Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3234373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: tg9QbTjJ9VfI0bwtrxY8BbtfvIvBlKP99QUvmlF5gVE=
Subject key identifier: F5:A2:AA:94:53:92:5F:87:F1:86:5F:1F:DC:76:C4:E9:1E:DE:A9:F4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1ED8CA0E255206CBEEB160471BA59711D3F070A1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:25 +0000
ROA not before: Mon 26 Sep 2022 09:55:25 +0000
ROA not after: Mon 25 Sep 2023 10:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:247::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d8:ca:0e:25:52:06:cb:ee:b1:60:47:1b:a5:97:11:d3:f0:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:25 2022 GMT
Not After : Sep 25 10:00:25 2023 GMT
Subject: CN=F5A2AA9453925F87F1865F1FDC76C4E91EDEA9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:78:57:cd:3d:06:56:b4:ed:a6:f0:a6:05:
58:11:e4:0b:be:aa:08:d1:63:9f:15:69:8f:e0:8d:
78:b5:15:b3:7f:45:ab:73:66:50:9b:ba:c0:4a:5b:
aa:12:50:3a:9d:12:60:cf:b7:4c:6b:b7:26:8b:30:
c1:e8:ce:04:41:13:1b:aa:d6:a4:4f:36:83:12:79:
90:ae:8a:16:18:08:c1:e1:3b:7c:c7:50:fb:3c:12:
73:9b:3e:b5:bb:fe:cd:99:db:9c:32:fd:cc:0d:37:
e5:62:e0:80:94:de:a1:ec:66:8d:82:0d:63:c1:16:
43:81:0d:32:26:48:c0:a8:9c:c6:5a:62:97:d2:35:
f6:5d:f6:29:bc:c6:5f:e8:fa:83:85:ad:fe:b0:77:
e3:23:3d:1a:6a:06:e2:13:59:db:dd:d2:51:e4:26:
b2:79:4f:44:48:8c:70:e1:21:80:89:3c:86:9d:28:
54:34:30:66:0c:4f:3e:ba:0a:7b:37:75:12:b8:bf:
ea:2b:c5:15:ec:4a:d1:62:79:5e:90:cd:28:b0:c2:
e8:7a:dd:17:69:f5:4c:1a:f1:5b:3c:b4:4e:d6:63:
0c:ac:87:1c:53:f0:6a:0c:d7:a2:db:0f:ac:ed:80:
02:53:0f:66:23:a0:f8:60:ec:a7:50:f2:01:12:70:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:AA:94:53:92:5F:87:F1:86:5F:1F:DC:76:C4:E9:1E:DE:A9:F4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:247::/48
Signature Algorithm: sha256WithRSAEncryption
11:0d:af:cf:b4:a6:06:5e:fc:4c:7c:77:09:57:44:0b:4e:98:
e1:ea:77:dd:45:54:ac:c8:6d:11:f3:a5:7d:cf:bb:79:3f:f3:
6a:b2:4f:4a:4b:d5:c4:05:1a:17:31:c6:dd:23:b6:9f:76:27:
1b:cd:24:c0:af:fc:45:8c:58:92:df:a8:7b:74:ce:2a:29:4a:
4e:d8:2e:db:13:87:4c:af:9e:1a:09:f7:4d:da:0c:8b:88:f3:
5e:65:0e:33:ea:3f:2d:a7:02:d4:a8:a6:c9:11:60:8b:85:2d:
fb:d1:e2:f7:d9:46:84:8f:c3:97:0b:1d:82:51:c2:56:73:55:
47:65:47:54:33:51:1d:7e:27:f7:9d:7c:8f:ad:65:60:ee:26:
d3:ce:06:a1:4d:be:dd:c0:07:3c:e6:40:2f:d4:f0:8c:39:c4:
aa:55:60:65:da:50:94:10:be:8f:3f:3d:f8:6a:77:6f:83:f7:
7d:56:33:28:48:30:e9:08:1f:e7:b1:5f:57:67:a5:d4:06:fc:
6a:fd:5f:69:fb:ed:9a:57:3e:05:1f:5e:65:c3:81:f4:29:71:
b3:5e:c2:0a:e3:e5:53:03:99:0e:01:d3:27:c7:d6:94:c0:cf:
5d:bb:18:f5:76:a2:5f:aa:2f:f6:8d:dd:9f:47:a1:44:d5:6c:
ec:67:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org