Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: dydz31DNkJAbTud3fOMJtD4zVRqN+ELf0CccPf694Lw=
Subject key identifier: A7:FD:F1:D6:50:97:A4:95:73:4E:A7:7F:DD:11:93:DC:74:DA:6B:BE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 10FDE39306CF91133D22BD499D1C0483306E177E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:10 +0000
ROA not before: Mon 26 Sep 2022 07:57:10 +0000
ROA not after: Mon 25 Sep 2023 08:02:10 +0000
asID: 59282
IP address blocks: 2400:d680:20d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fd:e3:93:06:cf:91:13:3d:22:bd:49:9d:1c:04:83:30:6e:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:10 2022 GMT
Not After : Sep 25 08:02:10 2023 GMT
Subject: CN=A7FDF1D65097A495734EA77FDD1193DC74DA6BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:f2:45:9e:c2:4c:45:83:36:0a:3b:23:73:
7d:e6:50:e4:ac:98:37:49:7e:d1:f8:79:cb:7a:6b:
83:5c:a4:3e:cb:5b:bd:55:fe:4f:cb:48:54:8b:76:
09:a4:18:ae:23:08:53:d7:e1:23:d9:f9:91:00:c6:
ca:fa:7a:07:ef:bb:74:f7:d7:18:ec:25:ee:d8:94:
94:1a:13:22:e4:8f:61:9d:84:bf:00:4d:ae:df:68:
72:72:6c:ba:8d:5e:f7:2c:88:9a:01:fb:dc:42:ff:
99:33:53:70:59:89:7e:10:38:58:70:6e:1e:31:c1:
5e:48:38:cc:21:ef:36:86:69:11:d1:a6:1b:af:c3:
55:91:ba:6b:44:fe:40:8c:88:a2:df:38:33:57:28:
6e:0f:77:5d:6d:9a:ed:6f:b8:11:e0:5c:52:3a:c3:
eb:a4:f7:84:9e:67:70:26:05:66:0a:1a:43:53:14:
67:16:ba:a5:dd:6a:72:1b:b0:c9:c9:24:0d:64:92:
0a:0b:5b:e9:16:11:ce:e7:29:41:c6:0a:4c:66:10:
c7:79:f9:5f:e2:de:8f:b4:c7:6d:b6:98:6c:1f:b7:
83:1f:c8:15:25:07:f5:24:8f:78:28:35:f3:78:99:
e4:4e:28:f3:85:63:e2:74:44:80:82:a5:82:2f:4a:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:F1:D6:50:97:A4:95:73:4E:A7:7F:DD:11:93:DC:74:DA:6B:BE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:20d::/48
Signature Algorithm: sha256WithRSAEncryption
b3:09:39:ef:51:9f:e5:1e:37:96:f7:c4:7a:0f:fb:e9:15:79:
75:c8:77:17:6d:97:06:be:ee:83:c5:e0:7c:e9:73:22:a2:61:
87:86:5b:f7:73:73:6a:fa:73:b4:4d:89:be:79:00:7c:2f:e5:
7f:01:1a:2c:00:69:18:c6:d3:6d:12:10:99:09:84:a9:8d:9c:
be:89:b8:d6:91:6c:7a:b6:59:f9:6f:9b:b9:01:a2:bc:fb:78:
a8:d6:12:12:f5:5a:df:b9:29:5a:d1:15:8d:00:27:03:8a:06:
81:1c:4a:2d:08:ec:fd:69:ea:47:a3:e0:da:65:0a:19:a6:2e:
52:d2:13:94:c3:cf:8f:3e:4e:78:78:45:7b:44:3c:3e:b2:8c:
4e:ff:9e:d6:98:ce:ef:81:75:80:eb:33:1d:1d:eb:7a:20:20:
b7:75:b0:88:f7:47:fd:10:a7:ea:98:42:ad:b6:64:11:f7:82:
21:50:d3:69:0b:3a:61:47:fa:a7:58:be:51:ff:8b:ae:c4:a5:
e8:ad:15:c3:ae:2f:be:92:c9:c9:f1:a5:49:9a:6b:ff:ca:92:
b2:9b:27:34:eb:b5:90:7e:03:52:b4:67:be:1c:08:08:ca:3d:
47:9a:65:f6:f5:fe:a2:f4:3c:d4:c2:ac:15:e8:df:01:a4:77:
5e:19:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org