Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3231353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: d/Z02FeUgqHJ/1Ox5EdFDJGiPbI9ooixpvVPEM2cBnY=
Subject key identifier: 6A:1A:C9:DE:CC:68:4E:25:DF:9E:0E:35:16:66:22:20:87:97:A7:B1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 31BB25AE079EE150BAE0444C1AE635AB85CA0FE2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:54 +0000
ROA not before: Mon 26 Sep 2022 07:56:54 +0000
ROA not after: Mon 25 Sep 2023 08:01:54 +0000
asID: 59282
IP address blocks: 2400:d680:215::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bb:25:ae:07:9e:e1:50:ba:e0:44:4c:1a:e6:35:ab:85:ca:0f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:54 2022 GMT
Not After : Sep 25 08:01:54 2023 GMT
Subject: CN=6A1AC9DECC684E25DF9E0E35166622208797A7B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:e7:77:c4:a8:52:22:54:db:ce:08:b8:07:
4e:19:4e:7b:6b:27:15:a4:13:20:e3:89:4c:09:00:
37:f8:d4:fc:45:49:ba:ec:79:85:72:9b:b4:e0:78:
d3:34:8e:1c:62:29:65:10:94:77:79:6a:f1:01:45:
cb:d7:74:12:fd:65:9d:c8:cb:01:c4:be:da:a7:10:
6b:72:d8:42:28:62:6a:ec:51:0d:0b:a2:6c:1b:d2:
b9:e6:d3:60:f2:ff:66:c0:80:13:77:35:a2:71:38:
29:4a:d6:b3:c0:a9:be:9e:07:b7:58:d9:e8:9f:03:
3e:0c:eb:b7:82:4e:d7:5f:0e:8d:74:21:03:04:a3:
e8:70:ea:6b:4f:e3:3d:86:10:22:03:65:8d:93:6f:
d1:91:dc:4c:58:e6:73:ab:b4:70:ee:b2:c6:11:ae:
b8:a0:5a:ec:94:64:95:fb:48:b0:c0:a8:59:e5:44:
d6:77:0d:13:11:7c:16:63:4f:c1:a0:89:6a:51:b7:
e2:bd:15:75:ef:76:aa:2c:de:89:b8:9a:ff:a4:26:
a6:20:04:c7:36:16:80:30:b9:90:01:96:e8:14:b1:
e2:7c:fd:98:ba:40:aa:b7:34:cc:aa:0c:37:d9:f4:
5b:e2:1c:c5:92:73:a2:67:be:ed:26:a0:fd:2d:d7:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1A:C9:DE:CC:68:4E:25:DF:9E:0E:35:16:66:22:20:87:97:A7:B1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3231353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:215::/48
Signature Algorithm: sha256WithRSAEncryption
77:b2:e2:79:ea:36:68:4f:d2:40:c8:3f:1b:87:72:4c:4d:28:
4b:91:e3:6d:f1:e7:dc:d7:38:cc:2c:67:da:9e:04:0b:ec:de:
eb:ea:d8:c8:02:19:7a:66:df:3a:6a:71:60:ec:8e:e9:38:28:
48:c2:40:19:38:7e:2d:06:63:72:94:e7:ae:05:13:01:cd:f1:
d6:33:c4:59:d4:56:a0:96:a6:2e:ce:36:37:c9:a1:ae:eb:9e:
e8:b1:39:ce:5d:a8:6e:e2:8a:03:9e:e1:14:b2:e5:c0:63:fa:
2d:7a:66:e1:35:2d:c4:e7:11:9f:2d:4f:fe:63:b5:ba:82:2d:
67:d1:c7:0c:0e:c8:4a:c8:38:71:1c:0f:23:ec:56:7d:f2:bc:
14:87:7d:81:e1:71:dd:1a:32:ed:d6:1b:91:fc:93:a8:06:9c:
36:4f:60:ef:c2:07:ab:18:9c:07:10:b9:ef:dc:ab:00:44:21:
9c:23:da:1a:2e:52:43:95:e2:87:3f:55:9f:7f:b4:3e:bb:39:
00:bc:e6:31:a4:17:b7:ef:8d:c9:db:13:fc:c3:18:e8:5b:cf:
a9:ce:45:ed:26:b3:2b:8b:83:e3:b6:a5:c3:9b:ca:15:32:ec:
d4:e2:79:48:ab:51:3e:62:ab:0c:a6:d5:20:d8:96:a2:16:1a:
aa:7e:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org