Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: i7stgJpxE9LeKolI8flwULsZ3kDHUBIM0+26uhqBAvo=
Subject key identifier: 8B:45:C7:49:35:CC:9C:1D:2C:AF:84:75:B5:40:2A:77:29:93:24:91
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 05BF761C138F248EE5B4A0146B1926E57312D76C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:08 +0000
ROA not before: Mon 26 Sep 2022 09:55:08 +0000
ROA not after: Mon 25 Sep 2023 10:00:08 +0000
asID: 59282
IP address blocks: 2400:d680:254::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:bf:76:1c:13:8f:24:8e:e5:b4:a0:14:6b:19:26:e5:73:12:d7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:08 2022 GMT
Not After : Sep 25 10:00:08 2023 GMT
Subject: CN=8B45C74935CC9C1D2CAF8475B5402A7729932491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:ae:d8:c1:5c:d7:6d:f5:7d:7b:db:a8:12:
3b:50:ae:f5:a8:28:92:db:63:2d:bb:60:f0:96:d3:
10:45:a6:24:89:64:ba:2d:b3:be:20:58:c5:7c:55:
20:ba:5b:09:72:15:18:8e:73:a6:fe:68:ed:2e:5c:
f8:dd:5b:16:6d:99:29:22:7c:f4:aa:c0:0f:79:be:
af:14:42:cc:c3:d5:be:99:0d:cb:68:3c:64:10:f4:
bb:b1:14:a7:ec:e4:0a:19:d7:f8:ed:64:5c:bc:1e:
86:21:a4:93:6d:bf:b7:2f:8d:c0:a3:53:48:cc:f9:
b0:5f:fd:11:95:c8:0e:9e:56:9f:c6:bf:0d:8d:85:
35:87:aa:97:ec:a8:03:6c:67:4e:00:26:2e:04:86:
d4:3d:50:d5:18:82:28:12:58:68:b0:4f:e1:91:69:
16:06:a6:a8:08:92:56:5f:eb:a8:69:4b:99:72:74:
89:6f:d6:64:ad:7b:c8:5d:ec:19:f1:5e:43:c1:f9:
0f:b4:1a:a6:7e:5a:22:88:e4:0a:ae:5c:2f:48:56:
b9:47:24:67:a7:a8:ab:3e:36:ba:b4:af:99:6a:9e:
97:01:83:99:1b:b6:fc:19:11:bc:76:2b:a7:21:b8:
be:e4:49:0a:3e:b8:54:f8:6b:75:48:76:85:95:6d:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:C7:49:35:CC:9C:1D:2C:AF:84:75:B5:40:2A:77:29:93:24:91
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:254::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f8:12:b6:89:9d:7e:7d:d5:c2:66:c4:84:f6:8e:ea:7a:a1:
1b:a9:97:10:db:57:42:60:d0:d7:b9:a0:aa:9a:0e:d1:9e:71:
83:51:53:b7:0c:0e:e0:55:81:e1:3c:ba:b6:e9:06:f5:65:41:
b8:56:22:56:eb:0a:73:31:e6:18:20:4f:2d:6d:c6:11:6b:b8:
5e:d5:66:d2:56:d1:89:05:8e:f2:a1:05:1c:3c:7f:e7:08:59:
ef:de:e8:53:94:3b:0c:48:20:2a:57:d4:c0:90:b2:35:e6:07:
96:d2:41:e2:02:bc:5c:ec:b4:0e:7c:94:2f:9f:87:5a:ea:7f:
1e:89:9e:e2:6e:49:34:ff:e5:4e:28:25:68:92:ca:3a:39:28:
fd:5d:f7:dc:73:0f:e0:e6:a9:24:92:1f:87:c8:ba:39:fc:46:
84:79:be:e8:0f:76:2d:1e:42:27:da:48:c8:78:32:05:48:33:
ad:50:43:dd:83:bc:f4:6d:f3:9b:63:c7:32:48:f8:53:c4:d9:
d3:06:99:73:d7:8a:f0:a0:5b:90:a9:58:db:a7:49:8b:58:35:
09:39:42:cc:01:d6:cb:62:10:62:16:54:0d:df:07:6c:fb:4d:
d5:78:c8:a4:4a:71:0f:98:30:22:92:78:c0:57:79:00:30:c4:
0a:bc:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org