Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3165653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 46TOBE7Be9ds//QsF/ol5I58P9Cu8bc4nensJ6UajLI=
Subject key identifier: D8:D4:F1:3A:6B:3D:15:FA:71:FE:0D:3B:02:1A:32:1F:50:2A:C2:3C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5ED379665FEA15DB20ADFDE508599CBB8C44A58E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:32 +0000
ROA not before: Mon 26 Sep 2022 09:55:32 +0000
ROA not after: Mon 25 Sep 2023 10:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:1ee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d3:79:66:5f:ea:15:db:20:ad:fd:e5:08:59:9c:bb:8c:44:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:32 2022 GMT
Not After : Sep 25 10:00:32 2023 GMT
Subject: CN=D8D4F13A6B3D15FA71FE0D3B021A321F502AC23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:4c:de:e7:22:5d:9f:56:e9:68:b5:76:1d:
88:62:62:e8:4c:96:22:e2:5f:9d:58:4d:27:68:74:
84:38:24:d8:9e:1a:25:27:d2:fe:10:52:00:4f:cc:
9c:94:0a:97:ef:b5:bc:fa:ae:67:46:b7:2f:a7:2b:
12:81:ca:f4:02:80:15:bb:47:5e:4f:96:ac:83:38:
8a:d0:04:37:83:6e:ad:3f:f4:d1:4b:29:d0:bd:9f:
54:7b:79:17:37:f9:db:ae:a4:7f:54:26:43:fb:40:
90:88:79:83:4a:7a:59:7b:47:9d:71:3c:12:cd:b5:
ee:6d:5d:18:c8:7b:f4:32:a6:f9:f1:02:e8:90:da:
47:24:da:0b:cd:c4:f8:8b:61:e1:dd:58:90:4d:57:
11:76:77:7b:7a:6a:05:5d:db:df:cc:bd:24:fc:f0:
85:49:48:73:fd:53:04:4b:d6:3b:87:12:93:3a:57:
5c:13:a1:5d:ae:6c:53:1e:fe:2e:1e:0c:01:10:44:
75:82:ce:29:3c:c2:1e:44:57:9d:ee:cc:a7:94:97:
fd:a4:22:9b:9f:46:8d:4d:4f:9d:80:8e:67:19:fb:
af:6b:d1:04:b6:56:dc:48:ee:f6:c4:0a:45:dc:fd:
25:f0:22:91:c0:98:6c:c8:81:db:d4:0f:f7:51:e4:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:F1:3A:6B:3D:15:FA:71:FE:0D:3B:02:1A:32:1F:50:2A:C2:3C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1ee::/48
Signature Algorithm: sha256WithRSAEncryption
c6:39:40:1b:8f:09:ec:dc:4d:e3:da:65:23:26:34:5e:ce:4b:
6b:ca:30:fe:ca:58:ec:7d:fb:ba:e9:3c:1e:11:8c:43:d7:56:
d0:e8:d7:16:ae:74:3d:1d:95:d3:47:37:25:d2:89:74:0b:32:
2d:40:ab:13:62:fe:3b:36:16:60:0e:12:0f:c2:12:80:3d:7c:
bf:65:4c:14:86:e6:f7:f4:f0:de:99:ee:04:82:02:44:41:44:
1c:b0:af:6c:8d:55:cd:1c:2e:32:28:0b:14:ae:70:b3:b0:d8:
b5:de:51:9d:ee:12:c2:63:65:c1:bd:02:97:72:0b:91:91:6f:
8d:51:15:73:f9:32:6c:80:b5:76:e0:e4:12:7c:2f:e8:7a:e6:
45:3d:8b:06:b0:7b:8a:ca:7f:84:f6:bc:4d:6b:0b:dd:b5:86:
57:73:6f:41:e0:d5:af:e2:0b:6f:ca:b2:0e:b3:d6:dd:41:78:
7f:b7:6c:48:8d:1b:25:1f:2e:79:62:00:7b:ec:32:1d:d5:42:
1d:2e:46:e7:b5:4c:92:9c:93:fe:1e:50:fd:61:80:22:02:d9:
63:1a:74:bc:52:a7:6b:35:3a:5b:83:e7:c5:44:fe:a6:5f:ca:
76:3e:42:e9:22:4b:a8:10:4c:06:aa:03:db:f4:04:70:6e:58:
30:96:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org