Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: R+3Cz1WhorqzyLBdIg2y8gObukJn6178mq2nW9GFSSc=
Subject key identifier: 7A:A6:F0:78:C3:4C:C8:35:27:0A:21:04:DC:23:C0:39:BE:5C:68:25
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3BE1AB29996348E7A460E40AE581E1489699535B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:03 +0000
ROA not before: Mon 26 Sep 2022 12:55:03 +0000
ROA not after: Mon 25 Sep 2023 13:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:2ac::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e1:ab:29:99:63:48:e7:a4:60:e4:0a:e5:81:e1:48:96:99:53:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:03 2022 GMT
Not After : Sep 25 13:00:03 2023 GMT
Subject: CN=7AA6F078C34CC835270A2104DC23C039BE5C6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:8e:fe:0c:f2:4c:09:90:04:0d:15:86:bb:
b6:1b:34:e7:04:15:d4:72:71:ec:f6:07:37:91:46:
f9:f3:52:59:e3:6b:aa:21:41:55:8c:ca:7d:67:b9:
63:55:73:70:e6:db:fa:b2:85:00:d4:eb:14:b0:99:
5d:2e:dc:47:a9:85:c2:05:03:4e:57:43:9a:70:95:
9d:87:7f:29:2d:3c:db:83:62:b6:82:4b:65:0d:1d:
15:4e:07:ca:af:bd:49:ff:40:bd:e2:98:f2:c6:01:
2a:75:f3:07:46:18:56:76:40:53:24:6d:99:35:ad:
75:66:ab:c4:4e:1e:cc:c6:99:fa:bc:3d:bf:4f:2b:
2c:5a:b6:c3:d1:7c:96:2c:07:62:27:e9:ec:db:84:
9f:99:d5:29:e9:30:1b:15:40:65:1b:87:ed:a9:60:
cc:41:77:56:02:2a:74:0a:71:2e:f0:08:b4:7f:4e:
62:5a:b6:7d:eb:d0:c2:c1:f5:e1:0c:2c:6d:08:cf:
75:0a:f1:c2:2d:33:bf:64:83:8e:ae:df:3e:7c:67:
10:62:46:cd:53:05:0f:c6:cf:1d:2c:20:60:7b:ce:
fd:7c:2d:b9:16:e8:1f:96:2a:1d:8e:60:f4:a3:82:
12:a8:93:40:73:cc:d9:d2:9b:fd:42:ba:db:0c:e4:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:F0:78:C3:4C:C8:35:27:0A:21:04:DC:23:C0:39:BE:5C:68:25
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2ac::/48
Signature Algorithm: sha256WithRSAEncryption
ac:30:9b:b2:98:13:43:b2:9d:5e:17:14:34:f0:82:cc:1f:6d:
46:18:13:01:0c:02:cf:20:51:ee:89:bd:cb:07:6f:bd:15:63:
a6:77:16:18:c8:09:51:dc:4f:08:46:88:90:4e:4b:08:d0:ba:
c3:ab:9c:68:17:f4:88:90:19:9d:06:77:df:00:59:84:71:4c:
1c:e1:cd:0d:70:cc:d8:60:c1:84:a2:40:cc:3c:e5:74:04:b1:
5f:ff:8b:dc:31:93:7e:e9:b5:5f:7f:7b:1b:07:cb:96:2c:e4:
1e:7e:38:cf:02:bc:3a:40:12:f5:f9:50:d1:b6:7e:7d:6b:f6:
ea:30:ae:90:3a:1f:2d:89:28:2a:6c:37:98:b1:40:35:75:1a:
6a:61:9f:f4:a5:9f:dd:5a:bb:05:c4:3a:50:4f:bf:70:ee:ff:
86:f6:34:ff:ee:09:73:b9:42:21:f1:0b:9c:4f:7a:06:1d:26:
fb:67:85:6d:6e:e1:8d:04:5d:fb:ba:bc:af:17:2f:d8:e8:a4:
9b:96:23:b9:f8:20:fd:de:28:b1:eb:c2:6c:44:03:22:23:e7:
76:38:3c:ad:cf:f4:30:8c:7b:32:8a:a9:d4:3f:73:1f:a3:d1:
4b:3d:8d:c7:b3:44:60:98:7f:ad:ab:47:68:63:d5:21:b5:c8:
42:c8:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org