Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: v4OGPAJfXHCjbfxRI/x4HIDake99Legvhs+xPVa0Afw=
Subject key identifier: D1:EC:D7:1E:DE:D7:3B:B4:5D:9E:39:10:1C:3D:66:6B:0F:F6:1A:E6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6616EE1B457076753764352EBED503C9CF45C03D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:27 +0000
ROA not before: Mon 26 Sep 2022 09:55:27 +0000
ROA not after: Mon 25 Sep 2023 10:00:27 +0000
asID: 59282
IP address blocks: 2400:d680:25d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:16:ee:1b:45:70:76:75:37:64:35:2e:be:d5:03:c9:cf:45:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:27 2022 GMT
Not After : Sep 25 10:00:27 2023 GMT
Subject: CN=D1ECD71EDED73BB45D9E39101C3D666B0FF61AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:c3:2a:41:81:a6:5a:c4:a5:29:87:9a:64:
ba:4d:18:85:d7:0b:27:6b:57:13:79:f2:f1:d3:d5:
91:a5:ac:26:5a:f1:96:05:09:70:58:37:3e:9e:ed:
1c:97:90:0d:2f:94:ee:63:0b:8d:f0:fc:6e:c9:b1:
c5:fc:4d:64:43:b0:47:be:fe:1f:a1:bb:b7:80:81:
e9:d4:07:ec:ef:49:35:19:35:e9:f5:91:e4:ff:fc:
2d:52:14:74:84:36:07:c5:88:ad:cb:76:cd:4f:18:
13:8a:66:1a:bf:ad:93:b7:f7:dc:58:65:d4:c6:e0:
a6:2c:d0:1b:22:17:4c:90:95:2a:28:46:4a:4c:1d:
a0:33:50:44:d6:57:ac:ec:78:51:0b:f2:49:6c:a4:
3c:23:4d:14:44:5d:96:38:63:ab:e2:e0:06:13:50:
c2:01:47:d1:4e:2f:70:0f:f5:27:14:c0:73:b6:79:
cf:54:3c:ff:dc:3c:ed:b4:d3:67:72:1e:c6:03:78:
c6:2a:8d:fb:44:12:d0:41:92:9a:f5:fb:15:67:84:
34:ab:42:02:7b:bc:52:c2:a6:e7:42:54:82:a7:30:
af:9c:52:4d:4f:5e:bf:22:45:79:b9:a0:31:0b:dd:
0a:1a:7f:55:28:52:1e:fa:36:29:2f:8e:b0:5c:10:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:D7:1E:DE:D7:3B:B4:5D:9E:39:10:1C:3D:66:6B:0F:F6:1A:E6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:25d::/48
Signature Algorithm: sha256WithRSAEncryption
92:8f:cf:6d:ce:f3:23:f8:cd:b8:27:da:fa:d5:56:34:d9:cb:
02:47:db:4a:01:9e:94:03:0b:16:3a:ef:8f:a4:dc:53:b5:63:
fc:e2:45:8c:c5:c4:4b:66:68:85:a6:66:11:71:f8:af:8d:fd:
10:05:62:2b:57:ff:5c:f9:8b:da:86:e0:1e:28:7a:ce:ba:b4:
8b:e3:e9:ba:da:83:6c:7e:97:4a:dc:6a:03:03:50:aa:20:ad:
dc:bf:06:5f:2d:d5:12:bd:b4:4a:4b:c1:f3:b9:8b:4f:1f:0b:
42:e2:1a:45:96:0c:96:35:2d:2c:9d:b8:5a:64:24:57:48:50:
10:20:c8:c8:81:f8:80:98:98:63:38:3e:23:d4:25:04:58:ce:
db:4d:e3:b2:37:ed:e8:f9:a7:8d:d2:ab:54:e6:cc:d1:80:0a:
25:59:e0:e6:9b:92:c3:4b:1a:a8:48:05:22:51:42:f1:2d:a5:
c3:c3:d2:bc:28:f7:dd:04:61:81:d8:ca:65:46:4c:2e:16:3d:
d6:f2:ce:f9:8a:e3:25:95:52:77:25:57:bd:f8:3f:e3:33:42:
ec:b7:c1:da:91:b6:3b:01:f9:40:e9:be:9e:89:76:84:2f:8c:
d4:df:0b:8a:15:1a:aa:7c:13:8c:bf:8c:16:bc:a0:53:1d:da:
54:76:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org