Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 5BYFNOkbqAw4yF14NDKj/ZJLRHDUrRvA4EXuEDJIK3M=
Subject key identifier: E4:EF:37:73:62:CA:DD:A7:A3:1A:A2:D5:1E:67:54:3D:D9:20:06:87
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 26DFACF7E7AC6BF0FC76232233992DD6B51189D8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:28 +0000
ROA not before: Mon 26 Sep 2022 09:55:28 +0000
ROA not after: Mon 25 Sep 2023 10:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:1f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:df:ac:f7:e7:ac:6b:f0:fc:76:23:22:33:99:2d:d6:b5:11:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:28 2022 GMT
Not After : Sep 25 10:00:28 2023 GMT
Subject: CN=E4EF377362CADDA7A31AA2D51E67543DD9200687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:93:64:8f:3e:59:c5:ea:3d:6b:54:de:30:
58:f8:26:7c:6c:ad:2d:50:16:4e:08:67:4f:39:59:
7b:14:f1:b7:b4:a1:3d:80:f5:a9:9a:5a:10:21:35:
14:1d:ae:81:42:26:f2:0f:00:33:3b:ab:c6:96:ed:
54:99:5a:c0:16:5e:93:bd:55:c2:79:15:aa:03:7f:
53:02:55:8c:1b:6e:48:ce:55:68:3b:da:2d:7e:b9:
1b:8c:8a:f6:7c:6d:60:e8:6a:9c:ed:76:92:90:ef:
3b:97:27:05:49:75:ea:59:13:8c:45:7a:35:a4:b1:
d9:ee:f4:4b:5c:46:7a:c1:6f:7d:98:c4:a1:0b:f9:
cf:41:c2:85:8b:6d:19:6c:02:c1:7a:42:49:0d:df:
d1:c6:8e:50:72:c8:fb:9b:45:46:00:77:1d:05:3b:
d5:67:28:ec:73:64:dd:2f:0f:33:80:a2:a5:a9:39:
2b:92:85:1f:b9:64:e9:76:82:77:da:a4:38:f3:a7:
87:ae:2e:74:2b:cc:10:51:7b:86:1b:b8:84:31:76:
22:66:14:9e:f9:4b:70:d3:af:c0:f8:cf:4e:50:d6:
9f:8c:01:76:d4:2e:7c:55:ba:1e:22:b8:98:e6:44:
9f:cf:f0:18:54:11:dc:04:05:b6:f0:95:92:a9:f8:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:37:73:62:CA:DD:A7:A3:1A:A2:D5:1E:67:54:3D:D9:20:06:87
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f8::/48
Signature Algorithm: sha256WithRSAEncryption
d6:35:54:56:a6:f3:91:78:d0:7d:d4:06:de:72:61:e3:ed:3a:
a1:8a:98:34:78:e8:89:cd:fb:c7:e6:c0:da:c2:fc:32:0a:19:
df:15:3b:00:8e:7b:04:d4:9d:14:65:99:ad:5e:38:59:56:bb:
a1:30:d3:2a:fe:aa:8f:03:1c:29:0a:ce:fe:23:0a:68:56:79:
72:ff:a4:42:c9:6b:cb:47:62:dd:88:d6:7a:b9:1a:46:75:62:
1c:a9:ff:1b:03:5e:a4:c3:19:5a:ce:d5:37:4f:b4:2d:a3:3f:
f9:d2:a8:e9:42:09:0c:7c:34:9f:94:d9:73:87:21:80:4c:09:
a1:3f:1e:ec:4a:76:52:af:42:61:27:e3:99:5c:53:48:ac:51:
f7:14:0c:a2:03:d7:37:42:4c:3c:fa:76:b3:37:f5:eb:ea:f0:
8a:08:d8:ef:e8:9f:e2:e5:49:ec:5b:df:39:af:fb:8f:1d:97:
90:6d:35:f3:95:83:bd:3c:9d:bb:16:45:7b:0f:68:97:c3:f4:
74:31:6d:cf:c9:37:7a:73:04:8a:73:49:24:46:9e:82:f6:d2:
07:ba:44:11:be:30:33:92:7f:42:27:b7:6e:8c:ec:d7:58:b5:
9c:07:21:e9:d7:d4:ec:75:ee:2a:bd:6b:61:13:8a:1c:8f:29:
c7:2c:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org