Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3232613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: t6JOLLg+i0J4OGf97LkPE+Mj0GNCe5wIQmsua4qZq1A=
Subject key identifier: 82:1A:8A:21:AC:E2:8E:03:E2:39:52:FE:CF:C1:CC:AB:8B:C4:D6:96
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0EBBF686DBB6EB22FAFC77608D5740A16517324E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:52 +0000
ROA not before: Mon 26 Sep 2022 07:56:52 +0000
ROA not after: Mon 25 Sep 2023 08:01:52 +0000
asID: 59282
IP address blocks: 2400:d680:22a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bb:f6:86:db:b6:eb:22:fa:fc:77:60:8d:57:40:a1:65:17:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:52 2022 GMT
Not After : Sep 25 08:01:52 2023 GMT
Subject: CN=821A8A21ACE28E03E23952FECFC1CCAB8BC4D696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:03:7e:54:85:78:a1:f3:19:d0:a7:78:ed:
07:d8:f8:d5:18:62:7e:51:d7:53:fb:3e:ee:c4:e2:
f4:92:5e:0b:dd:01:a4:cd:49:fb:3f:d0:ba:4a:13:
b6:b1:4b:5f:27:38:5d:ff:7d:a4:39:b9:61:df:d7:
9f:6b:f3:3d:1e:13:ff:f0:6c:48:8f:9f:9e:ef:f1:
28:de:e4:d6:eb:a5:3a:f7:fd:03:a3:db:f8:7f:55:
d1:50:10:06:c0:2a:ca:bb:17:5d:33:93:a2:37:ee:
10:24:1c:28:3a:79:65:ef:0f:16:fe:03:61:36:e1:
43:b4:da:a7:16:b3:1c:cd:68:52:6a:91:fe:fd:a0:
e7:44:9b:49:fe:7c:38:70:74:f8:7e:b9:a6:16:01:
a1:13:e3:81:95:9c:e8:a6:02:94:78:15:5d:07:49:
62:07:b3:f2:b0:66:8a:21:78:cb:3a:75:47:d5:52:
8b:68:d5:eb:8c:8d:6c:69:ad:6a:ce:ef:64:ca:cb:
e6:fb:f0:44:ab:27:9d:43:9a:57:52:6d:9e:96:32:
2f:86:29:c3:85:ca:32:e5:39:f6:9b:63:49:65:c2:
4f:fd:7d:08:a4:4b:c4:49:7a:b2:53:bf:ef:76:84:
c0:94:6e:06:28:6f:47:18:79:a9:fe:2b:cb:e4:b6:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:8A:21:AC:E2:8E:03:E2:39:52:FE:CF:C1:CC:AB:8B:C4:D6:96
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:22a::/48
Signature Algorithm: sha256WithRSAEncryption
38:07:af:0e:91:b2:c4:87:42:05:34:fe:77:84:a2:f3:b9:11:
47:3f:ef:b8:d4:ca:76:e5:84:2f:b0:dd:f9:ff:d2:79:48:89:
8f:93:fb:0a:7b:83:f9:a8:56:47:fa:3b:60:d6:5f:72:32:c6:
21:3d:71:f8:e8:b4:bd:80:87:10:77:3c:cb:bf:e5:25:e7:47:
d8:cf:8e:d6:a1:22:d6:5f:11:3d:ef:53:bd:d3:85:5c:35:56:
e8:0a:87:ea:bc:7f:f6:e9:5a:71:a2:28:5d:b8:a2:f5:dc:18:
c8:f8:a1:21:cf:45:23:de:23:6d:e5:2a:26:81:61:d6:0d:98:
c5:b7:9d:b4:d0:0d:78:06:b0:f9:11:b5:e4:56:d3:e9:bf:23:
ad:f1:45:f7:fa:1c:ed:a3:4a:77:24:da:91:f8:ec:5b:04:ee:
0f:76:36:24:58:6f:bb:ce:da:44:c2:c2:6e:9f:1f:4b:72:4f:
f4:da:b8:cc:44:c6:55:7e:bf:cf:6a:3c:37:1a:85:a0:e5:9c:
9c:ae:96:2f:13:7c:62:74:c4:b4:41:c5:c2:f5:61:4e:1c:53:
08:58:07:ce:3f:24:09:1f:74:ed:55:c1:1b:39:12:4b:7c:27:
13:77:2c:0d:28:0e:db:fd:57:47:76:91:e1:dd:fe:35:23:5e:
5c:5f:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org