Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 2onV8ouirawc2L4vDeSfczeXjbKni7Q4DfpynHaBbJM=
Subject key identifier: 28:DE:72:07:D1:99:25:E5:AB:99:77:D4:DC:6A:27:4F:55:24:0A:8E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 31A1C6232337444423011768FC6F1FE6A8EA4CA1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:17 +0000
ROA not before: Mon 26 Sep 2022 07:57:17 +0000
ROA not after: Mon 25 Sep 2023 08:02:17 +0000
asID: 59282
IP address blocks: 2400:d680:200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a1:c6:23:23:37:44:44:23:01:17:68:fc:6f:1f:e6:a8:ea:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:17 2022 GMT
Not After : Sep 25 08:02:17 2023 GMT
Subject: CN=28DE7207D19925E5AB9977D4DC6A274F55240A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:1b:98:76:a8:af:0a:a3:cc:f9:03:10:f5:
b4:98:4f:94:d0:f5:08:0c:82:3f:10:a0:d9:7a:be:
a6:07:8a:0b:25:43:9c:f9:37:44:9d:dc:d8:f0:97:
d3:94:5d:52:2a:b5:73:16:56:7a:18:21:09:e1:b7:
57:70:e1:12:3a:5d:83:ee:d8:99:6d:d6:4c:d1:f0:
da:75:b3:3f:5d:78:a7:1b:05:ae:fc:d4:3f:cb:e2:
18:7d:df:dd:ef:43:e4:83:86:88:34:f8:62:9c:e1:
b0:3a:de:cf:dc:3e:4b:0a:25:d3:4e:6f:72:fe:27:
f7:fb:a9:ce:02:5a:1b:99:ac:5e:68:23:be:73:3d:
4b:45:02:c2:66:c7:6d:a9:26:72:80:91:89:a2:f1:
a5:3c:51:e5:ce:aa:ae:5e:a3:82:28:af:b3:07:83:
5c:fc:6d:b2:de:3c:85:fa:1a:73:ce:36:39:19:59:
07:91:e8:75:1e:11:d4:df:73:02:43:7f:88:51:5e:
0c:36:bc:77:de:3a:18:d4:39:d8:df:33:fc:43:08:
5e:46:f1:47:26:18:af:12:d2:be:8b:d2:27:12:f1:
0b:bb:5c:ce:44:22:de:e1:ca:0a:c5:f2:e7:08:e3:
d4:c1:d1:c5:19:1c:c5:3a:ce:5a:77:30:97:a3:54:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:72:07:D1:99:25:E5:AB:99:77:D4:DC:6A:27:4F:55:24:0A:8E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:200::/48
Signature Algorithm: sha256WithRSAEncryption
43:fd:ab:d8:a9:de:f8:e0:23:e5:91:68:ee:c4:29:45:7b:e5:
fd:48:05:c0:8b:b5:11:c5:66:6f:ba:79:ce:83:53:17:34:a1:
e6:f8:90:e0:1a:82:86:76:48:40:8e:a3:c7:e9:98:0e:b1:ec:
aa:fc:67:47:d8:d5:ab:78:aa:4b:6b:26:99:50:05:06:61:18:
b8:97:7b:e8:2d:eb:11:8c:98:31:3f:72:08:7a:04:90:9e:5d:
c9:95:27:b3:15:02:b7:8a:16:2b:f4:5f:28:c3:0f:87:28:ff:
fc:ca:6b:8e:dc:a2:1f:51:3d:64:61:ee:fb:2c:c2:f7:61:f1:
03:82:24:44:90:be:c1:2c:f5:fe:da:e6:58:d5:c8:aa:25:9b:
3a:e0:18:ae:43:5b:41:ce:7d:ab:2b:c0:54:c5:48:0e:99:d8:
7c:e7:c5:34:9f:d1:96:e6:14:ad:15:28:22:91:59:41:a5:73:
f5:a4:a4:1e:3a:b8:4a:d1:3e:40:9c:e6:e2:69:6f:a2:ff:b3:
de:ee:88:18:f2:ce:ef:5f:53:69:04:6f:7f:43:8b:2c:b7:6e:
2f:90:b4:c9:b2:1f:8c:fa:18:30:b9:d1:ea:31:94:05:b9:0d:
d6:bd:64:0d:99:5d:94:0a:f4:c3:9c:1e:f6:3b:ce:10:ea:e4:
5b:57:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org