Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6trI9LNZPqBChM9fwhLPHhzHnSbliZZMvAn/I4PFnck=
Subject key identifier: 3B:D2:4C:D1:90:29:6A:00:0A:E7:56:E4:DF:83:8E:FD:8B:07:B5:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4F665FF3004C78D6BF88D60251C0BE2B5BA5703C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:06 +0000
ROA not before: Mon 26 Sep 2022 07:57:06 +0000
ROA not after: Mon 25 Sep 2023 08:02:06 +0000
asID: 59282
IP address blocks: 2400:d680:205::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:66:5f:f3:00:4c:78:d6:bf:88:d6:02:51:c0:be:2b:5b:a5:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:06 2022 GMT
Not After : Sep 25 08:02:06 2023 GMT
Subject: CN=3BD24CD190296A000AE756E4DF838EFD8B07B507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:49:a5:66:94:39:d3:85:5a:b3:7b:a0:e2:
7c:66:b7:6e:fd:41:56:09:29:b9:fc:a5:0f:47:30:
f1:65:f8:9f:51:89:09:a6:8f:94:7f:8d:4d:7d:88:
3c:0d:61:f8:bd:73:6a:75:58:a7:7a:d6:a5:ef:2b:
e6:f2:3a:ad:82:d3:a4:84:dc:a8:b8:98:a1:d1:ab:
b6:32:ff:5a:06:8d:69:2d:bd:b5:2e:93:c2:44:e0:
ac:28:9a:63:7f:12:fa:89:ac:bc:24:26:7f:b3:16:
d6:b5:57:e4:34:02:b7:94:fe:24:84:03:1d:9d:66:
bb:bf:44:0a:f3:ec:8b:4c:b7:9c:2b:5d:56:ec:2c:
98:ba:30:97:80:0d:2f:ec:8a:e4:7e:f1:fa:45:48:
52:79:03:05:93:25:10:40:87:f1:4d:87:75:6e:00:
f7:67:47:60:20:a3:71:cd:58:28:ed:6b:d6:e7:67:
34:38:c1:1b:cf:a7:db:2b:c7:e7:8f:a8:06:48:70:
1f:34:a1:c5:fd:81:a3:8f:07:c6:37:ca:ee:86:46:
9c:75:85:78:a4:9c:a8:64:78:75:e5:1a:95:ca:fd:
42:42:d4:00:b1:cf:5f:47:74:c9:ad:10:ba:3b:d5:
9f:3e:5a:5e:46:5a:a2:f2:36:8d:68:19:4c:7d:dd:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:4C:D1:90:29:6A:00:0A:E7:56:E4:DF:83:8E:FD:8B:07:B5:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:205::/48
Signature Algorithm: sha256WithRSAEncryption
0f:59:17:5a:78:23:ac:e8:c9:99:0e:49:e9:6c:10:f5:0e:a1:
0f:ab:e9:78:77:ee:a8:91:0a:47:35:c1:e5:78:f4:ea:ec:11:
f8:8c:ac:01:f4:2d:af:14:20:85:dd:8e:82:c1:93:9c:4c:e5:
e4:14:7b:f1:f2:90:18:ae:5d:06:57:18:e7:95:67:8a:c4:af:
bf:a1:f1:91:64:1f:59:7a:2a:06:ec:56:b1:06:d1:5d:03:41:
5f:6f:39:24:dd:8f:94:2e:59:f4:89:40:1b:00:67:22:5e:df:
10:4e:6c:cf:60:1c:ff:b7:1f:2c:54:84:5c:32:5d:a5:7d:98:
fe:96:f9:70:e0:dd:cd:4c:47:64:53:91:df:b4:77:5b:5d:af:
5e:c8:78:1c:5b:8c:a3:29:3f:54:d9:27:6d:3e:7a:91:2a:dc:
15:27:4d:e8:63:84:fb:5e:31:37:a1:6e:a5:58:71:f5:e7:46:
ce:ce:28:2f:64:ce:21:da:33:c3:bb:1f:21:4f:4b:2a:61:64:
78:90:b6:f3:02:18:ae:ea:18:61:a0:cf:fb:86:36:d2:64:31:
eb:8a:a7:62:af:f4:2f:b8:0d:8d:f6:19:cf:a5:ed:87:a8:cf:
8b:db:41:ea:bb:1a:77:6b:b0:83:f0:2d:fc:de:33:08:36:33:
1c:bb:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org