Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Um8FvSbN49mBhBATeMt3TtufD86Kis5eBhOzZzzr1PU=
Subject key identifier: E6:11:42:54:18:A4:A5:65:91:01:C1:6C:3C:8F:46:79:4E:F5:D2:01
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4A9B8C16E6A372B4169D75D98A6E0CD7B77D4C57
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:51 +0000
ROA not before: Mon 26 Sep 2022 07:56:51 +0000
ROA not after: Mon 25 Sep 2023 08:01:51 +0000
asID: 59282
IP address blocks: 2400:d680:20a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9b:8c:16:e6:a3:72:b4:16:9d:75:d9:8a:6e:0c:d7:b7:7d:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:51 2022 GMT
Not After : Sep 25 08:01:51 2023 GMT
Subject: CN=E611425418A4A5659101C16C3C8F46794EF5D201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:81:a0:ee:23:b5:6e:12:f8:e4:cb:9b:c3:
c3:db:b7:2e:04:20:48:b1:64:ff:c7:19:f8:b1:6c:
d7:a7:62:af:3d:4d:aa:97:46:4e:9b:38:47:3c:5d:
5c:a7:bf:96:53:95:84:4e:eb:53:e7:85:5b:20:aa:
7e:4e:82:d2:49:cc:78:bc:a0:76:0f:48:dc:19:1c:
50:47:e4:d4:5f:2e:10:be:7e:7a:46:cc:5b:4a:a2:
c4:9d:00:31:01:9f:ff:08:a0:1f:6c:9e:c3:ca:9a:
9e:ba:1e:bf:5f:20:92:e0:38:c5:7b:b8:a3:4c:eb:
99:2d:61:f1:86:c9:15:a7:29:21:35:d4:4f:48:a2:
58:72:83:9b:8a:d4:25:5f:d7:8f:93:67:c2:44:54:
63:b1:34:b5:11:b7:65:b9:05:24:a9:6e:32:67:e4:
7b:a6:f6:56:ea:60:1a:ef:2a:85:6d:df:91:f4:28:
5a:d6:2f:65:8f:a2:f5:6c:61:48:a7:61:2d:40:03:
12:3b:a6:04:c0:a4:c1:3c:21:e8:c3:f2:1e:58:1a:
aa:82:e2:8e:2a:39:02:d0:5f:37:11:9b:42:22:18:
a7:e7:aa:b3:be:e5:76:38:dc:7a:a7:12:c9:ab:0e:
3b:56:d6:95:2e:44:12:cc:d8:c4:f1:55:c5:60:ac:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:42:54:18:A4:A5:65:91:01:C1:6C:3C:8F:46:79:4E:F5:D2:01
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:20a::/48
Signature Algorithm: sha256WithRSAEncryption
05:80:38:4c:76:a2:65:d9:40:f4:38:6c:48:66:cf:89:6d:12:
7a:75:7a:18:2d:b2:64:4c:bb:4a:b0:47:3e:90:60:47:66:73:
06:7e:46:3c:06:96:72:dd:3a:6a:ca:a2:f9:d3:95:a2:78:42:
27:cc:b0:1d:24:66:37:00:30:23:03:dc:57:7f:89:2d:0d:3b:
1c:21:c9:2c:4f:8e:c5:6e:56:44:83:93:0e:2f:ed:65:29:74:
16:ba:83:aa:24:ad:95:83:47:27:67:d3:ef:10:c8:1f:cd:ad:
84:dc:03:74:ff:e4:06:7b:0c:be:8a:f0:f3:57:d0:b4:f0:c9:
1c:67:3a:19:47:58:ea:65:08:fa:51:61:87:0a:85:65:c8:95:
c1:22:fb:60:e3:2a:e7:2c:30:57:c4:05:23:e6:00:97:10:74:
3b:d8:3e:cc:03:2a:b8:49:42:91:b3:d1:9f:56:5a:96:4f:43:
a5:8a:9c:fb:ee:f6:ed:22:68:f8:81:65:29:0b:6a:eb:c2:14:
63:8e:39:cf:7a:c4:48:50:88:39:15:27:bd:b7:bf:4c:69:b4:
ca:e7:42:17:87:e8:10:e6:a3:4d:cb:b5:ce:06:14:2a:d5:40:
b2:7b:3a:d8:80:81:a4:97:c3:e2:a3:d2:66:ed:80:d4:09:cc:
88:35:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org