Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: uTNp9uVYh3mAnnhqn7X9yE02PcWU7ATp4bcZtNKuP/8=
Subject key identifier: 0E:D1:66:71:BA:D7:06:FB:8D:91:EB:89:A6:7D:B9:47:0A:69:2D:6C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5A5CAFEA9D90303796A55CCE49838B9A329B0173
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:17 +0000
ROA not before: Mon 26 Sep 2022 12:55:17 +0000
ROA not after: Mon 25 Sep 2023 13:00:17 +0000
asID: 59282
IP address blocks: 2400:d680:2b1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5c:af:ea:9d:90:30:37:96:a5:5c:ce:49:83:8b:9a:32:9b:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:17 2022 GMT
Not After : Sep 25 13:00:17 2023 GMT
Subject: CN=0ED16671BAD706FB8D91EB89A67DB9470A692D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:f6:d4:39:f6:c7:72:15:80:12:3c:d3:f2:
3a:7c:0b:b5:9e:43:bb:84:53:45:1a:96:1f:5b:73:
54:2a:cd:d9:c2:4d:f1:e7:97:6c:b5:6b:d8:68:78:
97:82:b3:a7:b1:41:a3:07:24:41:c6:03:84:99:3b:
aa:80:5a:26:38:5f:6c:8d:68:a4:35:16:4a:a1:e2:
80:2b:8c:4c:00:13:bb:77:5a:74:f9:ef:8a:74:72:
0c:01:25:2a:bc:a8:20:aa:83:e0:0c:b9:7d:ab:b8:
f7:a1:6a:b0:1a:c5:2b:30:19:1a:8b:55:bb:f5:3f:
0e:fd:96:4c:c1:ca:dc:f6:d7:4d:f0:76:26:5b:68:
6d:4c:09:94:18:cc:b8:6a:03:5e:18:b8:90:56:58:
09:f8:5c:21:59:fa:51:e7:b6:81:af:fe:6c:77:ea:
ec:05:86:1a:f3:86:11:73:9f:95:63:4e:e4:e4:59:
61:21:29:8a:9e:39:18:e9:20:d7:f3:4a:90:42:e0:
e5:9e:33:f6:73:2a:a4:31:31:58:2b:66:7a:de:3e:
47:cf:2b:59:b7:c8:3d:9e:19:d9:25:fa:68:31:76:
66:87:ca:38:cb:b3:71:29:79:b8:d7:98:2c:86:06:
43:3d:32:03:f5:fc:7a:a6:8b:7e:0b:f8:82:a0:98:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:66:71:BA:D7:06:FB:8D:91:EB:89:A6:7D:B9:47:0A:69:2D:6C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b1::/48
Signature Algorithm: sha256WithRSAEncryption
13:f1:af:c7:24:98:31:0a:74:79:8d:8b:ed:ab:64:7c:90:6b:
b1:fc:60:64:c0:f6:03:ac:d8:d7:fa:d8:91:55:4e:dd:a2:3c:
8c:ed:62:39:f5:9b:87:00:fc:f8:66:af:2a:fe:b1:98:49:37:
6a:77:9f:25:3a:15:1a:14:86:28:cd:c5:e6:2a:7a:f9:81:bb:
87:c4:9b:5d:e5:ac:ab:50:58:3c:45:e9:85:6d:6e:21:d1:94:
07:e1:0f:55:02:97:83:74:61:8f:ab:11:d0:7f:ed:13:b8:e6:
60:dc:04:82:6f:80:a2:41:18:7a:40:91:c1:db:0d:8b:69:ba:
3d:28:ed:bd:fc:49:07:6c:5a:00:05:db:c1:51:c8:c4:09:55:
9c:65:5b:73:5d:89:70:4d:b1:1d:26:80:db:8b:4e:21:08:9c:
39:c0:ee:51:6f:72:e7:63:c3:80:20:f2:3a:be:78:ba:fa:e3:
fa:1c:95:e8:90:f2:7e:fe:c0:95:88:88:c1:f2:6d:d4:60:9c:
d4:3f:d6:91:8c:ea:3d:cc:3c:3c:3c:19:f7:e6:59:ce:5d:60:
79:ef:d1:98:e4:46:2c:86:31:9b:b8:fa:4c:81:23:f4:d2:95:
8c:da:0d:92:dd:3f:55:94:e4:ec:b7:a7:85:77:b6:74:e2:a7:
a5:f1:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org