Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3236383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: fOC6Y8z5T9yEuCjKfsdw3EMvMD+0ZJ+iKWG9sTHwt2Y=
Subject key identifier: 69:78:46:81:81:DD:32:F7:A7:03:48:B5:76:38:23:83:5C:41:45:D0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7BDE033BAB8315C42EFBD87CE12A57E83115A52B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:33 +0000
ROA not before: Mon 26 Sep 2022 09:55:33 +0000
ROA not after: Mon 25 Sep 2023 10:00:33 +0000
asID: 59282
IP address blocks: 2400:d680:268::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:de:03:3b:ab:83:15:c4:2e:fb:d8:7c:e1:2a:57:e8:31:15:a5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:33 2022 GMT
Not After : Sep 25 10:00:33 2023 GMT
Subject: CN=6978468181DD32F7A70348B5763823835C4145D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:a8:c6:3c:0e:64:09:d7:1b:2f:b1:29:f7:
cd:53:9e:29:25:05:80:55:96:f0:3e:a9:79:f5:0e:
12:a0:a3:5e:b3:34:9a:62:20:c9:73:50:d8:30:00:
d1:a0:57:80:c5:24:ca:f0:60:28:bb:38:82:54:47:
13:bf:6e:02:18:71:0e:45:ba:e0:ab:d3:be:13:ee:
d3:fb:12:8e:93:85:f0:21:f8:df:23:a5:2b:77:8a:
55:65:48:9b:90:1f:d7:f6:83:52:2f:32:cb:c3:d0:
cc:fe:66:62:9a:a0:a3:c4:7f:af:bd:60:cc:84:9d:
21:85:27:c4:4a:9a:bf:e8:92:b5:45:06:6c:96:0c:
fc:79:5a:37:5d:df:bb:a6:30:e1:c5:77:77:01:19:
e4:d1:29:1a:bf:a9:95:a8:d0:53:48:5e:38:3e:62:
94:bc:c9:29:01:1b:ac:91:0d:b9:38:ec:6f:9a:b1:
26:e7:f3:be:0f:72:3d:c6:89:24:ce:40:2b:f3:dc:
86:97:bd:a9:20:f6:13:80:61:26:36:58:6a:0f:0a:
85:07:8d:b0:7d:29:9f:e2:30:b4:cd:8a:e9:10:4b:
45:ca:b1:78:c7:b1:20:c6:29:1a:a5:73:29:c7:a6:
68:0f:eb:95:98:f5:47:4c:e9:93:d3:82:6c:26:43:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:46:81:81:DD:32:F7:A7:03:48:B5:76:38:23:83:5C:41:45:D0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:268::/48
Signature Algorithm: sha256WithRSAEncryption
ab:51:10:60:1f:ef:af:54:bd:4c:91:78:9b:e1:07:ff:2c:0d:
9e:b8:8b:8d:36:81:50:01:43:c5:e6:3f:cc:f0:ac:f2:b1:8c:
66:ad:39:b5:0d:5e:6a:9d:62:8e:9f:f4:2c:94:ea:73:6e:7a:
9f:99:3c:20:10:e8:42:80:d2:0c:7f:62:f7:60:b1:c2:82:65:
c1:0f:b1:c6:31:04:10:37:88:3e:4a:08:12:37:67:1b:7a:88:
af:05:b2:32:cc:68:f0:62:ea:af:00:cf:94:2c:74:40:ee:07:
01:e4:d3:b2:7f:89:68:b8:a5:fe:6d:59:43:a1:96:ca:02:89:
68:55:c1:9b:0c:d6:1c:35:7c:84:92:1e:b0:9c:7b:da:6f:a6:
f4:a0:21:9b:17:16:7a:e3:9d:b4:db:e1:11:e2:5c:c0:8a:e6:
b6:74:0c:0f:39:6d:8a:94:e3:f5:29:e8:f3:8d:39:28:61:8f:
0b:79:4f:d0:1e:f1:e5:dd:61:6f:a0:54:3d:90:3d:cd:0b:36:
01:63:f0:27:5e:4e:31:ec:13:b7:a7:6b:0f:71:70:c0:b0:10:
ab:ef:dd:7b:87:fc:e0:1a:90:36:f5:86:36:e7:de:e6:47:60:
c2:1f:70:a5:a3:f0:ec:e9:4a:6b:25:a6:c8:b8:25:da:b2:de:
ce:19:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org