Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3238343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: VuH1zewpqe77T2EH6fzkOhXahncA1QlCps/orgUL3CE=
Subject key identifier: 5F:16:7E:D3:49:BC:EE:98:EA:A3:FD:EB:59:D9:AE:F1:81:D9:78:AF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 330246063C9EED1794C85485A2468C40DF25C417
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:06 +0000
ROA not before: Mon 26 Sep 2022 12:55:06 +0000
ROA not after: Mon 25 Sep 2023 13:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:284::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:02:46:06:3c:9e:ed:17:94:c8:54:85:a2:46:8c:40:df:25:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:06 2022 GMT
Not After : Sep 25 13:00:06 2023 GMT
Subject: CN=5F167ED349BCEE98EAA3FDEB59D9AEF181D978AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:04:0f:38:97:4d:e0:7d:a9:32:a9:c3:54:
6d:dc:6d:b3:0e:fc:2d:34:e6:07:1f:95:61:11:f2:
65:0f:be:a5:2a:a2:27:a1:2d:04:00:b5:93:f2:43:
b6:4f:76:10:c1:73:a7:64:e2:72:5e:e2:03:e6:47:
2f:c3:22:a0:0c:ba:24:6a:d1:e8:7f:f3:61:20:00:
1a:cf:d3:ca:f7:10:b8:ad:81:36:4e:e9:ad:7b:d1:
f4:35:93:46:69:81:39:68:2b:2f:73:ab:45:46:ad:
68:5a:11:1a:11:87:6e:5b:ba:b6:11:90:c9:ad:ea:
82:6d:a5:fa:83:37:9d:6d:d1:69:5e:d2:f4:24:d1:
06:1c:46:69:c5:6c:66:ab:a1:5d:64:2c:d3:01:af:
36:5a:0e:a4:34:d1:0e:d7:58:9f:28:b4:32:ad:74:
a1:9f:d6:8f:9a:ec:47:c9:da:50:98:78:ab:a2:38:
e8:41:cf:56:c6:d9:cf:36:7f:de:a6:2b:ab:fe:55:
85:dc:d2:23:0a:97:21:9d:ea:e8:a0:5b:7e:67:6e:
ed:f4:d3:d8:21:cb:46:91:9a:7c:92:74:90:52:39:
61:fc:02:b6:a8:3f:b6:c1:0a:66:c9:67:62:46:24:
1f:fa:79:fd:32:6e:ab:78:48:0a:7c:be:29:72:4e:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:7E:D3:49:BC:EE:98:EA:A3:FD:EB:59:D9:AE:F1:81:D9:78:AF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:284::/48
Signature Algorithm: sha256WithRSAEncryption
c1:84:44:82:b2:6a:94:71:52:d3:ec:d8:42:b8:86:8d:57:ef:
5b:39:ab:4c:01:4c:09:13:2d:9d:7a:18:d9:4b:4e:ea:f1:0f:
ea:0c:3b:f0:4e:15:49:c2:b7:8b:60:de:7f:08:b0:1d:9d:30:
92:b1:16:ae:db:ce:5d:ef:2a:f2:d7:af:bc:67:ef:96:2c:52:
a3:5e:13:0e:76:91:02:64:de:3b:39:20:ee:2b:75:75:49:9c:
68:cf:a2:14:a8:55:96:4d:5d:8b:e7:ea:1f:e8:f6:41:99:33:
e3:93:29:9e:6a:1d:74:62:30:33:66:d1:de:58:77:03:d4:0c:
06:6a:63:9f:a1:a4:56:5e:e1:9f:52:a0:16:82:39:63:34:30:
5b:69:a6:01:b3:33:17:73:b3:d0:12:de:f5:6b:91:39:19:57:
07:f2:d8:4d:2a:77:c8:dc:a8:0d:17:6b:a7:a1:c5:ba:5e:da:
2f:b0:30:11:00:ea:f2:c6:2f:9d:92:f0:d3:84:71:76:ac:1b:
e2:ef:c1:9f:76:76:35:0c:a6:56:5b:f2:e8:af:9a:0c:dc:a8:
a9:22:3c:d1:f9:53:61:73:71:bb:6c:60:8b:9d:25:df:2e:13:
2c:04:64:e1:18:f3:b7:bb:0c:df:19:c8:0c:58:27:10:f5:48:
fb:66:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org