Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: WwxlALbcRbVajbjaZVsYzl/juy4onyX9yAYUqXnUvOo=
Subject key identifier: 33:23:25:9E:A3:2B:0C:21:86:E7:89:19:F5:66:A4:EE:3F:7E:6C:9F
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3A87E5D9513337D91865498C047B0C6F1CAA2E70
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 09:00:00 +0000
ROA not before: Mon 26 Sep 2022 08:55:00 +0000
ROA not after: Mon 25 Sep 2023 09:00:00 +0000
asID: 59282
IP address blocks: 2400:d680:25b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:87:e5:d9:51:33:37:d9:18:65:49:8c:04:7b:0c:6f:1c:aa:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 08:55:00 2022 GMT
Not After : Sep 25 09:00:00 2023 GMT
Subject: CN=3323259EA32B0C2186E78919F566A4EE3F7E6C9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:c6:ac:b5:18:10:63:bc:d3:0b:3d:a3:36:
eb:51:a5:91:3b:c6:0c:b1:c1:f1:4e:98:70:4d:ef:
ab:4e:7e:86:e0:5d:bd:be:b7:1e:3c:34:31:43:03:
1d:b6:1d:1f:f4:4e:69:aa:00:2c:d7:0e:4f:8f:13:
4a:cd:2e:1f:1e:25:85:f2:60:22:47:fc:83:81:f7:
25:b0:6b:a9:86:df:8c:bb:28:7a:b3:a4:cb:2f:8f:
af:f6:91:6e:cc:98:aa:03:94:95:fd:a0:2f:43:47:
9f:06:71:46:4b:36:f1:88:5f:26:4d:8a:94:ba:ea:
db:3b:35:34:e6:c4:ff:0b:60:21:60:25:76:ef:00:
5d:a9:bc:02:ab:72:7e:50:a5:0b:61:ce:f4:ca:0b:
f9:a4:49:ca:06:01:c9:19:7a:a6:7f:7b:b0:bc:c2:
ce:b4:43:b7:46:a8:35:14:97:16:ef:93:e2:10:fe:
73:d2:7b:44:93:27:6c:ac:01:34:9a:71:1a:07:15:
78:2e:e2:ff:47:6b:79:b1:5b:94:0a:ab:4f:b1:73:
6c:b9:2d:da:c0:95:20:1a:75:5b:ea:d5:a4:35:61:
82:c5:a7:d2:9f:cc:f0:f6:9a:16:f2:16:7c:49:6c:
c8:47:a2:50:1a:0d:16:c2:59:fd:72:db:00:2e:22:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:25:9E:A3:2B:0C:21:86:E7:89:19:F5:66:A4:EE:3F:7E:6C:9F
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:25b::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ff:a8:14:71:0f:05:cd:e7:6b:d8:0e:f8:04:4e:87:6c:d1:
a4:89:c3:4f:5d:45:a2:0e:d7:47:21:c9:3b:61:13:34:a4:08:
f9:cd:33:3a:85:ef:90:fe:ab:c4:ad:a9:4b:5e:20:0e:b4:35:
ad:0c:1e:29:67:66:bb:bb:a9:6e:f3:81:c9:30:37:3f:86:42:
d9:e3:39:d2:39:45:62:fb:e9:fb:70:88:5f:c9:34:30:31:c0:
d5:45:1a:62:33:7b:87:50:96:ba:2d:c3:bd:c4:bf:13:21:29:
d9:6b:1b:c6:aa:d8:1c:1e:74:3a:ec:a1:bc:a7:bb:1b:af:0b:
f7:3b:35:bf:af:20:ab:9a:06:a4:84:3c:ea:37:a5:de:c5:7d:
c7:8a:65:85:82:73:86:09:4c:c6:e2:a1:ae:4c:0a:7d:65:7c:
f0:b4:9a:f4:fb:48:e0:d7:3e:8b:37:7a:d5:a7:7a:bf:db:02:
9b:4b:75:1a:74:20:be:7a:27:c7:ec:91:31:a7:11:f3:04:97:
0e:23:6c:2f:a0:83:17:5f:2d:fd:72:62:69:40:c5:7d:74:28:
ef:91:fa:3a:77:72:b9:06:98:b6:ca:e0:58:d3:7b:45:60:e3:
64:65:29:af:15:3f:f0:bc:f9:ca:fd:38:05:13:6b:84:d6:02:
65:bd:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org