Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Vol9nbVFqooCciMB7mJaCcQID9bVEgOU+kcXxf8GDYk=
Subject key identifier: E1:44:99:9F:22:DC:C0:72:A7:CC:72:EC:90:C9:DC:7D:25:35:F1:AD
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0B169F15787B3C1DF06CA71F735C0265452BFE8F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:18 +0000
ROA not before: Mon 26 Sep 2022 12:55:18 +0000
ROA not after: Mon 25 Sep 2023 13:00:18 +0000
asID: 59282
IP address blocks: 2400:d680:2cc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:16:9f:15:78:7b:3c:1d:f0:6c:a7:1f:73:5c:02:65:45:2b:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:18 2022 GMT
Not After : Sep 25 13:00:18 2023 GMT
Subject: CN=E144999F22DCC072A7CC72EC90C9DC7D2535F1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:f4:ce:4d:e9:25:90:b3:bb:58:ed:67:67:
82:93:17:83:97:4b:69:4d:76:9e:15:53:80:e1:9c:
84:4f:33:d5:eb:1f:9a:73:16:14:6b:58:3d:29:67:
fd:e1:ad:f1:68:d7:f1:95:d4:91:e1:a5:3d:1b:ae:
e5:7a:3c:84:5a:22:f3:0b:fd:c9:76:31:6a:0b:be:
b6:66:bc:c3:56:72:1f:50:7c:b1:d2:0a:72:26:71:
e2:ad:fc:23:2d:3c:ff:cc:98:14:8c:24:42:5b:d7:
13:95:fd:2f:53:10:ba:92:68:30:db:45:c2:0b:56:
e0:06:52:43:ec:bd:fc:5e:34:ad:54:ee:a4:8c:f7:
13:31:af:76:50:f2:3c:f8:32:6f:d5:91:31:5a:2e:
ca:bd:3a:c0:7a:06:f4:fd:03:de:bf:19:a8:3d:75:
41:aa:93:45:14:d4:2f:74:8b:29:c2:f4:8c:e6:7f:
07:8e:5f:a1:c2:3e:3d:93:e9:db:81:30:66:b0:95:
20:76:00:e6:29:bf:23:f0:ff:54:63:94:76:1b:80:
04:51:a1:1a:b1:35:06:ef:7b:2f:c8:9c:3c:8a:36:
9d:33:c1:b8:cc:13:74:2a:f6:01:63:d9:e1:81:c5:
2b:1e:8c:71:8a:b6:d9:f3:fe:9c:27:c4:ad:29:0f:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:99:9F:22:DC:C0:72:A7:CC:72:EC:90:C9:DC:7D:25:35:F1:AD
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2cc::/48
Signature Algorithm: sha256WithRSAEncryption
84:e6:98:9b:7f:e0:12:bb:51:69:5e:26:3f:a0:d1:78:60:56:
fb:ad:e2:93:77:8a:40:0d:e4:be:f9:ff:4f:5d:d4:71:e0:1c:
dd:14:46:7e:1a:e4:70:10:58:0a:c1:f3:7f:11:93:e3:bd:06:
11:ff:a7:ef:dc:a4:af:ed:83:bf:9b:74:79:d7:fc:8c:33:73:
8b:91:41:88:92:66:cd:24:b2:3f:5f:14:15:a1:78:12:65:a1:
dc:e1:44:91:a4:57:09:50:2d:73:4a:ed:5e:b0:79:ff:12:4b:
91:5d:ec:2d:79:ad:e1:30:b9:69:dd:b5:8e:f0:e8:d2:13:cc:
9d:d6:bf:48:5c:64:21:1e:6f:79:f2:42:b4:e6:c5:8a:9c:fe:
de:95:fc:14:58:dc:a4:9d:20:31:9a:97:6c:52:4e:86:03:53:
ce:3e:78:53:b9:c5:4f:a5:4f:67:82:95:6d:58:51:f1:88:2d:
2b:52:d1:f3:e7:24:7e:24:7c:dc:4d:c1:0a:18:4b:21:d4:03:
a4:53:11:58:02:72:0e:d0:7c:0d:e3:43:56:98:ac:43:f6:4c:
65:15:ec:87:58:dd:d8:9d:b6:13:14:5d:15:43:78:04:8e:fc:
93:29:b5:44:8e:0f:2f:b9:f8:df:1c:1e:16:46:83:8a:4d:fa:
40:96:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org