Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3232393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: TTi+Wc6AtW4Nq1ou2F0TGNWk/yShwuf/xPEqH/Ba3DU=
Subject key identifier: C8:3E:3C:71:D1:1A:67:72:49:7E:03:66:A0:03:30:1A:FB:E6:04:A5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78E2A2F92AA5C5BA4EB49B5C514081D17CB6009E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:22 +0000
ROA not before: Mon 26 Sep 2022 07:56:22 +0000
ROA not after: Mon 25 Sep 2023 08:01:22 +0000
asID: 59282
IP address blocks: 2400:d680:229::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e2:a2:f9:2a:a5:c5:ba:4e:b4:9b:5c:51:40:81:d1:7c:b6:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:22 2022 GMT
Not After : Sep 25 08:01:22 2023 GMT
Subject: CN=C83E3C71D11A6772497E0366A003301AFBE604A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:d3:e6:5a:a2:98:b6:68:90:d1:45:33:a2:
e9:de:72:2d:03:1c:52:97:5e:50:77:a8:2e:55:0f:
40:26:bf:0d:a5:f9:01:7d:a8:e7:d0:7d:b0:cf:a0:
ea:85:46:b3:18:bd:05:80:89:68:c3:89:4d:81:25:
15:02:23:37:e6:cf:2d:8f:ee:42:7b:d1:9f:e4:f0:
13:9e:23:71:70:20:bb:49:5f:5c:f4:e5:e4:c0:af:
c0:e7:7a:e6:8f:68:79:94:7a:53:4b:18:dd:5e:83:
16:65:08:81:dc:a0:d0:fd:dd:3f:c1:f0:31:03:d9:
eb:50:b4:fc:9c:ef:a5:72:3c:4b:4c:6f:cd:03:c8:
43:96:3f:74:63:2c:c6:d1:bf:9f:09:a4:3f:16:c6:
28:26:d1:f9:f7:16:2a:f7:a7:66:a2:83:18:ef:e3:
46:b4:1a:bd:83:c3:6b:fe:8e:b3:f7:ef:54:cf:20:
da:3a:7c:e9:90:8e:19:ab:ed:5d:ff:ef:c3:43:cc:
7b:4d:8c:de:ab:f0:0e:48:17:23:7c:a5:39:23:1a:
65:7a:22:ba:3a:90:63:5b:96:9b:3e:47:4e:00:28:
08:24:de:69:0e:75:dd:d6:2f:5d:b4:63:68:f1:09:
03:f8:d6:8a:f8:83:24:5b:c6:43:a4:27:34:1f:4f:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:3C:71:D1:1A:67:72:49:7E:03:66:A0:03:30:1A:FB:E6:04:A5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:229::/48
Signature Algorithm: sha256WithRSAEncryption
69:f1:58:50:03:95:93:ef:7e:78:5c:5c:7e:61:75:84:ee:f2:
d4:5f:3a:da:cb:5a:1c:5b:5a:03:be:5c:d9:b2:b1:c3:2d:08:
97:cc:6c:09:ce:14:0e:ad:bf:be:37:e0:74:a7:c8:98:5b:f0:
3b:27:54:09:32:e7:53:39:23:cf:6d:f7:b6:a4:63:1e:7a:2a:
a5:ea:a7:44:96:51:f4:ea:7d:64:26:29:ce:48:c2:a2:ba:57:
f2:f4:08:b4:13:fa:a8:d1:c6:bc:65:2c:d3:71:85:09:7a:9d:
f5:68:77:e2:6e:7a:96:ac:c3:a8:c1:78:c1:99:d7:f2:04:4a:
26:a5:1c:36:93:cb:b0:5e:21:66:bc:a1:e9:33:d6:33:d2:fc:
ea:83:4c:a2:8f:c5:5c:63:2a:46:6c:bb:6b:ce:ca:42:76:7a:
e9:e6:1a:86:2a:9b:40:d5:6e:48:b0:4f:f0:d0:2d:f5:f1:b9:
6f:4e:d0:bf:d4:4a:2a:16:db:6f:69:a7:04:38:b2:ef:e0:f2:
63:22:8f:1e:62:54:5a:d3:28:29:59:de:8f:79:12:14:40:37:
41:ff:91:05:80:18:17:6b:7c:aa:f1:e4:be:e8:43:72:40:2d:
33:4d:93:3f:81:83:00:d3:6c:55:57:73:1c:d7:bb:26:da:ec:
e3:fa:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org