:83:7a:9b:51:af:df:38:78:3b:26:9f:2c:58:6d:ed:a8:9f:
b0:86:45:b4:0c:54:3e:57:b8:16:6a:fd:29:a1:f6:ed:18:5c:
64:42:4f:cd:0e:cd:fa:ac:f8:a6:44:d4:3b:e0:11:e9:1d:9b:
d8:23:1a:c7:61:d4:e3:de:a2:4a:85:11:04:d1:09:15:9b:b7:
12:8c:a6:d3:69:0b:ae:6c:5b:d9:98:5a:73:c9:35:62:6c:e7:
6d:19:3a:8c:c5:11:a8:d8:fd:9b:e1:5e:36:3b:72:c7:cc:2d:
9c:13:fc:7f:6d:b7:00:dd:48:e5:33:f0:be:6a:52:5e:13:72:
5f:00:50:93:ee:d7:c9:eb:bd:9b:d7:23:84:99:04:a9:c5:06:
00:cd:ce:a6:13:ea:ab:29:f2:78:3c:33:ab:1d:b4:40:47:8c:
de:6c:09:14:29:ca:1e:36:0c:ca:5a:18:03:cd:6c:8f:be:09:
ad:f6:50:39:30:e3:69:7c:73:cd:67:d7:11:8e:7d:6e:19:55:
d6:d4:d1:a7:dc:de:c3:80:10:98:7f:f5:84:28:52:cc:2d:e2:
a0:03:d7:a0:a1:e1:ad:8b:79:31:85:d9:22:0c:a4:43:64:7c:
b4:4b:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org