Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3231343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: F6HsTH3ZAAB/a6OF9XtuK+k/MeS8vY6bFCjlEy+cYew=
Subject key identifier: 49:D8:B7:BC:DA:2A:CA:52:9A:E9:33:5A:08:B5:3E:BE:6D:E5:B6:1D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 328D12C86588C824352080E28FDF13A7B6C6C2B7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:14 +0000
ROA not before: Mon 26 Sep 2022 07:57:14 +0000
ROA not after: Mon 25 Sep 2023 08:02:14 +0000
asID: 59282
IP address blocks: 2400:d680:214::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8d:12:c8:65:88:c8:24:35:20:80:e2:8f:df:13:a7:b6:c6:c2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:14 2022 GMT
Not After : Sep 25 08:02:14 2023 GMT
Subject: CN=49D8B7BCDA2ACA529AE9335A08B53EBE6DE5B61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:d8:85:a0:d7:9f:f2:23:55:8e:41:50:03:
34:cd:50:ae:3d:32:ea:88:42:60:fb:ad:2a:8a:b9:
c3:90:74:5d:13:05:88:cf:48:cf:bc:24:01:54:d2:
8f:a3:0f:b8:a6:78:01:46:60:14:fb:84:aa:f0:7e:
f8:14:15:b2:ba:1a:38:05:b1:29:3c:1f:34:a9:04:
cc:d3:d1:07:3c:f1:90:78:e2:b7:53:cb:d8:87:4e:
6e:67:fd:94:e7:f9:06:74:a1:af:b0:08:72:2d:c0:
7d:55:80:83:1d:45:4b:e2:44:15:83:56:97:6a:52:
fe:39:d3:3c:a4:16:18:21:31:d7:17:92:6b:6d:46:
1c:20:c1:fc:7b:c5:9e:62:ec:1f:b1:80:fc:b1:a2:
e2:eb:a1:12:66:8a:66:eb:2d:3d:47:43:90:a7:62:
9c:93:45:a4:94:8e:bb:7e:43:30:de:ad:a8:47:6c:
49:3f:ec:56:e9:90:c2:dd:60:b0:66:68:41:07:97:
61:a2:85:56:2c:e9:2c:30:ef:22:9c:b9:85:4b:dd:
40:e1:92:37:a6:75:c5:de:ab:70:98:77:dc:68:ce:
a2:8e:40:4a:bf:e7:6f:95:1d:49:25:d8:81:64:5a:
7b:8a:94:04:cc:be:38:e7:d1:ac:18:4b:51:18:7e:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:B7:BC:DA:2A:CA:52:9A:E9:33:5A:08:B5:3E:BE:6D:E5:B6:1D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:214::/48
Signature Algorithm: sha256WithRSAEncryption
95:3b:14:2d:8f:77:7e:5d:98:16:7a:83:4d:f4:ac:52:15:56:
c6:ef:e3:be:fb:d3:ca:c4:b8:59:e5:bb:19:05:7f:8e:2a:13:
cb:4b:61:1d:0c:d9:f0:a0:67:e7:3a:76:d3:0f:b7:09:24:15:
c7:9c:63:c4:ab:2f:7a:12:f5:7c:df:e8:81:e0:c7:03:b8:70:
24:21:8d:37:58:9d:31:05:71:7f:d2:f9:1c:a3:42:61:c0:96:
6d:46:94:1e:e9:d1:9f:c7:14:6a:e6:6e:ad:13:07:25:57:32:
81:f4:99:01:c6:39:88:a3:ee:07:c1:4f:81:0b:f6:bc:31:96:
8c:f7:2a:ea:4c:da:81:d2:bf:f0:38:b1:18:c6:84:ca:ef:13:
cd:bb:65:1d:01:0f:3c:f8:88:be:3a:f4:75:50:40:a0:0e:bf:
9a:12:ac:93:a0:54:1f:c7:5e:20:c8:20:d7:d2:d7:07:9f:e7:
21:bb:f8:98:aa:9c:67:ae:c0:14:dc:ae:0e:f3:a2:3f:7f:ef:
16:a4:25:a3:31:f0:ee:3e:a4:f9:ff:51:d2:de:e0:0e:26:e5:
96:2d:7c:f4:b8:0b:db:bd:20:4b:db:51:d8:93:17:58:c3:c9:
e3:42:b4:28:34:5a:4d:d8:0e:d4:b0:b2:b9:45:fc:18:73:30:
d7:13:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org