Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: IV0BNtqB8VjxNUbWOD+LKyw2eOTxkFfOqJIPgom7p8o=
Subject key identifier: 6C:F6:69:0A:D7:47:0E:F9:FC:6C:14:04:84:DB:F6:E2:66:4F:D7:44
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 13839CD4FA448AABD90B54FA6249F4023BDDB12A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:26 +0000
ROA not before: Mon 26 Sep 2022 09:55:26 +0000
ROA not after: Mon 25 Sep 2023 10:00:26 +0000
asID: 59282
IP address blocks: 2400:d680:1fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:83:9c:d4:fa:44:8a:ab:d9:0b:54:fa:62:49:f4:02:3b:dd:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:26 2022 GMT
Not After : Sep 25 10:00:26 2023 GMT
Subject: CN=6CF6690AD7470EF9FC6C140484DBF6E2664FD744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:8f:69:ec:bd:a7:05:71:ad:f6:92:a2:ed:
98:ea:7a:b3:51:1f:24:79:bc:37:13:86:72:a1:16:
bc:76:31:7b:3c:dc:fc:1b:d6:88:9a:37:72:62:58:
92:38:b7:a0:36:e4:f3:8b:9c:52:c8:79:37:1e:bd:
ba:58:04:14:72:4c:36:fc:fc:2b:82:07:c5:66:6b:
4a:a7:9f:29:f6:4f:7c:8d:94:5c:29:db:46:75:97:
82:51:cc:8c:7e:a3:fe:02:c8:f9:78:28:59:d8:e9:
d4:fd:0e:73:d0:a7:fb:55:89:9f:34:27:2a:ef:5b:
0e:25:fd:ce:9c:24:aa:57:14:39:08:12:69:59:60:
9d:26:99:93:bc:44:61:2d:ef:9b:69:4c:aa:64:c0:
c4:69:cb:a7:af:fb:89:85:28:33:5e:58:9f:b1:f1:
4f:32:2c:b4:58:ed:b7:81:ea:87:bf:ed:ac:3a:4d:
be:66:c9:9b:09:5f:2a:b0:fe:ef:9b:5b:1c:ce:a4:
4c:11:07:be:ec:cc:f4:b3:2e:2a:d6:60:5c:ab:1d:
30:b4:77:2f:fe:85:3e:43:07:d8:97:c9:6d:a3:56:
3e:d7:f3:21:4d:67:b5:2d:07:4d:6e:2a:e9:e4:51:
2f:c0:56:37:03:2a:56:de:e8:26:86:f3:93:d6:15:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:69:0A:D7:47:0E:F9:FC:6C:14:04:84:DB:F6:E2:66:4F:D7:44
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1fc::/48
Signature Algorithm: sha256WithRSAEncryption
14:40:79:16:64:d4:8b:39:96:cd:39:bf:56:e8:a9:82:5c:6c:
67:64:cc:f6:b0:bc:a9:eb:af:72:51:fd:32:fb:62:e0:43:05:
fa:d3:6f:1d:2f:3c:7e:33:0b:28:78:9b:49:73:15:40:01:84:
b4:51:d5:5b:08:63:e5:2d:01:90:b1:f7:df:3d:66:85:89:d4:
6e:54:af:da:53:2a:1f:c1:46:03:e8:4c:9d:98:51:a9:0f:c4:
40:ab:ff:a6:cc:c8:c1:8c:42:e3:bd:00:29:b1:7a:84:fc:21:
cc:7c:21:da:63:5d:f6:30:cb:d7:58:40:c5:77:2d:f2:64:58:
f0:12:3f:27:63:18:4f:07:6a:9c:9b:42:1e:6f:34:1a:6b:c0:
4d:d7:f8:b1:f2:21:10:81:0e:56:45:db:7c:44:46:a6:42:1a:
c8:9e:32:2e:81:5a:0b:7f:5b:55:18:ef:c3:32:1a:e3:ea:50:
08:fb:ff:84:f9:75:60:4a:77:3a:78:27:6f:14:77:34:8c:b5:
f1:ac:e4:4e:d2:14:d7:50:44:6b:69:71:30:08:1f:ca:9f:03:
d6:a1:2c:48:38:11:c8:fa:85:85:cc:24:3a:ac:9b:e7:2a:12:
d2:14:a0:1a:b4:27:c4:94:2d:9d:c2:47:ca:e6:b1:07:d4:f2:
6e:7d:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org