Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3233373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: trdCVXcNWJWjvQMEll8gWzNukgz4BZGjSg6RWymycmI=
Subject key identifier: BF:12:34:C1:21:A7:7F:82:E1:BD:E0:67:D1:52:9A:8E:A0:ED:9F:D6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3C230464CE0F107CCC30A91469A546FD79DF734C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:12 +0000
ROA not before: Mon 26 Sep 2022 07:57:12 +0000
ROA not after: Mon 25 Sep 2023 08:02:12 +0000
asID: 59282
IP address blocks: 2400:d680:237::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:23:04:64:ce:0f:10:7c:cc:30:a9:14:69:a5:46:fd:79:df:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:12 2022 GMT
Not After : Sep 25 08:02:12 2023 GMT
Subject: CN=BF1234C121A77F82E1BDE067D1529A8EA0ED9FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:94:71:48:41:75:27:64:05:2d:bc:92:64:
8b:29:a3:c0:25:46:53:ce:db:ce:ce:c1:5e:99:86:
e6:6e:1d:98:bd:57:24:ab:84:85:9f:04:68:6e:44:
c9:cf:63:ba:3d:73:4f:2e:ba:9d:96:78:b1:dc:05:
e6:48:dd:e9:04:d6:6a:b1:78:e9:72:50:ef:99:fa:
29:b5:41:25:41:5b:af:f1:48:3d:67:5c:7f:c4:9a:
d6:40:cc:10:1b:10:c9:2e:25:ef:c2:05:5a:31:e0:
08:f3:05:6b:c2:48:6d:24:4e:c2:32:47:8e:e3:21:
31:f0:78:4f:a2:09:de:72:c2:bc:58:2e:53:aa:1a:
ea:39:4a:5f:9f:49:90:3b:6b:71:0b:74:1b:61:1e:
eb:1c:43:23:be:f1:4e:05:4d:54:88:d8:ee:e2:42:
35:4a:50:4f:29:fe:8f:e8:9c:1a:28:4e:03:f3:4f:
24:f0:74:f4:6b:f8:3f:89:9a:33:c7:51:46:69:32:
e7:db:5f:ba:05:7f:a0:10:32:1d:a4:e8:25:79:39:
ff:a4:b5:36:30:20:e9:9d:2d:2a:da:8a:a0:ca:2e:
35:1b:bc:19:d5:b4:13:0d:a8:a1:bc:3c:3c:27:f8:
23:b3:f5:1c:18:83:fc:08:f7:a6:a9:74:91:24:b4:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:34:C1:21:A7:7F:82:E1:BD:E0:67:D1:52:9A:8E:A0:ED:9F:D6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:237::/48
Signature Algorithm: sha256WithRSAEncryption
90:74:87:2d:92:80:4e:2f:11:6e:a5:bc:fc:c0:57:8d:df:a9:
b2:87:40:78:d1:6a:0f:6e:72:f9:0f:38:0e:5e:67:7a:c3:b9:
1d:76:bb:77:e0:05:25:92:a4:7b:03:b0:e3:64:88:1a:0e:b6:
6c:ac:fc:db:88:66:e2:53:17:f9:dc:55:7c:37:4f:ad:7d:6e:
e8:31:c8:53:8c:6b:22:4c:ce:9c:ec:45:27:15:b3:68:f4:57:
45:d0:fb:de:74:8f:f2:c2:87:5c:11:88:77:5f:d2:c7:08:82:
e2:ec:e2:f1:88:00:e7:9c:eb:f8:6f:7b:5f:a6:91:0e:6e:fa:
4c:e0:1f:3b:65:0c:f6:da:d6:41:43:1e:4f:c9:81:53:0b:ea:
45:13:77:4e:5e:b3:43:ba:4a:be:e8:a9:09:36:d4:42:05:05:
6c:06:ae:3e:0d:d3:02:44:6d:80:52:8e:52:ac:eb:9c:68:39:
01:a5:8b:f5:22:90:71:3c:f2:20:ab:5c:8d:68:aa:26:52:de:
3b:a1:81:b9:94:69:58:35:11:8f:d7:6d:87:70:75:e3:96:b9:
80:27:58:52:8e:25:0b:35:b3:52:88:f0:63:6f:e1:aa:05:48:
e1:cd:16:e9:3c:b6:73:36:ad:10:d0:fa:42:9b:1e:be:2b:e4:
39:92:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org