Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3236633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: vfyZFfD6JQW5O2SKfSwRa2xqjdE3QXqoDNmdIbzcFtw=
Subject key identifier: AB:87:54:02:15:41:29:E0:E6:68:64:3E:E7:DD:48:67:CA:05:27:4D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 32FA52D2649F16DCCBAED3EEF740F2C98A5FB571
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:26 +0000
ROA not before: Mon 26 Sep 2022 09:55:26 +0000
ROA not after: Mon 25 Sep 2023 10:00:26 +0000
asID: 59282
IP address blocks: 2400:d680:26c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fa:52:d2:64:9f:16:dc:cb:ae:d3:ee:f7:40:f2:c9:8a:5f:b5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:26 2022 GMT
Not After : Sep 25 10:00:26 2023 GMT
Subject: CN=AB875402154129E0E668643EE7DD4867CA05274D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:39:e9:3c:cf:f6:e7:a8:34:7e:a4:fe:57:
95:54:1d:35:45:e4:17:aa:40:d9:a9:ba:8d:90:13:
ff:85:5b:bb:1b:fd:b3:a8:09:a1:90:1d:a0:35:b9:
8f:66:89:8c:61:c6:1b:e1:f6:e9:04:89:9f:45:44:
ec:16:28:1b:f9:13:d6:c1:92:bd:5a:a8:0a:8c:5d:
75:c8:15:a2:2a:c2:1c:05:98:33:80:61:8b:54:bd:
8e:10:f6:ef:ba:65:ba:08:12:57:eb:0d:62:ab:f1:
7d:d3:9e:8b:b9:f6:7a:03:e3:e5:95:2f:09:80:d1:
d4:5d:12:32:36:ee:21:d7:86:a5:df:83:42:cd:0d:
8d:a8:1a:f0:19:ff:25:5e:53:5f:45:dc:cd:78:cc:
40:96:61:52:bc:1f:46:de:9e:62:b8:5c:af:fb:94:
2a:74:c0:6c:19:31:3d:a4:75:9e:9d:11:a1:d4:6f:
8b:e5:b8:ac:db:d4:8f:08:fe:df:b9:4e:00:0a:b5:
9e:23:e1:22:97:7a:b6:13:89:8c:23:aa:99:2f:01:
94:14:03:25:0d:5d:8a:56:3a:2f:11:bf:42:b6:76:
87:7d:9d:4e:f8:88:b0:2d:6f:c9:01:d2:b7:77:99:
7c:f7:58:8d:1a:f7:a2:d8:39:a0:f8:3c:e8:b5:6a:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:54:02:15:41:29:E0:E6:68:64:3E:E7:DD:48:67:CA:05:27:4D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:26c::/48
Signature Algorithm: sha256WithRSAEncryption
95:a0:c8:35:af:8e:dc:fc:78:ef:bf:23:39:e0:37:13:e4:b8:
e0:51:5d:92:02:7a:5d:51:cd:cf:17:a0:a9:91:3a:77:dd:e8:
1f:1c:5d:aa:95:b7:65:a2:9c:bb:7a:9a:dc:b2:b1:b8:be:89:
54:9e:4f:ee:d3:f4:ff:62:55:1a:66:0f:4d:47:ce:0a:52:49:
ef:6e:fe:28:de:85:d8:dc:0f:df:15:ca:e2:6b:a9:47:3e:ac:
d6:f6:01:5e:9b:34:e0:9d:e6:2c:99:d7:e7:f4:b0:69:b3:c6:
de:df:92:4c:d1:35:51:cf:36:7b:01:5a:11:e1:2a:e4:fe:a9:
e0:a0:80:4e:33:0a:57:0d:35:a9:86:ac:7f:a2:35:7e:c4:7a:
13:c3:54:13:58:9d:8a:77:d0:d8:52:7d:f9:77:e4:56:73:b1:
e7:4a:30:cf:c4:c4:90:fa:34:88:4c:ec:78:dc:49:3e:27:e4:
14:13:f5:0b:0c:b8:e5:1a:79:06:96:2b:ef:89:f3:d1:eb:c4:
53:5e:cd:56:b0:46:77:5f:4b:43:14:7b:64:7b:97:e4:8a:a9:
2d:f1:31:c8:57:79:4e:44:47:e1:65:de:54:1b:3f:23:52:8b:
2e:06:b9:3b:49:3b:ed:18:b9:c0:02:34:38:85:ad:b3:9c:95:
01:ac:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org