Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: JGS1sooQS94J62IoVMCopZTZjB0A1YLPb0X2luYWrEQ=
Subject key identifier: F2:C3:11:56:FF:01:80:FC:76:65:14:5F:A8:E1:8B:DD:6E:D9:72:21
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2A9707291025B6DE3AFB36ABA46545DAF42E4883
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:20 +0000
ROA not before: Mon 26 Sep 2022 12:55:20 +0000
ROA not after: Mon 25 Sep 2023 13:00:20 +0000
asID: 59282
IP address blocks: 2400:d680:2b7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:07:29:10:25:b6:de:3a:fb:36:ab:a4:65:45:da:f4:2e:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:20 2022 GMT
Not After : Sep 25 13:00:20 2023 GMT
Subject: CN=F2C31156FF0180FC7665145FA8E18BDD6ED97221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:5c:5b:8d:42:dd:70:78:d6:7b:42:7c:92:
21:6c:e4:40:4e:53:75:0a:1f:d3:a7:c3:3f:42:25:
ed:5f:c1:d8:ec:d9:f2:2d:a5:ac:14:e4:49:f2:6a:
36:18:c6:97:5c:aa:57:96:a3:26:59:c6:ad:9a:52:
f1:45:6f:4b:62:42:b1:38:61:b7:20:7a:63:a0:4e:
11:1b:04:3c:dc:7d:af:d3:6d:60:7d:a2:fa:4c:90:
44:91:27:25:23:20:58:b9:c7:19:69:ea:31:0f:f1:
1c:88:7a:37:65:91:76:a5:72:ef:7b:f1:d5:00:fd:
ee:84:c0:dc:7e:f0:f5:92:22:ae:7a:31:6a:04:f2:
ba:14:cb:64:ed:0a:64:2a:37:10:82:77:76:b4:72:
f3:9e:51:ac:32:87:5b:3a:e9:ae:2e:a3:78:26:93:
aa:a6:1c:52:8c:40:32:68:51:3a:67:00:1e:33:a7:
f0:61:e3:61:b4:36:57:ae:b2:0c:1a:ec:94:6e:de:
54:ec:5f:db:37:cf:4b:01:fa:78:e9:91:cf:c5:9c:
91:d1:29:09:87:14:b2:6f:e8:ce:93:93:06:26:cd:
41:1a:c5:92:50:e2:09:bf:1c:5e:e6:b1:10:03:ae:
3d:11:6e:3a:68:5f:37:c6:49:08:20:47:29:bd:9e:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:11:56:FF:01:80:FC:76:65:14:5F:A8:E1:8B:DD:6E:D9:72:21
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b7::/48
Signature Algorithm: sha256WithRSAEncryption
56:7f:95:fc:35:6c:0a:fe:6c:3d:56:6b:46:ba:dd:e1:ff:b6:
9a:89:69:72:24:73:21:8f:23:7c:fe:94:70:c9:9a:8b:f8:8a:
8f:ac:7e:93:43:91:61:30:43:55:84:80:1b:8c:85:40:0c:d6:
65:65:54:b3:10:59:41:b8:89:e1:e3:89:c7:6c:28:dc:cb:c1:
74:88:04:42:01:16:19:fb:f4:85:3d:4d:b1:37:b8:97:22:c8:
7d:49:28:53:56:f7:9e:3c:76:a8:4d:ab:05:bd:6b:80:51:b5:
e3:4e:5f:11:b2:87:6c:7c:51:7a:e5:39:11:20:40:a1:df:4b:
4a:5c:33:6d:7e:a2:12:03:e0:89:89:c6:b7:67:5f:ce:80:d0:
5a:5b:03:33:b0:fc:23:32:47:2d:12:a0:54:ea:3c:17:27:76:
fa:96:00:fc:03:99:97:aa:2f:0e:b4:a6:ee:56:1c:cd:29:1d:
ef:b9:58:bd:ef:23:90:30:25:01:d5:2e:f5:7e:94:0a:41:79:
1c:31:8f:6d:f7:2a:de:8f:9e:0b:e8:c1:d2:ee:cd:b3:84:75:
8e:3e:51:57:25:5a:52:c0:74:f1:20:21:4c:21:bd:c0:2d:9b:
b9:93:54:29:ea:c0:3a:d9:c6:b7:06:bf:12:b9:16:62:a0:19:
4e:73:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org