Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +hukDk7z/Hf596tosj8B4CxtdxRwOY6IoHmVUCFxzw0=
Subject key identifier: BF:1A:C8:6D:42:C3:3A:CF:29:61:AF:25:7D:35:35:10:0B:B8:7E:E9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 20302598431E8D33AE5ED9FE8C0EFFC2DC3AC5EF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:22 +0000
ROA not before: Mon 26 Sep 2022 12:55:22 +0000
ROA not after: Mon 25 Sep 2023 13:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:2cd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:30:25:98:43:1e:8d:33:ae:5e:d9:fe:8c:0e:ff:c2:dc:3a:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:22 2022 GMT
Not After : Sep 25 13:00:22 2023 GMT
Subject: CN=BF1AC86D42C33ACF2961AF257D3535100BB87EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:c5:a0:5b:a5:e7:7e:49:2c:11:cc:d0:2e:
7f:95:50:5d:cb:55:35:c9:ca:a5:29:c8:fa:5e:ee:
6d:78:00:4b:86:ca:06:f4:37:3b:9a:5a:38:61:54:
28:df:c9:61:07:48:7e:3d:09:93:6f:15:09:6d:69:
a2:4f:29:0a:b7:0c:72:36:31:67:16:e6:87:b6:8e:
5d:79:9c:e2:d9:1c:66:63:10:05:4e:d9:85:24:43:
aa:b7:b3:c2:5f:68:e8:b3:f9:64:3b:7c:c4:ac:fc:
26:8a:e3:cc:d9:47:6c:fe:48:fc:2f:94:86:d2:ff:
34:36:42:fd:d5:34:c7:b2:91:8c:b2:9f:90:bc:72:
d8:5c:df:a3:48:06:ee:e5:d0:84:7f:19:ea:2f:2c:
35:38:ff:11:54:97:53:2b:08:53:3c:ac:42:c9:fa:
2e:ec:71:1d:9f:50:76:89:fe:fc:a9:48:d2:f5:e4:
7f:9c:c0:f4:0f:f0:a6:7c:40:c1:fa:58:f2:84:90:
eb:32:5d:f7:67:a3:fd:fb:64:b7:f1:20:29:31:88:
0e:13:50:27:ba:17:5d:69:6b:be:7e:51:06:ed:a7:
23:9b:3f:44:3f:ed:7f:6d:b6:ca:26:7a:da:61:2b:
e0:dd:7d:3a:39:fd:26:c2:a1:0f:af:27:06:41:67:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:C8:6D:42:C3:3A:CF:29:61:AF:25:7D:35:35:10:0B:B8:7E:E9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2cd::/48
Signature Algorithm: sha256WithRSAEncryption
3e:44:37:4e:17:ae:87:66:2a:29:db:1e:dc:f1:46:70:a7:81:
3a:f7:cc:92:98:fb:54:0f:06:d8:b7:02:76:41:e4:13:e9:7d:
4e:6e:e3:cf:5f:bb:e3:8f:ed:5e:57:47:fb:6f:3b:78:ae:93:
0a:6a:7a:5b:7d:49:f7:77:83:e9:46:84:ee:65:99:08:4a:87:
c6:88:3e:1c:e5:2c:e6:c9:3c:c3:b7:f0:ea:99:3f:38:09:d9:
6c:a7:5d:a8:cd:49:67:f2:ae:10:83:43:72:ed:ca:be:a7:d7:
66:7f:e8:4f:3a:16:12:6a:03:24:9c:4a:29:a1:75:23:97:6e:
f4:21:51:b9:40:5d:7e:5b:e9:4b:8c:ba:1a:a1:45:dc:47:0f:
91:ea:cf:00:c6:a8:0c:a4:4f:bd:e0:2d:16:47:7d:54:c0:e2:
b6:60:dc:75:20:9d:f6:3d:63:48:39:55:2b:d6:7c:93:6d:4f:
e1:c1:a7:76:b5:32:96:40:a6:ea:4b:ee:12:36:9a:30:c8:21:
e2:67:f3:d7:51:4a:c7:d6:4f:0e:79:d2:99:73:b2:c0:07:c6:
fa:23:92:36:ed:4e:aa:c3:60:09:97:4a:54:c2:4a:b0:86:48:
41:98:db:44:76:f5:e4:b6:8c:0d:e4:73:24:40:34:bb:f7:19:
cb:07:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org