Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: UwLKjvGmJNNk3WCAkYhDaFd+5up1okmdoTSFDvYzNS4=
Subject key identifier: 19:EC:AA:48:4D:EF:12:F1:3D:60:E6:23:0F:C7:B2:04:1B:9C:6C:45
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6E3C908A4859A4F4A536C1006291D851E171D782
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:15 +0000
ROA not before: Mon 26 Sep 2022 12:55:15 +0000
ROA not after: Mon 25 Sep 2023 13:00:15 +0000
asID: 59282
IP address blocks: 2400:d680:2a6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3c:90:8a:48:59:a4:f4:a5:36:c1:00:62:91:d8:51:e1:71:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:15 2022 GMT
Not After : Sep 25 13:00:15 2023 GMT
Subject: CN=19ECAA484DEF12F13D60E6230FC7B2041B9C6C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:4c:df:63:e5:18:61:b3:16:6b:c1:2a:c4:
da:72:8c:fc:d5:0e:25:a9:c5:e3:3c:ed:95:1f:62:
1f:ba:06:1f:20:64:fc:2d:e9:7a:5f:cd:89:bc:cc:
bd:e6:52:71:dd:51:82:63:88:ed:8f:d4:5c:5d:4d:
14:89:f3:35:8c:7d:76:21:25:e6:95:8b:a5:bb:d6:
6f:aa:32:1a:be:64:34:de:8e:45:50:69:e7:fa:66:
92:f0:06:0a:82:0a:d7:1f:c8:81:1a:0d:ba:eb:d2:
f8:20:df:4b:ac:eb:7b:2c:b8:89:ff:17:62:d6:d5:
9e:90:23:e9:58:0e:89:8d:dc:8c:c7:68:f5:30:88:
b8:3e:cf:81:5f:04:9e:65:9d:ba:13:00:95:e5:0f:
2f:cb:b3:5c:c0:db:38:98:26:02:76:9c:97:62:9b:
b5:1f:be:67:e5:58:e3:a7:d1:54:e1:f7:98:24:f4:
15:b9:7d:e9:0b:20:2d:e6:9e:48:75:51:6a:e9:d2:
2a:34:34:84:50:98:2f:a9:71:42:36:50:21:dc:ea:
85:04:28:34:77:12:c6:8d:df:3c:41:05:31:ea:08:
6c:5e:7d:79:34:9a:ca:96:43:c0:ff:e5:29:35:6e:
5f:a3:2e:e3:f5:21:7b:6c:c7:a7:96:11:06:4b:8b:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:AA:48:4D:EF:12:F1:3D:60:E6:23:0F:C7:B2:04:1B:9C:6C:45
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2a6::/48
Signature Algorithm: sha256WithRSAEncryption
4a:be:9c:8b:c2:80:7c:b4:ad:f4:a6:dc:eb:a0:8b:b2:d0:f3:
f4:c7:66:63:c9:ea:f2:61:fe:07:71:1a:8e:88:a3:1a:37:d4:
ab:f6:d2:82:98:aa:77:f8:0b:b2:74:fa:d5:66:b6:5e:7b:05:
45:fc:59:60:06:83:e9:72:00:f9:59:8c:2a:f1:3a:35:2c:87:
77:c7:98:96:7b:9a:45:39:9e:fd:1a:47:fe:14:0b:cb:4a:ac:
14:90:5d:6f:1c:58:1b:bd:82:39:85:ce:05:c1:a2:0d:21:d0:
d4:91:b4:c1:26:a1:5f:47:19:e9:bb:37:80:dc:7e:91:94:e5:
db:61:5a:68:02:4f:c4:68:7a:8b:bf:67:54:1d:82:92:97:c1:
33:3d:0d:b0:f2:a5:aa:8b:58:16:3c:92:fd:5e:e4:c8:3c:6b:
12:7a:ed:ee:d9:66:a6:ff:6e:ff:49:0c:19:fe:41:ec:38:35:
5b:7b:f3:5b:88:2d:68:bf:56:ea:40:cd:84:c0:5a:30:ed:97:
a9:4a:f2:54:9d:a3:a5:c9:27:ab:32:43:53:d2:4a:55:24:23:
2c:cf:9d:df:08:5e:8a:ef:72:51:99:7f:a5:fe:6b:0e:04:3d:
15:bb:09:3b:d0:0e:5a:12:5a:42:90:99:18:8e:dd:35:d4:9d:
9c:60:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org