Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 9hlxJFhYVV1fAEABP3fcReEe9mxH6ohLZHiHJw5iw5o=
Subject key identifier: B1:2B:AB:6C:47:8B:C7:BF:2A:8D:37:2E:3C:40:50:68:23:97:EE:74
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 54D4C5B8F192310E76AE0FAFF424C633B9D1E388
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:01 +0000
ROA not before: Mon 26 Sep 2022 06:55:01 +0000
ROA not after: Mon 25 Sep 2023 07:00:01 +0000
asID: 59282
IP address blocks: 2400:d680:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d4:c5:b8:f1:92:31:0e:76:ae:0f:af:f4:24:c6:33:b9:d1:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:01 2022 GMT
Not After : Sep 25 07:00:01 2023 GMT
Subject: CN=B12BAB6C478BC7BF2A8D372E3C4050682397EE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:8f:97:af:49:71:8c:66:fb:3f:db:d8:24:
a9:99:3a:77:62:14:2f:9f:ba:8a:f2:b7:9b:19:f0:
ff:64:6a:62:16:18:ae:41:fa:24:1f:ce:a6:2b:d8:
b8:c9:36:6c:8c:1c:c2:80:16:36:cd:29:a0:9f:6e:
50:b8:24:cb:3b:db:a4:7e:1c:98:08:ef:fe:8f:cd:
4f:dd:4e:d3:ae:00:e0:c0:6f:d2:91:5d:46:5c:a2:
fc:b5:ab:47:94:40:96:28:4a:53:bb:08:d5:8a:1d:
2d:c8:9a:74:0c:dc:65:46:c1:e4:79:f3:e2:0d:e0:
2e:72:e8:00:ac:93:b2:4e:8f:d6:b5:99:d9:34:0c:
c7:0b:9a:06:5e:26:5c:17:46:35:8a:4f:ca:5d:6f:
53:4c:f5:8d:66:2e:40:46:ec:95:60:9f:fb:2b:09:
56:d0:5f:10:22:d8:81:2a:85:70:c4:bc:8a:94:b1:
3f:51:73:f7:f5:e9:0d:5b:28:35:98:fb:ab:82:fb:
83:99:6d:4d:e3:4e:2e:db:f4:9b:c3:e1:cc:40:87:
cb:dc:39:58:0c:8c:64:55:27:a8:40:8d:b1:b6:07:
0c:6e:c6:94:65:ab:47:d6:0a:1f:3c:22:85:6a:d4:
ce:45:99:fd:b9:53:48:71:fd:76:2a:4c:8f:c2:55:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:AB:6C:47:8B:C7:BF:2A:8D:37:2E:3C:40:50:68:23:97:EE:74
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2::/48
Signature Algorithm: sha256WithRSAEncryption
37:c0:36:59:00:96:33:14:77:9d:f4:e7:35:10:c7:88:cc:d4:
81:f5:8a:28:a8:b4:e6:67:c7:27:f5:b8:5c:7d:4b:83:4a:16:
09:3d:57:74:f5:96:b6:4a:d8:f5:7e:5c:34:08:5e:48:5b:b6:
f8:c2:85:8c:04:c8:fc:6f:8a:69:b0:7f:cc:16:f8:ae:ec:1f:
c1:28:ac:f9:04:41:55:b7:d7:3d:f8:72:97:a8:3a:0e:1b:ba:
c4:4f:b6:d9:2d:bb:b9:3e:01:5f:0d:76:66:c4:c5:19:b5:f2:
63:9d:d5:f3:21:3c:d7:fd:bb:82:cd:75:29:63:95:25:09:2d:
5d:c4:28:55:a8:d0:cb:94:39:0c:b5:7b:58:23:f9:cb:8e:cb:
b5:df:b0:6b:22:fc:fb:bb:fb:97:f7:af:e5:1d:ae:71:53:f8:
3b:e0:bd:7f:60:c8:06:d2:26:cb:72:e2:80:2e:78:ce:9b:90:
25:84:e7:04:b5:6a:73:43:23:70:4d:35:51:e2:e3:5c:63:dd:
35:dc:4e:79:f0:cf:fa:10:e0:e9:b4:fb:98:82:04:e9:a7:e4:
21:7f:c9:fa:bf:34:1c:fe:c9:2b:63:e2:55:08:cb:5a:0e:ca:
75:eb:11:a7:72:c4:14:ea:ec:eb:02:c5:5d:b5:80:c1:ad:6d:
fc:94:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org