Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: p2ThBgcat6fZAdBv5oisyiC9bVJzXzhp2OR8nwzcjPk=
Subject key identifier: E6:51:C8:C1:9D:22:77:F7:C6:D1:5E:8C:53:A9:09:C5:55:B5:D6:BC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 52AEA166109405FF84B11A69E25BC3039C6B8B44
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:11 +0000
ROA not before: Mon 26 Sep 2022 12:55:11 +0000
ROA not after: Mon 25 Sep 2023 13:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:295::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ae:a1:66:10:94:05:ff:84:b1:1a:69:e2:5b:c3:03:9c:6b:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:11 2022 GMT
Not After : Sep 25 13:00:11 2023 GMT
Subject: CN=E651C8C19D2277F7C6D15E8C53A909C555B5D6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:03:51:c4:bb:93:93:87:7a:44:a3:6c:ea:
a3:c5:af:d2:78:a1:a5:2c:34:d1:93:00:47:37:fc:
a5:e5:bc:a8:32:9a:8f:84:7b:37:e4:94:cf:d9:d3:
a3:3e:af:54:28:6a:01:f0:68:67:2f:22:15:2c:f3:
9e:40:1e:68:32:fe:4d:1b:7c:cf:67:44:eb:00:82:
dc:f7:5b:a2:da:12:76:c9:4d:41:81:82:f0:17:d5:
0d:a4:04:fe:88:f1:75:2b:1c:4e:ac:98:2a:7b:57:
0a:cc:16:8a:8d:87:5e:4a:de:20:b0:d4:69:a7:93:
0b:53:38:76:7a:4b:38:f3:dd:f2:db:6d:48:99:6a:
04:d4:a0:f3:6d:85:00:76:8c:30:f5:3c:0f:63:57:
e3:46:6f:03:be:95:f5:de:8a:3e:6b:d6:07:86:6d:
b8:f3:5d:73:ba:c7:89:a7:1d:9a:a3:f2:d8:38:54:
79:54:f8:e0:88:d5:0d:49:58:95:bf:21:1e:5b:27:
f1:66:1f:08:04:f2:ad:1b:2b:84:e1:d6:67:bd:9b:
88:3b:8a:4d:2f:f1:4d:5b:da:80:de:f5:be:c0:b2:
f6:dd:04:fc:d5:ab:01:46:12:2e:16:9d:03:e2:02:
4e:a7:6f:15:f5:83:aa:db:c4:db:2a:c2:76:5d:7d:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:C8:C1:9D:22:77:F7:C6:D1:5E:8C:53:A9:09:C5:55:B5:D6:BC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:295::/48
Signature Algorithm: sha256WithRSAEncryption
1b:4e:7a:93:85:78:95:0d:42:84:f5:e8:65:99:25:88:fc:33:
3e:4f:95:c7:ef:8e:9a:36:91:c9:2a:78:8e:d7:27:0c:df:92:
3e:58:a3:b7:72:73:aa:d4:ed:61:b4:85:31:6d:e8:aa:1e:77:
58:ab:4f:33:61:d9:56:9d:72:ed:0c:9a:49:4d:0a:65:d9:fa:
e5:99:d0:d3:50:41:a8:bd:dd:97:23:5a:ad:8c:0d:df:89:e7:
f7:7c:54:9a:53:2c:7f:e1:51:23:65:2f:9b:fb:a6:3f:5a:f4:
5d:9e:a3:cd:2b:32:be:bd:1a:c5:5e:94:78:b1:5e:db:72:56:
a1:d5:cc:99:ec:0b:ba:4c:4a:f1:87:aa:72:5b:d1:6a:5d:a6:
9a:a1:9a:25:1b:1d:6b:8b:5a:75:e7:3a:64:7b:ea:b5:f4:63:
22:ee:9e:af:f1:28:57:ec:92:da:82:1e:99:b9:84:9b:04:6b:
7f:33:fb:92:71:d2:c8:6d:06:db:e8:5f:66:a8:14:42:53:9f:
f9:61:13:97:de:7b:6a:5a:35:6f:f7:ad:63:eb:f9:96:3b:56:
e7:e4:06:0a:dd:fe:48:96:b4:69:fd:b8:e1:82:85:32:44:64:
e3:66:28:a7:22:80:a4:9b:35:3f:93:fc:46:ed:8a:1e:eb:0b:
57:e7:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org