Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: HkNi1pmpvjgzZeSV9uZKfQUMORXa/No9yUvRMGro07M=
Subject key identifier: 63:6B:ED:18:9E:25:19:54:D6:55:72:A0:42:86:1B:B0:F2:2D:C1:D3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0209E4C743751499A5F009DADF5590B604DA9A20
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:28 +0000
ROA not before: Mon 26 Sep 2022 09:55:28 +0000
ROA not after: Mon 25 Sep 2023 10:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:1f2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:09:e4:c7:43:75:14:99:a5:f0:09:da:df:55:90:b6:04:da:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:28 2022 GMT
Not After : Sep 25 10:00:28 2023 GMT
Subject: CN=636BED189E251954D65572A042861BB0F22DC1D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:80:b0:bc:ce:91:f8:17:89:53:8e:58:d6:
27:d5:a3:5d:93:e0:f2:ab:3d:76:58:47:c4:b8:dd:
25:72:f7:1d:b6:27:05:91:79:fe:82:64:d8:cb:99:
d0:61:a9:65:f9:22:b0:b5:c0:8a:17:2a:9d:17:38:
bb:34:59:14:73:b0:22:98:73:e2:4e:1e:bd:0b:65:
b5:ac:04:02:10:29:6a:62:13:3c:c3:c7:10:86:13:
f9:86:b6:19:16:70:ca:54:1d:17:fa:d8:dd:47:69:
02:d8:84:68:41:28:9b:3f:40:16:e9:25:55:60:88:
5f:8a:cd:1b:0a:84:aa:27:be:71:be:97:a7:1c:bb:
63:17:bd:32:77:65:99:dd:5c:97:60:7c:a4:aa:92:
99:fe:f8:62:13:f3:54:4c:20:62:45:8e:96:fc:4e:
6b:28:c4:80:32:55:a0:b7:8d:eb:05:17:44:00:b1:
64:65:86:bd:cc:99:d5:02:55:7d:57:97:31:8e:96:
96:3d:40:0f:79:47:68:72:06:9a:34:5c:84:4b:bc:
c6:89:73:5d:1c:49:88:27:41:7e:4c:be:b5:5b:d3:
4c:d6:7b:83:60:78:29:09:f1:f4:c0:8a:cc:c7:a3:
7b:13:7a:ba:1e:78:c7:5d:99:b5:4b:ae:47:3b:03:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:ED:18:9E:25:19:54:D6:55:72:A0:42:86:1B:B0:F2:2D:C1:D3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f2::/48
Signature Algorithm: sha256WithRSAEncryption
72:72:fc:bf:8d:87:79:27:d1:ee:cc:de:76:b5:7a:40:a1:86:
bf:66:dc:da:5b:55:fe:0c:69:3c:d3:79:e9:d9:4e:57:28:43:
14:e2:ea:79:ee:bb:7c:40:07:1a:d7:a0:2d:6d:e7:ea:bb:35:
b3:04:26:e8:7e:3c:6f:cb:11:2f:b3:40:b7:7e:9c:33:c9:08:
7c:0d:23:91:91:2e:62:5f:70:55:11:33:cf:e0:8e:0d:04:0d:
8c:c2:38:be:4d:dc:31:8c:45:1a:15:29:96:df:11:aa:2e:6e:
ec:b0:40:66:6a:17:bb:ac:7b:a3:69:98:39:a1:d2:43:cb:1c:
38:78:11:99:af:c3:33:1e:39:b5:55:01:a9:ce:7d:2f:f8:51:
5f:ae:ae:ef:07:e4:98:e6:c4:af:f7:89:76:50:af:16:cc:0d:
76:a8:db:02:46:05:c9:4f:a0:9f:b6:7a:18:76:68:88:28:50:
20:7b:4e:be:1c:90:0c:b3:9f:0f:a7:c1:da:13:0e:5e:e1:3a:
ad:e7:89:14:e9:22:5a:6a:73:a7:6b:16:74:07:b0:5d:29:d8:
66:10:37:1f:8b:6d:bc:1d:44:24:67:c3:29:5a:21:d8:b5:f4:
83:db:5b:59:8a:1e:e4:94:29:27:bc:61:60:c4:2d:3c:8f:05:
7c:1f:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org