Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7C7JSzQ1AkyS1fWVMFEB2i1OAFycy4Okr5bdET5VUuo=
Subject key identifier: D8:AB:DF:A9:4B:22:60:45:91:0A:AD:7A:19:55:15:CE:16:DD:05:76
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1F2F58BA80BE256D70C5D1D4B31EE6DB2356DC6D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:02 +0000
ROA not before: Mon 26 Sep 2022 12:55:02 +0000
ROA not after: Mon 25 Sep 2023 13:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:2a5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2f:58:ba:80:be:25:6d:70:c5:d1:d4:b3:1e:e6:db:23:56:dc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:02 2022 GMT
Not After : Sep 25 13:00:02 2023 GMT
Subject: CN=D8ABDFA94B226045910AAD7A195515CE16DD0576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:65:f0:58:3f:b9:aa:43:85:f5:28:28:9b:
60:e9:e8:c2:04:06:d7:61:47:98:6f:d0:ce:40:47:
fa:00:fc:21:8b:c1:b0:28:34:e1:14:ec:f1:72:06:
7b:6c:b8:4d:fc:cc:5e:ed:04:02:aa:46:0d:1b:15:
30:86:ea:00:ab:62:7c:a2:d7:5f:b6:43:5d:f9:15:
5a:e1:5c:47:ec:8a:ac:89:04:dc:68:c2:27:73:4d:
cc:6f:ea:c8:21:09:ca:e6:14:3c:46:ea:3c:88:c8:
27:c6:94:80:dc:43:a4:be:f8:79:2c:5f:13:d1:28:
2a:25:32:6a:88:fa:7e:04:59:dc:ab:84:44:d9:3b:
46:3c:95:ad:88:91:c1:e3:1f:f9:42:19:0c:52:ae:
f9:e0:ed:0b:6a:ab:28:9f:e0:ee:2e:a1:68:86:ba:
81:a3:9d:df:8d:57:03:8e:f5:f4:7e:99:80:1e:59:
92:76:30:4c:6c:c5:04:c4:71:9e:42:ca:d9:5b:d3:
a9:6f:63:83:19:2d:78:cb:78:27:f3:76:ef:a3:ed:
f3:2d:be:63:5c:cf:1f:98:28:25:31:13:71:f1:d5:
29:13:41:7b:bc:1a:eb:ee:e9:25:f9:7e:c9:75:1b:
e2:43:e2:16:54:9f:57:4d:43:9f:f7:b1:c3:3c:5e:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AB:DF:A9:4B:22:60:45:91:0A:AD:7A:19:55:15:CE:16:DD:05:76
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2a5::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9c:a9:99:b2:65:b9:71:c0:c0:eb:af:08:c4:12:99:0a:20:
df:7b:b3:61:7d:d1:cf:a9:49:27:2f:d2:80:53:10:6a:53:0d:
bc:08:09:bf:06:51:42:64:5f:d5:d9:fd:b7:eb:fd:00:f3:ae:
b1:dd:9d:a2:40:91:5b:a0:43:41:10:a6:78:87:38:79:d0:95:
b3:62:c3:8d:f6:38:66:43:cb:05:de:3d:f2:85:b5:4b:f5:f9:
29:0c:e4:3f:99:b6:a9:05:16:b6:9c:85:0c:8e:7c:26:2e:db:
01:c1:86:f2:bd:72:7c:9c:12:64:23:5e:a9:3b:02:68:ca:f0:
88:e7:1e:43:2c:b5:23:f9:e6:76:40:dc:cc:93:bc:36:fe:4b:
65:c0:23:ab:95:6c:ac:a2:98:fd:84:d3:85:b2:78:d2:ed:b9:
09:a3:fd:55:1f:53:03:89:59:fc:ef:c9:a6:27:97:f7:0c:4e:
5f:2e:15:d3:29:7f:a9:14:a1:bc:de:c4:d3:91:6f:18:a1:b6:
1c:b8:97:c7:6a:f2:5e:39:85:2b:62:11:c9:72:3f:6e:80:43:
27:ef:4f:05:87:04:b0:1e:66:0c:18:75:21:ac:23:cb:08:8f:
7f:60:28:4b:eb:34:bf:c3:45:46:9f:a1:67:6a:91:8a:3e:cd:
a7:a9:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org