Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: bczcgZ8jYMg/dzkan2MWvKHc7CWfgiEL/ElMcpX5PIs=
Subject key identifier: 4B:DC:7B:1D:93:28:DE:78:F3:32:2E:3D:63:D7:7C:64:5B:6B:5B:BD
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6AD2CC8D659EECEE299DB2DF20888276BE0B02A6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:16 +0000
ROA not before: Mon 26 Sep 2022 09:55:16 +0000
ROA not after: Mon 25 Sep 2023 10:00:16 +0000
asID: 59282
IP address blocks: 2400:d680:1f1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d2:cc:8d:65:9e:ec:ee:29:9d:b2:df:20:88:82:76:be:0b:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:16 2022 GMT
Not After : Sep 25 10:00:16 2023 GMT
Subject: CN=4BDC7B1D9328DE78F3322E3D63D77C645B6B5BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:23:17:fc:3f:56:28:de:49:1a:12:87:7e:
04:d6:e6:af:42:78:46:e7:aa:a5:64:85:3b:a0:bd:
6d:aa:54:09:56:61:2f:1e:b3:28:45:ec:9e:7b:80:
fa:d9:c8:ab:d7:6b:7c:63:d8:69:59:2a:f5:fe:6a:
f1:5b:e2:e6:20:2b:0f:3e:02:4d:27:f7:2b:42:cc:
dc:29:96:9d:60:b0:54:65:fe:bd:2b:e4:47:fc:ef:
e4:40:03:85:27:c2:a9:8c:cc:7f:c9:73:53:4b:ba:
fd:f4:e0:30:e2:6e:1a:08:f7:97:71:98:fc:bf:ad:
17:19:78:31:98:07:37:bb:c5:a3:15:4e:f6:76:4a:
77:f0:3a:67:92:00:07:09:5e:06:bb:c8:b5:96:7b:
9d:eb:11:ca:b1:bf:73:89:65:d4:9a:16:1c:9c:14:
21:37:29:67:90:ff:f4:a0:cd:98:0f:a3:32:4d:35:
e4:62:4c:3c:29:1f:22:0c:df:f5:41:f3:10:12:32:
4a:cc:0a:f6:e2:86:2a:40:ba:8c:f9:83:d1:03:5d:
06:bf:0f:65:55:8f:6d:f2:fe:0d:a2:00:10:a8:2e:
a4:96:41:14:eb:46:c9:c7:e2:0c:84:25:f3:33:f3:
0d:8f:df:16:1b:75:11:4f:81:56:2c:ec:fc:92:30:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:7B:1D:93:28:DE:78:F3:32:2E:3D:63:D7:7C:64:5B:6B:5B:BD
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f1::/48
Signature Algorithm: sha256WithRSAEncryption
c2:5d:cc:b4:65:81:97:ef:d4:42:b1:0b:75:ab:81:7a:04:76:
bc:1d:e4:e0:16:a0:a4:7a:10:d9:3f:59:de:15:7c:ec:a2:79:
28:12:b8:b1:a1:2b:e5:21:79:6c:46:f8:f2:fc:68:c6:40:d0:
28:11:9c:20:d4:94:d2:cd:b1:1c:cc:25:a3:22:df:7d:db:80:
76:77:89:27:1b:c0:b7:20:29:a0:35:5e:ad:29:58:0c:8d:e9:
2c:ec:31:d9:54:b0:2a:21:ce:b5:de:c9:6f:68:79:7c:64:3a:
24:d8:ca:fa:3a:14:d2:6c:e8:03:f7:ba:32:ef:88:f1:6c:6f:
68:a7:39:7e:f1:d1:06:a2:57:7c:cf:ee:f0:92:35:ff:cb:67:
c4:b0:1e:8a:e1:f2:0e:8e:d5:c4:50:bb:2a:d9:79:bd:79:97:
34:52:c4:b0:b8:ec:39:66:63:0f:8a:69:a7:5e:6a:7e:89:e8:
5e:6d:1f:ab:58:eb:bf:ba:3d:44:96:67:eb:9a:63:fc:b1:10:
0f:cf:f7:46:f2:d7:1f:50:a4:22:80:70:51:94:1e:5d:49:fb:
0c:50:49:fd:03:95:1c:a0:7d:63:c0:04:ae:fc:0c:0b:73:3f:
1f:43:8b:80:78:3b:e2:01:e7:bd:fa:b3:02:d1:17:83:0b:a1:
a7:5c:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org