Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3236613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: GHLLUbfORA9WbWmlEEVRVYz8eCDiET5+F97vpXtci+0=
Subject key identifier: A7:98:50:41:D5:E8:B0:10:12:09:EF:6C:C4:B9:CB:EF:1D:1D:B4:72
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 20E87C89C356AF11DFABDAE36B6F26E38B29402A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:34 +0000
ROA not before: Mon 26 Sep 2022 09:55:34 +0000
ROA not after: Mon 25 Sep 2023 10:00:34 +0000
asID: 59282
IP address blocks: 2400:d680:26a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e8:7c:89:c3:56:af:11:df:ab:da:e3:6b:6f:26:e3:8b:29:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:34 2022 GMT
Not After : Sep 25 10:00:34 2023 GMT
Subject: CN=A7985041D5E8B0101209EF6CC4B9CBEF1D1DB472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:48:68:eb:78:d1:28:0b:72:20:b6:9e:20:
6f:1e:1d:60:4c:d1:4a:9b:41:8f:4c:8d:dc:ea:b4:
37:2d:04:5d:4a:77:0f:2c:90:79:29:62:f3:1f:f6:
8c:25:fb:5d:55:61:07:cb:f2:37:93:64:f2:c6:de:
61:42:e5:72:01:36:bf:94:31:4e:9b:c7:23:53:6c:
19:63:09:9c:17:59:de:71:d8:42:cf:73:95:1e:8e:
cd:dd:cc:28:43:14:f5:d9:90:15:45:a4:d9:f1:cd:
39:1b:18:90:a1:0e:ae:8c:43:2f:b2:bb:81:d7:5f:
c2:64:61:52:47:38:55:08:92:4a:e6:61:91:e8:ee:
b9:3e:96:dd:0b:1e:f9:8c:0d:c9:e3:8d:28:a9:a1:
d8:09:fd:90:82:32:fb:5d:be:99:22:e8:a4:a9:19:
6d:18:21:3e:7c:8d:29:73:e2:7d:6a:6b:af:f4:bc:
f5:13:5c:eb:92:26:ef:63:e5:49:89:cf:6d:bd:0d:
75:d5:f4:d4:ec:b4:3d:59:bf:03:ba:00:b3:45:2d:
44:bc:e6:dd:63:a7:2e:69:56:65:61:80:fa:8f:30:
29:5a:26:71:e7:cc:a0:6d:97:d4:52:4a:4b:c0:a7:
e1:a2:b5:73:90:f8:84:00:c6:a2:f9:ce:5d:e7:62:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:50:41:D5:E8:B0:10:12:09:EF:6C:C4:B9:CB:EF:1D:1D:B4:72
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:26a::/48
Signature Algorithm: sha256WithRSAEncryption
18:13:6d:6f:90:c9:45:9c:15:f9:62:52:75:e1:7b:d6:bd:4c:
67:27:59:d9:13:be:a9:64:35:98:bc:09:d6:22:da:cb:c0:b2:
7d:bf:e0:42:8f:bb:f8:74:3f:c6:54:97:c0:db:30:df:69:7b:
a9:d6:8f:c0:8b:8f:69:aa:9f:97:b6:f1:f4:48:86:04:e7:2c:
5c:b7:9e:5e:9a:d6:e0:c1:31:aa:07:7c:2b:5c:23:a7:d7:91:
61:26:66:e0:5b:f7:2b:7d:57:96:7a:75:16:f8:5c:a3:f2:53:
92:df:84:4e:82:9f:fe:71:9b:92:e5:9f:01:d9:b1:6b:3a:72:
5e:d1:e3:96:19:16:be:1b:f4:6f:34:27:b3:46:dd:c6:9a:d1:
70:56:d9:69:e4:3b:90:00:23:ee:7c:22:5c:bb:4e:03:af:69:
b6:d1:d3:2a:56:03:35:db:f1:a2:69:ce:90:eb:83:da:4f:c0:
4e:da:be:1f:e1:df:58:36:3f:59:72:59:54:b8:76:6a:9b:54:
cd:1e:d1:8d:4e:07:f8:ed:84:7c:f0:eb:ef:b4:9a:e5:76:ff:
63:fe:e1:e4:ae:cf:89:5a:db:4c:00:1e:11:6a:69:c6:d6:49:
c1:84:5e:d0:65:13:95:b5:90:94:cd:17:4e:bf:ce:88:0c:be:
9a:d5:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org