Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ozgG4+c3gBJAwSaTIBzsIAByWsTznDPLc/raGnXhbVE=
Subject key identifier: 86:F3:DB:7C:4C:E5:3B:86:1A:88:77:0F:F1:E3:DE:86:08:66:0B:F6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5E23F037B15525D17E709D6F7AA2229ABBF367A6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:07 +0000
ROA not before: Mon 26 Sep 2022 12:55:07 +0000
ROA not after: Mon 25 Sep 2023 13:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:2ba::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:23:f0:37:b1:55:25:d1:7e:70:9d:6f:7a:a2:22:9a:bb:f3:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:07 2022 GMT
Not After : Sep 25 13:00:07 2023 GMT
Subject: CN=86F3DB7C4CE53B861A88770FF1E3DE8608660BF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:b0:c7:c5:66:4e:54:68:12:b5:14:c6:09:
a9:62:6f:aa:1d:ec:70:ea:25:86:57:f6:12:85:2b:
37:e3:94:96:82:64:a3:f5:de:58:15:0e:fa:0e:4e:
97:8c:b6:28:17:f5:4e:e7:08:8e:2d:a6:8d:88:0f:
71:5b:9f:b5:20:25:b3:f5:4e:7a:37:6e:1d:b3:f2:
ef:b6:1a:96:4e:89:d2:12:b1:4d:3a:46:81:21:38:
0b:82:f6:39:37:7c:89:12:98:8b:e9:ad:8c:81:80:
a2:46:80:2b:f0:07:0d:7d:8a:47:13:09:aa:97:8b:
6e:1d:7c:47:c7:fc:ef:72:1f:4b:23:6d:90:1e:c9:
db:b7:61:95:f6:28:7e:cd:aa:20:89:fc:d4:f3:79:
00:fc:0b:8b:91:66:36:8d:cb:ec:ff:e2:81:36:05:
24:fa:0d:3e:c0:33:36:fb:a2:dc:1b:f9:e3:49:97:
65:cb:be:48:7c:cf:1c:b8:70:86:7f:31:04:27:58:
9a:1c:4d:55:1a:4a:4e:db:6f:9d:b8:b0:1c:1b:ca:
93:4b:90:80:5e:6a:ea:4e:75:1b:36:02:55:8f:c2:
dd:5c:2e:bc:0c:08:12:51:63:3f:5e:5d:2e:92:c7:
49:41:d5:52:2f:e0:26:ba:42:5b:bb:06:6d:2b:b4:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:DB:7C:4C:E5:3B:86:1A:88:77:0F:F1:E3:DE:86:08:66:0B:F6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2ba::/48
Signature Algorithm: sha256WithRSAEncryption
9f:0e:6f:8d:8b:2b:e5:5e:21:99:44:d5:49:fd:d0:92:db:0c:
4c:32:83:e9:c3:a1:11:6c:0d:29:22:5b:60:cd:cc:fe:48:a1:
3c:dd:69:95:a0:00:96:fe:f8:ce:38:e4:93:45:74:68:c1:2a:
b4:0b:bb:0b:1b:53:41:f3:14:ff:ad:70:1c:2d:c7:04:b9:b4:
9d:6b:7d:d1:4f:91:ed:8f:9c:8a:08:ac:b9:98:32:77:fb:41:
e8:33:9b:65:4d:ae:72:13:71:37:42:07:53:7f:9d:6c:0d:d5:
8d:8c:05:eb:d9:22:f8:9c:6d:e1:2a:f0:6f:c2:eb:a8:02:02:
26:69:3d:c9:98:81:16:c3:a0:b1:e5:25:94:77:2d:ac:f0:02:
64:3b:e6:68:35:89:5b:18:b1:3f:b0:8f:4f:9b:b3:b1:22:96:
6c:3a:8c:69:b3:e5:87:bc:ff:56:59:20:79:2a:fc:68:90:9b:
48:15:9b:e2:8e:64:d5:02:3c:47:54:ac:61:73:35:bb:9d:dd:
b7:90:6c:1e:e3:80:a6:16:a0:b6:b4:96:da:e6:d5:8c:43:87:
e8:83:21:f0:c9:9c:53:fc:cc:c7:7a:ec:80:6d:f3:ad:0a:cb:
7d:49:f1:bd:b9:99:62:3a:71:2f:3b:40:69:e0:e0:50:dd:3d:
83:8a:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org