Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MJO0+a8XXGh23/9eSTxD9v0R4DF5FbUfywHVfyKLThs=
Subject key identifier: 01:7E:B0:80:71:92:CA:48:36:BA:81:24:37:B3:2A:1D:7D:26:5E:D4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 51E78E02D38059CF4AA5119DCF6273119A59722B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:03 +0000
ROA not before: Mon 26 Sep 2022 12:55:03 +0000
ROA not after: Mon 25 Sep 2023 13:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:2a2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e7:8e:02:d3:80:59:cf:4a:a5:11:9d:cf:62:73:11:9a:59:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:03 2022 GMT
Not After : Sep 25 13:00:03 2023 GMT
Subject: CN=017EB0807192CA4836BA812437B32A1D7D265ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:28:0e:12:b6:9f:1f:bb:af:0a:f7:85:8b:
48:77:2b:04:eb:e0:41:dc:1e:51:f7:09:78:83:c3:
57:56:6f:b5:4d:53:95:bf:5c:e7:45:7a:47:6a:e7:
c7:f3:dd:a6:4c:23:d9:a7:1a:fb:12:71:0b:5b:27:
9a:ba:8d:47:0e:a9:21:52:fa:54:5e:cc:3d:0a:0c:
91:90:4f:6b:33:ea:10:e5:8b:f1:58:48:4d:b3:5c:
0e:77:84:3e:af:42:a0:fd:c9:a4:81:6d:41:1e:59:
bf:c0:1b:1d:9b:a2:e9:e0:b0:9e:62:99:79:ce:27:
67:70:93:7e:29:68:82:3d:0d:42:48:75:33:6e:6a:
c4:2b:f2:45:f3:12:b4:d5:6c:87:bc:b1:68:27:0a:
4c:d3:c2:cb:a7:39:9c:d6:9f:8d:b9:9f:5e:82:8e:
06:f4:52:60:d3:d9:3b:dc:7a:9f:3a:ac:06:c6:f1:
b9:82:16:62:98:fd:59:2a:56:95:ce:c8:55:0a:e8:
d8:88:38:a3:1a:b4:7a:36:3e:56:81:f8:4b:f6:f9:
7c:c8:9c:5b:31:7b:1a:fa:b3:bb:bf:c9:07:41:7f:
cd:4c:16:b3:d0:f6:10:5b:46:b2:0b:f4:2d:37:75:
90:d9:f9:0b:9a:45:97:86:57:d5:46:07:48:38:03:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:B0:80:71:92:CA:48:36:BA:81:24:37:B3:2A:1D:7D:26:5E:D4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2a2::/48
Signature Algorithm: sha256WithRSAEncryption
d7:1e:46:34:3a:a7:0d:33:8f:02:d4:83:ca:58:77:0f:b3:8a:
18:0f:b4:67:b6:8a:72:a7:0a:8f:94:44:bf:01:d5:f2:4b:be:
ac:72:a7:67:ba:9b:61:b0:b7:e0:1b:1b:7a:ce:bc:79:d6:80:
07:34:b6:e2:40:c5:e3:42:7c:af:03:bc:5a:91:08:f0:8a:5e:
c4:78:c4:3c:30:a9:d8:01:45:21:ca:b9:e1:f9:b0:6d:7b:b9:
05:75:af:0f:52:f8:7d:50:89:ad:3c:a9:71:4d:ec:63:e4:01:
e8:27:d6:ee:30:0a:cd:47:71:77:96:43:b4:92:21:68:6e:81:
42:8e:87:65:01:14:40:9e:09:77:18:01:e4:28:c0:d6:5d:ee:
c2:f1:3c:a0:ac:43:c9:1e:d2:f1:8e:1b:73:2c:8d:45:2d:96:
ae:8a:f1:88:0e:4c:6f:a1:8a:05:c7:34:77:ca:61:a4:bb:39:
ce:d6:88:a3:91:fe:ff:ac:71:e5:21:ff:46:12:6f:52:de:c3:
1b:81:df:da:64:d7:47:cf:64:c6:a8:da:6a:74:dc:50:12:32:
01:7d:c7:55:c8:e6:df:f3:2e:f8:b0:85:a3:45:97:55:7f:08:
cf:59:80:db:f0:59:41:8d:22:43:55:d8:30:a1:a6:5c:0f:f4:
f5:1b:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org