Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3237313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: M6o8bO0w+uyd7M6jrxLSvLU3XIq503asj2lY1kG/EhI=
Subject key identifier: D4:B8:2C:7E:83:28:67:4F:78:12:DA:F1:C7:EE:22:BF:FF:3C:34:D4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 15CCB7AD2BFB2F12C67D4BD6F9C9F4810C54374C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:08 +0000
ROA not before: Mon 26 Sep 2022 12:55:08 +0000
ROA not after: Mon 25 Sep 2023 13:00:08 +0000
asID: 59282
IP address blocks: 2400:d680:271::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cc:b7:ad:2b:fb:2f:12:c6:7d:4b:d6:f9:c9:f4:81:0c:54:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:08 2022 GMT
Not After : Sep 25 13:00:08 2023 GMT
Subject: CN=D4B82C7E8328674F7812DAF1C7EE22BFFF3C34D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:36:0f:a7:8d:2e:66:63:fb:85:33:57:fa:
80:5c:cd:7c:52:1b:6e:2c:01:99:a3:58:7a:17:36:
0e:51:77:c4:7c:60:e1:65:9e:77:db:be:1d:e1:a0:
b4:34:bd:e1:4e:c4:ac:00:15:f1:e4:fa:56:b8:16:
20:56:fe:30:c0:6d:6e:2e:1f:c1:fc:f2:0e:fa:54:
f6:94:37:6f:48:33:d8:74:13:e0:1d:21:ec:f3:7d:
68:73:a5:99:66:9e:44:9f:e5:4b:19:7b:8c:4a:a6:
fb:04:05:ff:7f:7e:78:03:a5:0b:73:6a:ef:8e:dc:
b7:aa:81:74:75:14:18:46:3b:ba:8c:ad:72:98:0b:
19:81:c9:9b:a4:2b:c5:51:1f:b0:7e:11:ed:90:bc:
dd:85:25:39:d1:cf:bb:6a:67:74:a8:70:f3:23:c0:
05:a9:f6:ad:7f:6e:87:1b:d6:f3:24:e0:a6:e0:30:
5a:07:6e:dc:4e:27:59:c6:b5:06:b9:0e:72:61:38:
6f:f5:ac:72:2d:f5:0a:14:d9:39:48:bf:b6:9c:a4:
33:67:2b:f1:e9:02:6b:2f:af:c2:70:71:60:33:ae:
a8:05:02:6c:94:63:f6:83:a7:22:51:60:26:f3:d2:
5e:cc:9b:90:31:1e:ea:8a:9f:e1:d3:c5:a3:28:81:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:2C:7E:83:28:67:4F:78:12:DA:F1:C7:EE:22:BF:FF:3C:34:D4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:271::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9b:18:64:d3:ab:6c:c2:e9:32:4d:95:7f:a7:48:ed:da:67:
d1:d9:c9:01:79:3e:a9:39:c0:89:26:88:7e:ed:3a:49:13:aa:
b0:47:3f:67:ee:b7:08:5c:59:7d:23:79:5d:d2:bc:cb:ca:b1:
0b:b2:6d:55:fc:62:b7:2f:7d:f7:d3:4f:31:c4:26:21:fb:e7:
b9:28:1c:4b:4d:f2:0a:ef:21:6c:3a:93:45:1d:95:b5:a3:62:
89:37:94:25:df:bc:cc:5a:26:12:65:2b:f9:64:be:09:1e:41:
6c:15:59:ab:5d:37:5f:25:48:80:d4:ef:e9:df:d9:e0:c4:d6:
cc:c6:d6:d8:29:fe:c7:8e:4f:1a:89:83:bd:fa:71:51:3e:45:
3e:7c:85:51:b8:95:c8:f6:44:88:55:2b:da:5e:fe:c4:35:85:
52:8e:b2:12:41:0e:25:20:a0:c6:26:af:8d:b5:d6:3a:8d:1b:
29:35:a5:4b:9c:9e:0c:8b:7b:4a:b4:6b:fb:b2:d9:eb:66:71:
ac:1c:73:39:99:0f:ec:45:69:67:3e:17:ba:5d:06:87:70:b7:
24:49:ec:46:43:94:5e:70:26:67:0e:01:d7:73:b7:31:83:92:
23:41:17:ed:2d:f9:b0:a3:67:d9:f6:00:de:2b:31:a9:d1:82:
31:2b:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org