Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3233393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 23XU2YELG6sVx52sOYZY/f+XpdXTRvRAHcCuIWPo1uQ=
Subject key identifier: 80:CC:60:4B:87:16:C2:A2:34:9B:67:2E:A3:D5:0C:6F:14:87:E1:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 23E8DFB19435B1CB3E8949D0BDDC618A8F91B179
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:48 +0000
ROA not before: Mon 26 Sep 2022 07:56:48 +0000
ROA not after: Mon 25 Sep 2023 08:01:48 +0000
asID: 59282
IP address blocks: 2400:d680:239::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e8:df:b1:94:35:b1:cb:3e:89:49:d0:bd:dc:61:8a:8f:91:b1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:48 2022 GMT
Not After : Sep 25 08:01:48 2023 GMT
Subject: CN=80CC604B8716C2A2349B672EA3D50C6F1487E107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:19:20:ca:e4:21:d4:45:f2:20:a8:0d:43:
77:75:81:2f:9a:66:1a:ad:ff:e1:6e:e2:6d:ad:13:
00:5d:22:64:fc:93:d2:87:49:66:1b:0f:9b:7e:b6:
10:c2:e0:93:82:27:3c:a3:88:d3:31:ea:57:9d:9b:
e3:05:f2:19:a4:15:05:ae:4f:65:00:c5:6f:3d:49:
25:5c:f9:80:6b:8a:ec:ac:39:c3:1f:df:bf:ae:45:
9a:75:08:c5:be:fc:c9:bf:a5:c4:39:8b:ae:7d:ad:
30:85:fb:a2:2a:4b:0a:74:74:69:4d:58:9e:fe:6b:
db:9b:8f:eb:2c:dd:54:d7:38:ff:a4:2b:f8:5f:fa:
0e:81:a4:0e:4c:5d:02:eb:6f:25:63:80:e8:ac:7f:
87:51:1b:84:c8:09:b2:0b:e1:4e:00:ca:18:ca:09:
88:d5:9f:e7:c8:14:8a:74:16:02:9c:6d:88:c3:5c:
d5:0e:44:3d:50:84:be:6b:bb:60:04:6f:7c:ad:8e:
d1:4d:7f:b5:5c:9e:23:bb:8f:14:b3:0f:5a:e5:f8:
fc:2c:f4:60:3e:c6:5f:a0:13:dc:76:09:bf:4c:63:
e3:a4:7d:e6:92:b6:77:02:bc:9f:a2:76:f2:4b:56:
87:9f:0d:5c:95:a4:13:39:88:d8:4c:92:a6:e6:18:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:60:4B:87:16:C2:A2:34:9B:67:2E:A3:D5:0C:6F:14:87:E1:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:239::/48
Signature Algorithm: sha256WithRSAEncryption
40:25:95:42:c4:5a:7f:f0:1e:65:79:70:3b:5c:94:58:86:67:
ce:60:e2:9d:69:f8:41:63:33:33:f7:51:07:04:70:b1:1a:c0:
59:8a:62:f8:81:c0:52:87:f5:45:cc:c0:fc:39:e2:94:a1:8e:
54:76:26:13:68:42:37:a8:b1:f9:23:d0:64:3d:b8:f0:1e:ff:
ab:02:7d:dd:59:28:96:a1:d8:16:4c:7c:24:93:1b:14:03:04:
eb:62:d0:0d:71:84:5c:32:6c:07:b0:fb:8a:83:1d:a6:b3:4f:
3c:22:5f:7e:03:5f:cf:91:1d:a1:18:52:37:ea:be:80:3f:d0:
07:10:d2:cb:d1:5d:8f:60:75:9b:2e:43:59:ee:c4:1c:c1:7d:
ab:20:95:89:69:25:37:8a:de:d7:9d:dc:18:a3:39:74:31:25:
a3:d7:5b:33:b6:ce:67:2e:65:cf:73:59:05:82:fe:ac:32:76:
75:59:f2:b0:57:be:51:43:bb:e8:9f:2e:5a:90:ca:b7:04:58:
c8:28:55:d3:82:9f:3f:12:cc:22:59:dd:33:e6:14:b9:f4:d0:
e4:f6:2d:e6:73:37:ac:c9:67:85:93:09:cc:40:17:4e:41:b3:
b0:e0:ae:57:56:cd:42:68:52:7e:8a:85:53:32:89:48:a8:4b:
97:9e:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org