Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: EQBtsIkx+df0MaeAaVNqBuK0xjUohejEkKaGFO1eXKI=
Subject key identifier: 36:3C:AF:79:C4:3D:B5:50:07:B8:09:86:F6:38:DA:08:CF:44:94:5E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 43F6432AA69F4C009C3F8878692120BDB25ED5F7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:01 +0000
ROA not before: Mon 26 Sep 2022 12:55:01 +0000
ROA not after: Mon 25 Sep 2023 13:00:01 +0000
asID: 59282
IP address blocks: 2400:d680:298::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f6:43:2a:a6:9f:4c:00:9c:3f:88:78:69:21:20:bd:b2:5e:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:01 2022 GMT
Not After : Sep 25 13:00:01 2023 GMT
Subject: CN=363CAF79C43DB55007B80986F638DA08CF44945E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:38:97:78:3f:e6:50:26:ac:d5:b5:5d:a7:
2a:7f:8d:96:17:a6:03:cb:ca:4d:cf:a2:83:d7:ad:
ac:d5:58:dc:f3:73:9b:26:a6:07:85:8b:1f:07:27:
7e:cb:c1:7b:81:4e:04:3b:4e:12:2a:67:b6:84:03:
97:89:6d:33:57:f8:80:6b:1b:1b:a1:43:ad:81:fe:
3f:ad:8c:a5:d1:be:22:0d:df:59:80:d6:38:4b:04:
72:86:f6:76:41:d8:04:d7:3d:d6:71:58:01:db:d7:
b8:5f:7b:0a:80:cf:43:ad:cd:78:e4:44:c1:e4:15:
fd:7c:25:e7:f0:f0:82:5b:dd:3a:72:34:d0:d3:8e:
10:5e:35:2b:ce:c3:8e:da:3a:df:5d:99:17:ba:f5:
48:51:80:1f:3d:ad:70:aa:72:55:f3:c3:01:f4:46:
3c:1e:84:37:a0:ce:a7:f5:9a:09:76:f7:54:74:30:
f9:46:77:b0:cc:59:de:54:00:cd:18:ee:17:e5:01:
e4:8a:c1:1e:fd:9b:24:d1:41:25:c4:78:c0:36:a2:
82:38:9b:82:f0:4c:37:8b:fb:49:e3:91:45:e0:73:
9e:26:b4:a6:6b:aa:31:14:a5:e7:f2:b7:d3:4e:59:
18:31:17:a5:25:8a:f4:ca:83:e1:e9:7b:67:7c:a6:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:AF:79:C4:3D:B5:50:07:B8:09:86:F6:38:DA:08:CF:44:94:5E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:298::/48
Signature Algorithm: sha256WithRSAEncryption
7e:55:55:bd:20:c6:91:dc:8e:00:ea:9b:5c:ee:52:6a:33:e6:
6c:cf:b2:27:c6:eb:e9:ab:c9:33:14:92:2d:8c:5c:86:cb:14:
a5:75:cb:ee:d8:c7:42:d8:22:53:b4:19:b6:37:5f:f9:7c:5e:
1c:30:47:a2:09:6e:d5:66:05:9e:e8:83:09:b5:e4:f1:c0:3f:
fc:5e:1a:d4:0e:7f:17:0d:dc:03:89:1f:8e:81:97:dc:a1:0c:
4e:be:cc:50:d8:c4:57:e2:fd:f0:5c:e0:dd:f5:2e:36:2a:a0:
3d:64:4f:0e:97:1c:66:a6:b4:44:a8:a7:67:7e:9d:7f:25:63:
4e:23:27:a8:5a:72:6b:68:cf:f4:2c:da:51:3a:91:69:02:d6:
1f:02:8a:24:2b:cf:65:be:59:a1:a6:72:5e:a6:34:6f:5f:29:
dd:4c:16:57:aa:96:84:0b:a3:06:0b:5f:5e:7e:d1:2e:82:31:
ad:98:0d:68:c2:97:df:4d:3b:da:f2:e3:91:84:f8:43:fe:df:
3c:d0:1b:f8:43:af:5c:79:5f:ec:73:05:f2:3b:3d:91:87:3c:
a0:1e:c8:b1:1f:81:4b:5e:da:59:c0:84:31:6a:bb:98:e0:24:
16:a3:fb:d9:9f:f2:a3:52:18:0a:da:3f:0c:fe:fb:7d:21:43:
42:14:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org