Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YqeM5VENtve2CkThJpIsI4IIGG0nkmXERO4qJEpDbzU=
Subject key identifier: 47:F7:DD:F3:F1:64:EE:6B:B3:E6:97:6A:A4:6E:6A:B5:3A:05:49:1B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 35E1754A7BEA4585F7660349616F8E524E76886F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:05 +0000
ROA not before: Mon 26 Sep 2022 12:55:05 +0000
ROA not after: Mon 25 Sep 2023 13:00:05 +0000
asID: 59282
IP address blocks: 2400:d680:2c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e1:75:4a:7b:ea:45:85:f7:66:03:49:61:6f:8e:52:4e:76:88:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:05 2022 GMT
Not After : Sep 25 13:00:05 2023 GMT
Subject: CN=47F7DDF3F164EE6BB3E6976AA46E6AB53A05491B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:91:ef:d7:36:9a:a6:8d:6f:65:26:25:ef:
0d:56:bd:82:7d:e0:52:1f:d4:7b:5a:b8:67:74:6e:
05:1e:73:16:4a:d0:39:f2:13:03:9a:57:cd:21:06:
60:78:72:af:ce:25:88:8d:a6:33:ce:37:11:63:d3:
f2:21:43:15:53:d8:53:5f:e9:fb:ea:c3:ba:a2:e5:
b2:d6:92:2b:19:b5:17:02:2b:5e:f6:81:10:79:6c:
62:c7:a3:8f:91:9e:36:1c:50:9d:8a:b2:f8:f8:f0:
c8:1d:9f:51:52:e8:fe:09:24:b6:26:4a:df:3c:09:
4d:4c:e9:25:f2:c3:c4:b5:99:af:90:ff:cb:da:c0:
78:42:31:20:a5:cb:e5:23:1d:bf:61:85:66:63:6a:
2c:1c:af:f3:ca:01:5c:69:12:a5:56:94:e0:c8:3e:
17:97:a3:09:05:c4:86:54:b0:ed:b9:70:98:6d:21:
9f:77:f0:ca:27:49:a3:e1:05:1d:ad:72:b2:ab:eb:
78:aa:61:a5:82:75:08:fa:f9:b6:ee:c5:a6:24:d8:
1c:f7:2d:d9:4c:db:9d:97:e0:25:a4:de:54:9b:4f:
a8:de:f6:b9:c6:44:10:9b:d5:87:61:39:94:69:48:
b0:5a:69:79:ce:5b:f7:e2:62:ea:1c:33:9f:b0:3f:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:DD:F3:F1:64:EE:6B:B3:E6:97:6A:A4:6E:6A:B5:3A:05:49:1B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2c6::/48
Signature Algorithm: sha256WithRSAEncryption
24:68:63:a4:33:2d:7d:33:bb:81:b5:7c:1b:da:7f:7c:65:89:
de:3d:9e:c6:8e:02:89:5e:e9:7e:8d:a8:4d:03:e7:0f:20:54:
e7:48:73:76:15:48:2a:52:53:ba:01:04:8a:1e:2f:90:53:df:
7b:a2:fe:46:39:ea:09:e5:d7:af:dd:ae:b6:47:5b:98:11:5d:
23:e3:cf:c6:84:c3:ca:ba:22:e2:c8:ab:d5:48:96:b1:0d:73:
19:7e:98:09:ad:68:3e:bf:c7:c5:f0:1b:41:1d:4d:16:6c:4f:
ab:85:76:7a:87:7c:1b:37:92:a6:5e:54:c8:06:46:0b:a1:38:
52:50:10:83:ff:ca:77:25:5e:6b:6f:6b:c1:d5:2a:73:9d:d7:
5c:63:2b:dd:e5:03:21:74:ac:7b:46:a5:43:ce:0c:0f:88:f5:
7b:84:a7:a7:a0:92:10:12:81:8d:ea:75:7b:86:a3:68:21:cb:
1a:d4:a5:62:cd:14:49:43:bc:40:80:07:44:2a:2c:2c:62:fe:
79:49:19:6c:63:99:e2:ea:9d:2e:dd:c1:e6:5d:65:54:f0:59:
30:5b:db:b6:5e:42:15:a2:3a:73:d4:06:8d:18:c7:e4:56:93:
4a:f4:72:87:e3:56:fc:fc:0b:9e:e8:92:83:d8:94:d7:95:a6:
e8:61:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org