Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OQ3I2e6ezjvEWcu0BZcuEXtsQnXVIIkYHxl+0FiwgMk=
Subject key identifier: 90:6A:1E:A1:F4:86:48:6D:8C:17:2C:38:95:AD:C9:A6:BC:92:2B:6B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6D48DDE3703F7F8AFF6CDD8BDA8C28FDBB452CF1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:07 +0000
ROA not before: Mon 26 Sep 2022 12:55:07 +0000
ROA not after: Mon 25 Sep 2023 13:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:2b3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:48:dd:e3:70:3f:7f:8a:ff:6c:dd:8b:da:8c:28:fd:bb:45:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:07 2022 GMT
Not After : Sep 25 13:00:07 2023 GMT
Subject: CN=906A1EA1F486486D8C172C3895ADC9A6BC922B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:4b:3a:2f:fc:03:05:47:63:37:bf:4c:a0:
cb:f9:e3:28:7f:1a:c5:d4:85:0f:84:53:a7:75:6f:
3e:3f:76:27:a7:79:e7:27:33:53:d5:4e:10:8e:58:
3f:2c:24:25:07:21:43:99:48:00:8c:bf:89:8d:1d:
2e:9a:ad:2b:d4:d6:57:1c:be:69:5f:0f:83:9b:1b:
3a:56:ed:53:dd:3a:37:9f:c2:ea:26:ec:20:2c:f6:
4b:fc:cd:e1:14:3a:be:95:52:f7:c3:cd:dc:3d:88:
c3:7a:86:3a:db:3b:2d:f0:ef:6e:2b:d8:50:c5:ab:
4b:45:7b:cd:57:e3:20:74:2d:e8:93:40:d5:52:3d:
ac:c3:f9:b2:31:4e:13:6c:29:9a:fc:0c:5f:78:da:
d1:86:09:62:a7:3a:ea:f8:50:9d:f6:3a:54:a0:ae:
e7:cb:86:ce:b0:79:12:2e:e1:36:8e:9b:7c:f1:87:
26:0e:b8:9c:01:f2:9d:16:a7:a6:38:67:2f:a3:6a:
9d:46:2d:01:5a:b7:cf:70:9e:1d:19:6e:3c:1a:05:
09:e0:40:81:d7:97:9d:f3:6a:28:c2:de:f5:df:84:
27:a2:1e:8c:4e:69:40:c7:74:4b:f5:71:21:00:79:
5b:16:43:76:e7:03:c4:41:3f:17:19:96:24:29:fc:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:1E:A1:F4:86:48:6D:8C:17:2C:38:95:AD:C9:A6:BC:92:2B:6B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b3::/48
Signature Algorithm: sha256WithRSAEncryption
78:3e:fc:18:86:98:04:ce:a3:a6:82:59:a2:0c:8b:c4:4c:d0:
ab:f5:73:b9:f1:4b:ba:6a:68:e2:18:9f:88:f2:cd:f3:ba:54:
d4:1e:2d:37:b6:fb:ce:a8:c9:f6:ab:80:27:71:fb:fa:21:2f:
cb:2f:b2:7e:19:3a:84:6a:7f:02:63:68:a0:21:16:49:12:d8:
df:aa:64:62:cf:2f:46:80:a7:49:10:4d:02:16:a9:59:f6:2a:
d8:a3:90:2c:48:70:63:98:12:97:07:d6:e9:f3:fb:cf:0a:c7:
8a:f0:91:0c:49:2c:bd:37:b6:88:f4:6b:7e:93:0b:ae:38:7e:
17:79:d2:04:1f:29:e1:78:6e:8a:d9:57:7a:1a:55:9e:25:31:
3c:5f:10:93:18:41:34:a3:e4:9f:22:c2:90:03:23:a2:05:30:
90:ed:19:50:bf:f2:34:bf:4f:84:71:af:0c:66:11:7b:87:5c:
64:13:11:8b:c4:79:db:b2:f0:37:f7:5e:ae:37:9a:53:3e:3f:
3b:aa:02:85:9f:c7:5c:70:9b:42:54:8e:84:5b:c5:b7:9d:d7:
79:4f:41:e6:65:00:c2:0f:d7:3f:ce:e9:75:e8:3d:b9:de:ac:
99:d4:93:1b:a4:d0:f0:78:8a:f5:15:ec:38:a3:27:bb:b4:c9:
d9:31:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org