Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: nm1pwjXvGh8lToAhmT6g6rNwotgUoNiGPG6igfMbLEU=
Subject key identifier: 1E:E3:C9:8F:74:82:57:D9:A0:4F:C3:BA:E4:A9:CA:DB:D6:12:1E:26
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 22DC6FEEAB73709C674818C90AFD659F35ACCA43
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:01 +0000
ROA not before: Mon 26 Sep 2022 06:55:01 +0000
ROA not after: Mon 25 Sep 2023 07:00:01 +0000
asID: 59282
IP address blocks: 2400:d680:1e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dc:6f:ee:ab:73:70:9c:67:48:18:c9:0a:fd:65:9f:35:ac:ca:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:01 2022 GMT
Not After : Sep 25 07:00:01 2023 GMT
Subject: CN=1EE3C98F748257D9A04FC3BAE4A9CADBD6121E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:39:bf:9e:31:45:f5:ad:22:3c:da:a1:f7:
df:44:6d:d7:3e:6a:46:19:e8:03:0d:14:70:cd:c2:
c7:23:23:7e:ab:c0:49:f5:ee:c2:88:c4:c5:7b:6b:
fb:a3:85:e5:dd:5d:e2:c8:a7:bc:3b:55:2b:bb:5c:
de:5d:09:9d:34:9d:bd:d9:f0:f6:0c:c3:76:b4:a1:
23:04:17:41:76:09:69:01:21:dc:41:08:13:8d:8f:
61:3f:76:f3:87:32:c2:db:5a:50:e5:4c:6a:06:39:
98:59:91:6f:d2:3f:5c:17:1d:fe:03:8e:63:6b:51:
ef:91:0c:fd:19:84:f7:72:d2:95:92:eb:54:85:85:
13:66:62:e8:0e:91:0e:b0:15:33:63:e5:5a:11:e1:
c3:7b:c4:5c:05:8a:ba:bb:b3:95:33:eb:07:10:fc:
72:df:93:6b:f0:c8:ce:5e:38:aa:e8:3b:f9:dd:a5:
1d:62:d5:bc:bf:0e:de:e8:45:83:5f:01:7b:4d:f0:
ad:25:b3:1b:d2:d6:89:8c:cc:bb:48:28:8d:5d:11:
29:d4:e4:af:c8:93:c3:c1:4b:5b:f6:6f:73:55:ec:
f9:54:f2:88:13:2a:ac:00:6c:b0:3b:37:36:82:5f:
fb:2e:e0:1f:b3:6b:8a:06:f4:5b:a4:29:e0:e2:bf:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:C9:8F:74:82:57:D9:A0:4F:C3:BA:E4:A9:CA:DB:D6:12:1E:26
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1e::/48
Signature Algorithm: sha256WithRSAEncryption
75:3a:fd:f8:71:3a:97:fd:87:95:96:61:d6:02:8b:69:bb:d8:
63:b0:c0:34:34:aa:71:d4:4f:7a:d3:23:0a:a5:0c:8a:f0:f1:
16:8e:03:e3:f4:70:c5:c6:35:94:c3:35:92:07:1a:96:36:de:
56:5b:95:2a:13:b5:2a:69:98:7f:fb:ea:80:72:53:8f:7c:28:
1c:28:b5:00:f2:66:3c:05:f9:3a:f1:ab:9f:9e:d0:9e:3a:4b:
da:ab:41:f2:a6:ca:66:a8:af:3c:e1:c8:27:de:0b:74:2e:52:
cb:c3:54:31:04:2a:8b:0d:33:eb:37:17:43:a6:e8:92:d8:7e:
08:03:f0:e4:5f:d8:21:08:50:09:c7:21:cd:57:f5:16:a7:3f:
e9:93:6a:47:3f:39:a0:4c:55:f0:6a:fd:67:01:a7:55:04:84:
11:19:36:2c:eb:4f:ae:9e:ff:29:12:ec:92:78:f4:76:c5:ca:
7e:66:32:f1:56:7d:17:36:b4:e1:00:ef:59:b1:7e:df:aa:56:
04:63:96:4a:da:24:87:75:55:94:f2:95:6d:2e:fa:f7:e0:07:
83:5c:32:8c:89:f8:f2:29:8c:73:72:09:39:0e:14:d8:ee:78:
df:ec:69:bd:83:14:7a:dd:5e:0d:33:d3:6a:32:01:4a:45:99:
3f:61:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org