Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MHeE+E1JYo1I7p4bn0MtCEmJQ4GO5oO4qbF/f4ZKzaw=
Subject key identifier: 8A:14:F0:14:62:F9:27:9E:55:6F:FB:59:4E:18:B5:DB:33:D1:D0:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7CC44FAFEF25A8391790FED552D61416E9B89CE8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:01 +0000
ROA not before: Mon 26 Sep 2022 07:57:01 +0000
ROA not after: Mon 25 Sep 2023 08:02:01 +0000
asID: 59282
IP address blocks: 2400:d680:203::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c4:4f:af:ef:25:a8:39:17:90:fe:d5:52:d6:14:16:e9:b8:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:01 2022 GMT
Not After : Sep 25 08:02:01 2023 GMT
Subject: CN=8A14F01462F9279E556FFB594E18B5DB33D1D007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:02:b7:7b:c7:b6:92:36:eb:81:44:11:f9:
b8:1e:78:35:97:13:19:2c:f7:d6:1b:18:49:81:54:
cf:0c:ab:d8:6e:1b:63:91:d8:88:b1:85:40:b9:36:
c0:98:18:08:d4:37:da:72:28:95:e3:57:32:7b:78:
c4:c2:2a:c9:71:10:46:e8:76:62:70:9d:7f:42:bc:
4f:90:56:fb:6e:8f:1d:3f:30:a0:95:40:1e:e4:2e:
d2:86:39:8b:b2:42:6a:e7:64:52:1c:c4:60:29:9a:
a6:9a:77:39:04:08:6d:9a:90:d3:83:71:2f:06:58:
f8:5b:d7:4f:b9:13:fb:7b:3c:6d:fa:b8:22:f4:0c:
fc:fb:a4:80:7c:a1:94:a8:c6:13:1e:1f:83:e7:a3:
7d:f0:60:94:4b:5c:cf:7e:9e:04:e1:2a:8f:d0:34:
46:da:ce:7c:e8:35:a3:f9:d8:ab:01:f4:d1:6c:65:
b7:75:3a:fa:41:42:65:16:a6:87:59:c0:b5:a8:58:
c9:e1:f8:74:fb:06:1c:a8:96:08:6a:25:04:78:7a:
ab:8e:f0:c3:ef:0e:0b:48:3d:35:b8:fd:27:34:14:
1b:2c:9a:8f:39:3a:aa:d7:cb:6d:1c:97:06:0e:ee:
36:2d:1e:34:fb:43:c4:a3:14:37:cb:0d:ab:12:da:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:F0:14:62:F9:27:9E:55:6F:FB:59:4E:18:B5:DB:33:D1:D0:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:203::/48
Signature Algorithm: sha256WithRSAEncryption
1b:1b:ca:28:86:63:16:e7:9b:9f:78:f1:bf:f5:a4:fd:69:84:
30:1b:f7:6d:03:d2:04:10:14:c6:3f:b7:63:77:ec:05:89:0f:
33:91:76:c7:72:7d:af:2b:3e:82:63:36:a4:b5:12:70:ad:d8:
c8:31:b6:8b:6c:7d:f0:09:c0:64:28:73:54:08:0c:4e:6a:09:
b4:00:bc:9c:1c:15:14:12:99:a5:11:6c:b2:b9:f9:96:d3:ae:
5a:65:36:b5:3f:f7:aa:30:63:cb:fc:1e:a5:25:39:3b:94:84:
81:96:c4:0a:cf:1d:32:c3:e3:de:c8:71:59:17:e9:15:70:62:
f0:64:23:32:af:df:12:f7:2c:82:07:7a:d7:93:d1:62:03:8e:
7a:b3:fb:6e:2d:0a:30:a5:aa:8a:b5:15:5b:9a:94:93:48:eb:
0f:b7:be:0d:19:87:a4:af:a3:d4:b5:8b:5d:22:06:c3:3f:e3:
89:27:17:32:50:2f:34:33:84:f6:73:45:80:32:21:c6:83:d5:
9f:42:21:5d:db:9b:be:e4:94:1a:76:b5:d6:ae:4d:d7:99:0e:
78:91:f2:22:65:cf:ea:3b:6e:75:e5:37:14:99:74:2b:86:07:
ea:c1:68:0f:f3:c5:9d:3b:f4:10:3c:e4:17:46:32:53:23:cf:
0c:00:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org