Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: N0ENeyXkGI+X70vuehJwsbYAX+axqHI1FzpE01tFN/M=
Subject key identifier: 98:D4:83:28:08:6C:4F:0A:3F:65:69:03:C1:63:09:EC:1E:A6:90:D7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 86A08AFA2817E70533ED7D2C66FFD24F712590
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:10 +0000
ROA not before: Mon 26 Sep 2022 12:55:10 +0000
ROA not after: Mon 25 Sep 2023 13:00:10 +0000
asID: 59282
IP address blocks: 2400:d680:2b8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
86:a0:8a:fa:28:17:e7:05:33:ed:7d:2c:66:ff:d2:4f:71:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:10 2022 GMT
Not After : Sep 25 13:00:10 2023 GMT
Subject: CN=98D48328086C4F0A3F656903C16309EC1EA690D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:c1:ec:85:1c:fa:92:04:b9:57:f6:4c:6b:
6a:39:7f:7e:0d:5f:d6:89:f6:7d:a4:c0:3a:49:ae:
22:e8:86:4c:34:a9:95:b4:8a:d0:e3:40:66:88:db:
b4:3d:b3:66:aa:93:c2:eb:4d:54:c2:99:8e:63:cf:
19:a3:d7:79:5b:ad:60:d8:7c:12:bc:7d:4e:c4:aa:
64:a8:5c:24:9d:1a:dc:92:9b:97:41:cd:19:06:83:
8e:14:dc:8b:82:a4:ef:26:25:cb:ed:c4:53:6a:16:
91:9e:42:ff:d2:61:af:9c:dc:08:90:69:13:a0:10:
df:33:66:0c:e8:2c:0b:e2:13:9c:f2:35:11:6a:0d:
cc:ff:eb:48:8e:cd:35:f7:c5:19:73:08:08:f7:85:
56:0a:cf:33:57:65:08:de:e3:db:8e:d1:4b:1b:4b:
6d:40:79:4c:e7:ed:38:3d:29:44:84:7b:47:3b:1b:
d5:f3:27:82:26:6f:28:f3:28:f8:d4:e6:0a:21:24:
11:30:98:f5:95:46:b7:b4:54:ba:a0:0a:40:d3:e4:
47:9c:43:ac:35:44:c3:99:5e:2f:8b:99:e0:d9:49:
2b:f5:76:6c:48:c4:cd:b7:1b:6e:92:da:7b:cc:cc:
f5:c8:b3:72:4f:1c:97:0c:da:c3:cc:f9:a1:26:c8:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:83:28:08:6C:4F:0A:3F:65:69:03:C1:63:09:EC:1E:A6:90:D7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2b8::/48
Signature Algorithm: sha256WithRSAEncryption
63:29:8d:f2:36:3c:bf:8e:7c:90:91:0c:d2:5d:14:1c:08:bc:
3a:67:1b:9f:ed:d8:4b:d2:bc:e6:32:ff:e2:5d:08:be:19:fe:
e6:cf:eb:b7:59:d0:6e:9c:09:22:4d:1f:7c:11:6f:2b:22:5b:
d0:c1:28:23:36:5f:a6:5b:54:e8:43:28:71:ac:e7:ed:81:15:
00:42:6e:f5:18:81:77:de:f4:dc:99:1f:d1:8f:7a:8d:c0:a5:
79:49:ea:5f:f2:f8:69:3c:fd:2d:72:ac:5f:59:58:b5:de:b7:
78:31:8d:cd:05:5a:07:87:7a:f5:75:fe:e3:bd:b3:89:12:c5:
3a:65:e5:28:23:da:be:af:36:43:f8:89:80:0e:f6:d5:c1:04:
af:58:5d:c9:3f:bb:12:5d:4b:c1:4d:e9:96:6b:b4:e1:ac:7a:
bc:c3:06:c7:61:0e:f3:e2:ef:13:50:53:45:e6:39:e7:77:86:
a2:a5:c7:44:5d:5d:72:d4:95:ee:3d:17:be:67:38:8f:59:72:
2a:ec:cc:d9:4e:10:d5:97:9b:b1:91:dd:32:84:82:ec:b0:e9:
de:59:37:ca:79:4b:17:fb:c6:91:a3:e0:20:83:fa:56:12:4e:
ef:fc:32:f9:94:62:75:3f:39:70:2e:f6:7f:ce:33:de:bf:f2:
6d:fb:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org