Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3165633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: RmRVKLRVSZj244Tl7dJjfj9GE68TEg7720n8SK6kCag=
Subject key identifier: FA:9B:71:DA:93:9D:07:F5:E9:29:2A:D7:76:2A:5D:A0:CE:30:91:33
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 50E6B97C1A19D00191ABFC0C708F05B283F0AB5C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:11 +0000
ROA not before: Mon 26 Sep 2022 09:55:11 +0000
ROA not after: Mon 25 Sep 2023 10:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:1ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e6:b9:7c:1a:19:d0:01:91:ab:fc:0c:70:8f:05:b2:83:f0:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:11 2022 GMT
Not After : Sep 25 10:00:11 2023 GMT
Subject: CN=FA9B71DA939D07F5E9292AD7762A5DA0CE309133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:b6:d5:ac:31:b8:12:0f:7c:8d:d0:ae:6f:
52:81:75:46:2b:69:8c:5f:3f:fe:a3:10:55:84:23:
4d:d2:93:41:aa:59:82:ed:ab:0b:09:a4:b2:13:df:
bb:5e:50:92:95:eb:5b:48:2b:2b:3d:e9:f4:fb:78:
34:11:57:db:cc:bf:34:b0:dd:e3:e5:22:12:75:6c:
e4:d2:79:94:35:54:56:e0:d4:96:9a:9f:70:1c:6c:
c7:08:59:94:16:aa:bf:87:d4:89:de:09:30:b5:d9:
24:9d:ab:f2:de:f1:79:3d:2b:d2:4c:09:f3:27:3b:
ae:37:86:92:17:26:64:f8:5e:3a:c8:67:fa:44:a5:
26:a4:ac:9e:c3:04:15:25:f6:e2:88:2e:6f:a9:22:
ef:03:2b:66:83:27:24:d2:09:86:04:00:3b:cf:8b:
eb:22:b1:c5:db:b1:63:33:22:89:3f:82:36:42:4e:
ea:0f:49:03:da:87:01:e8:a0:78:6b:ae:a8:21:d3:
0d:6c:9f:ab:a9:ee:f8:e0:15:b0:8b:83:51:eb:d1:
00:94:bb:90:e6:95:9f:04:47:18:94:2a:ae:b3:8a:
62:94:6b:94:6c:f2:30:05:11:fd:e4:7c:d2:ca:ed:
3c:c2:4e:13:22:dc:1b:7d:9c:5d:3e:56:7d:92:85:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:71:DA:93:9D:07:F5:E9:29:2A:D7:76:2A:5D:A0:CE:30:91:33
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1ec::/48
Signature Algorithm: sha256WithRSAEncryption
6b:6e:25:d3:d2:74:21:06:eb:75:54:a5:77:f3:f6:f3:8f:4c:
c8:a8:88:d1:39:0f:ac:b0:87:28:7b:29:26:8f:2b:8b:32:68:
7b:18:14:d2:ac:23:51:3a:1b:7b:d3:a7:45:b2:23:af:af:21:
7a:78:fd:03:2d:9b:ca:59:aa:21:30:c8:30:08:be:d2:d3:d6:
b6:65:8c:3b:9c:7b:dc:a9:01:36:d4:78:af:2c:79:2f:0a:bb:
49:38:ff:70:70:48:f2:15:db:28:9a:89:5a:43:a0:7a:66:32:
b2:98:a6:e6:0d:7b:e7:f1:c6:70:ca:6f:cf:fc:a0:f1:7b:67:
bf:5e:df:9b:e8:39:54:1f:7b:1e:d5:07:64:e2:15:5d:3a:37:
22:69:44:c7:bf:8f:4f:59:5b:7e:5e:d8:d0:a7:16:32:d4:85:
52:6b:43:7f:f6:18:52:e8:19:95:bd:61:e5:4d:4f:65:62:f6:
97:6c:89:e7:f6:e9:34:bc:53:bf:54:dd:5f:e9:84:7f:37:8e:
64:da:91:2e:73:26:18:5e:1c:7d:1a:cf:77:9b:20:a0:a9:e0:
54:d3:f4:52:6f:19:86:2c:52:2d:af:7a:30:05:1c:e4:10:2f:
13:4d:75:50:a2:36:34:61:ad:38:e3:1c:d5:d6:73:db:70:4f:
d4:fb:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org