Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3238323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: BUqLTMQsIWE3TuerAUb/UKHxzK1nCN+Ed559aNLZGyg=
Subject key identifier: B8:16:8B:AA:AB:4B:0F:2A:0A:A6:A2:9A:89:6F:13:9A:A1:BA:B3:83
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5FF96EC3FC956F8D273CCA2604A331B4F67F21B5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:16 +0000
ROA not before: Mon 26 Sep 2022 12:55:16 +0000
ROA not after: Mon 25 Sep 2023 13:00:16 +0000
asID: 59282
IP address blocks: 2400:d680:282::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f9:6e:c3:fc:95:6f:8d:27:3c:ca:26:04:a3:31:b4:f6:7f:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:16 2022 GMT
Not After : Sep 25 13:00:16 2023 GMT
Subject: CN=B8168BAAAB4B0F2A0AA6A29A896F139AA1BAB383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:98:12:d6:f5:cf:49:92:5c:ce:33:66:04:
07:56:7a:5a:02:e1:89:13:6d:9e:58:fc:0a:08:23:
96:6c:6d:a3:18:c5:82:a6:d3:d6:45:60:f6:29:2e:
a7:8f:bc:25:dc:1b:e2:35:cc:2c:28:7f:2d:7e:7a:
93:72:c9:9b:7b:f9:a7:42:18:4e:be:0d:3a:98:40:
b8:a4:9d:91:8e:d2:31:72:90:56:4e:f3:12:b9:8f:
e0:54:dd:ae:a0:81:bf:54:ba:51:41:1d:a5:76:00:
2f:4e:8b:12:92:2c:4d:86:ed:99:32:70:ee:df:b3:
34:1f:57:99:e0:6f:cf:cc:e8:e6:86:77:f5:56:96:
3a:6d:69:d9:01:2d:85:26:f0:88:8e:f2:f4:08:dc:
c0:1c:4c:1d:3f:69:75:61:f3:ce:41:e2:8c:0f:9c:
2f:50:70:d2:b0:47:c5:cb:64:98:db:4b:d0:19:41:
2a:7b:c9:a3:1b:91:3d:fc:4d:5d:9d:57:c7:2f:52:
48:3e:49:15:8d:5b:4d:b9:42:fe:42:c6:f9:61:a6:
66:5a:07:78:de:42:6a:72:75:95:ed:70:d4:31:d2:
58:d9:63:43:2b:2c:e9:99:ad:7c:e8:cf:d6:51:c9:
ba:16:3b:89:fc:ea:4b:1b:ab:0e:df:72:2e:56:78:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:8B:AA:AB:4B:0F:2A:0A:A6:A2:9A:89:6F:13:9A:A1:BA:B3:83
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:282::/48
Signature Algorithm: sha256WithRSAEncryption
0a:45:8c:68:9a:a7:31:1e:94:c3:22:f5:8f:8c:17:9f:d4:91:
db:0f:22:38:48:9a:41:38:23:e5:90:7e:d8:41:1d:ab:e1:a8:
fa:d0:66:f7:eb:02:07:c1:a5:d2:f9:cb:e9:f8:1f:c2:a7:c5:
a2:ca:16:e8:b7:36:25:b3:ac:24:47:3e:a2:9a:75:fd:93:1e:
70:63:47:39:c0:e7:7e:d2:ab:7c:60:0a:76:c4:57:5e:31:71:
b9:24:e1:7c:53:80:f7:3a:30:a1:67:cf:d2:9b:71:67:7a:17:
04:b9:9f:b0:14:9c:c5:de:df:dc:49:4f:df:aa:b8:54:d4:a8:
dc:e3:06:ec:f7:02:09:e1:ed:7e:62:23:cb:80:2b:56:73:1d:
f2:d3:b8:0c:1f:12:4d:0f:84:02:aa:e0:14:ea:b2:7d:d7:93:
2f:9c:d9:b2:c3:32:50:8a:f9:63:cd:3f:c5:fa:9a:71:55:32:
67:99:00:06:a9:a9:71:44:59:04:ce:04:50:8c:93:89:29:45:
b5:ab:52:ab:f7:51:22:80:3a:4a:15:75:b5:8a:17:1c:11:bd:
2a:4f:bd:37:1f:6d:f5:8e:6d:8e:ca:be:08:be:c5:d7:d2:9a:
14:c4:9a:c4:36:5b:d2:54:b0:e6:11:63:5b:a6:ad:aa:b3:cb:
0b:aa:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org