Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LslNhqZQwIHHZPXFKFLNZ66PMD2QuNFvC0v+LGi/mYY=
Subject key identifier: 83:E0:66:8F:BC:D3:85:27:DA:2C:F6:AC:3D:9F:E4:C6:44:8C:31:81
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1608B478E3B56D422BC8CFA0D1560309A2B89F5C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:26 +0000
ROA not before: Mon 26 Sep 2022 07:56:26 +0000
ROA not after: Mon 25 Sep 2023 08:01:26 +0000
asID: 59282
IP address blocks: 2400:d680:20b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:08:b4:78:e3:b5:6d:42:2b:c8:cf:a0:d1:56:03:09:a2:b8:9f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:26 2022 GMT
Not After : Sep 25 08:01:26 2023 GMT
Subject: CN=83E0668FBCD38527DA2CF6AC3D9FE4C6448C3181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:34:4f:a3:2f:8e:0b:57:7d:1b:1e:48:1b:
ea:4a:f5:6a:ef:e8:4e:02:a3:fa:39:0a:f5:bd:75:
09:9f:07:cd:20:52:f7:d0:91:46:c9:4e:f4:ac:e7:
b0:aa:7d:52:04:a9:e9:0b:16:e0:2e:d5:f8:af:ce:
91:08:62:8c:57:a5:29:81:c2:d6:62:7d:9a:1c:ef:
45:87:52:6a:27:0d:99:53:b3:6d:8f:94:57:58:f4:
0e:f8:a2:01:88:39:c2:75:8f:01:48:c1:ed:16:48:
ba:59:8e:4f:d6:c3:b9:28:86:9e:10:d2:35:93:a8:
86:95:1c:e9:7d:fd:bc:85:72:83:2f:f3:2f:3e:b5:
45:84:9d:ec:c5:cd:c6:36:61:22:3d:2a:54:28:7b:
83:b6:17:e2:fd:22:af:e8:22:55:05:e9:b4:c1:da:
94:d2:d3:6a:c7:a8:3e:7e:fd:f3:4e:94:a1:50:0a:
66:92:2e:b3:43:e7:36:62:eb:0c:22:14:a2:0a:78:
e7:2d:e1:bc:ac:9d:96:78:66:ff:56:83:f4:cb:a1:
45:7a:99:2d:51:bc:95:40:f5:17:5f:48:a7:22:dc:
b0:ab:c9:a1:e2:4b:89:3a:73:d1:66:a1:6e:80:a9:
04:76:cc:78:28:99:c9:1a:57:c2:2f:a4:fc:d8:e8:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:66:8F:BC:D3:85:27:DA:2C:F6:AC:3D:9F:E4:C6:44:8C:31:81
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:20b::/48
Signature Algorithm: sha256WithRSAEncryption
92:ae:4a:56:22:52:cc:e6:82:cf:36:ac:c5:d8:d0:8b:46:49:
00:16:39:b7:5d:8a:dc:fc:46:62:29:9a:31:e1:0e:e0:19:41:
3c:a6:41:1f:7c:82:d1:b5:34:7c:4c:6b:31:ab:5b:62:25:9e:
62:b6:d5:dc:8d:ad:d4:72:d7:38:0b:40:58:42:b6:de:88:db:
5a:17:b1:21:81:cb:87:4c:80:47:7c:87:d2:5e:cd:c3:b4:eb:
79:20:c5:e4:a2:db:2a:50:2d:3b:58:63:94:d3:5b:25:6c:d1:
b4:c4:d7:0a:0d:a9:fb:1c:1d:29:02:1a:46:ec:22:ef:be:48:
3e:a7:c5:16:33:34:8b:ee:96:a8:15:68:bf:8e:d9:66:2f:c4:
29:4b:09:0f:1d:a5:2e:d2:1b:c5:31:7e:4b:66:e3:a3:24:49:
19:7a:a2:95:8e:2c:5b:3a:28:76:bd:6b:7a:32:42:e9:7c:67:
da:73:e1:b7:9f:44:b3:f1:8c:c2:ab:92:4e:ad:2e:56:63:34:
55:ed:5b:e0:80:99:54:cf:60:7d:7b:cb:43:04:82:5b:2f:ec:
1f:aa:d7:47:66:9f:65:db:be:15:fb:c7:be:1a:c5:d9:f9:7f:
7d:b6:7f:1c:6e:82:a5:59:c0:99:1a:ba:ab:34:ec:77:57:d4:
58:2d:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org