Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3234633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0+I6bJ1A8fNdnlTkzrjQ21w7JyXfqLGTgIXbzxsvEyE=
Subject key identifier: A4:FC:90:D8:3A:F0:71:45:0E:2D:F4:45:B1:59:E3:9C:8D:6B:00:22
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7402B434359F1CF38D1150EED00628E0457E7080
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:34 +0000
ROA not before: Mon 26 Sep 2022 09:55:34 +0000
ROA not after: Mon 25 Sep 2023 10:00:34 +0000
asID: 59282
IP address blocks: 2400:d680:24c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:02:b4:34:35:9f:1c:f3:8d:11:50:ee:d0:06:28:e0:45:7e:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:34 2022 GMT
Not After : Sep 25 10:00:34 2023 GMT
Subject: CN=A4FC90D83AF071450E2DF445B159E39C8D6B0022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:3a:53:fe:44:15:28:1c:bf:81:16:46:21:
75:8c:53:7a:03:b6:f9:9b:2b:41:4d:ff:bc:d3:94:
f0:99:b8:af:2c:5d:a2:38:a1:83:2e:69:e2:ec:e6:
de:f8:2f:83:89:22:a7:0a:a2:76:6b:f5:63:4a:a9:
00:d2:09:ec:61:4e:a5:07:bb:e2:51:07:57:84:67:
22:a8:7d:04:40:88:0c:f3:d2:6d:87:7d:fc:0e:31:
4f:92:ca:f9:2b:5b:00:b8:40:a5:39:7e:86:f8:96:
7a:2f:0f:4f:c3:91:1c:e4:cd:7d:42:6e:89:91:6b:
47:6a:f8:e5:4a:50:84:0d:8b:cc:92:3d:91:77:0f:
31:6a:40:a6:82:b6:94:15:53:fb:27:f5:0c:2b:8a:
cf:24:59:52:99:9b:cd:42:fc:32:4e:e4:86:6e:25:
05:df:31:55:64:9e:3c:61:d0:83:03:c8:f2:cb:59:
98:e5:3b:7d:ed:13:9a:e6:87:4a:87:fc:5f:16:5e:
e4:eb:97:e6:3e:2f:3b:36:4b:87:37:03:35:96:13:
61:1d:e8:84:6d:e8:ef:90:e4:a1:e8:28:e2:7f:02:
d6:34:d6:06:16:ab:3d:ea:18:6c:26:2b:2d:57:aa:
6a:1c:64:dc:85:0e:a5:39:81:f8:f9:0b:ec:0c:88:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:90:D8:3A:F0:71:45:0E:2D:F4:45:B1:59:E3:9C:8D:6B:00:22
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3234633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:24c::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c0:09:c8:8e:62:1d:0a:84:24:09:17:5e:40:11:44:ed:6b:
62:d2:9e:3b:ea:4f:c0:64:b8:de:bf:ba:f0:f8:c2:1e:8f:7a:
6c:3e:99:dd:c1:85:82:65:f9:ad:71:91:63:a8:e5:e4:0e:3e:
76:ec:c8:cc:80:ee:cf:89:bc:b1:c9:6f:98:e6:5f:13:25:92:
31:4f:58:54:e4:a2:cb:6d:c2:e3:0b:15:05:24:21:e3:db:61:
42:3c:1a:f7:54:82:67:04:d3:8f:dd:b6:56:18:e5:0d:ac:51:
b1:2f:0c:fc:fe:f0:af:b1:2d:81:51:03:20:d9:16:0f:50:d0:
49:72:41:d8:ea:10:41:44:5a:dc:f9:f0:59:4f:24:0a:70:62:
fe:e3:30:f8:ad:41:38:a8:41:a1:6a:e9:e1:e6:7c:08:c7:4d:
64:8e:b5:05:87:06:1f:4a:3f:1f:36:48:13:9c:08:b9:e4:71:
a4:89:49:00:4f:44:d1:65:25:77:74:99:f8:d1:47:aa:95:dc:
c7:5a:ca:2e:03:27:bb:7e:48:99:52:cc:fe:fb:ea:0d:ba:06:
04:16:ec:06:0b:86:d0:88:56:a0:39:4c:2e:2b:19:f2:2c:36:
b3:11:85:33:f6:16:ce:e0:60:1e:e2:38:5c:f7:ec:14:2a:0f:
d5:57:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org