Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0M0u2hXsJujcy7H3rnSX9/hLZpZabc83/x5TsAlLEEk=
Subject key identifier: F3:31:CE:08:E9:0F:75:39:9D:6E:A2:A6:A8:46:5A:34:8F:37:3C:58
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 229E8EF350470EB7CC2934345983591577690B40
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:05 +0000
ROA not before: Mon 26 Sep 2022 12:55:05 +0000
ROA not after: Mon 25 Sep 2023 13:00:05 +0000
asID: 59282
IP address blocks: 2400:d680:2d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9e:8e:f3:50:47:0e:b7:cc:29:34:34:59:83:59:15:77:69:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:05 2022 GMT
Not After : Sep 25 13:00:05 2023 GMT
Subject: CN=F331CE08E90F75399D6EA2A6A8465A348F373C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:4e:f1:4f:70:95:e0:7e:c1:68:60:e8:6a:
af:ef:ae:d0:af:37:0b:37:bb:0e:3e:80:bf:ad:8e:
d5:d9:55:a5:c9:9d:c6:15:22:03:b8:e8:ee:b5:df:
5a:e9:71:52:cd:49:c8:20:31:1b:68:7f:05:e8:1b:
25:02:e4:96:95:0c:48:aa:d0:7c:82:eb:bc:fb:e5:
b0:bf:b8:01:f4:c4:1a:7f:a8:1d:aa:bc:ca:9f:1f:
3f:e1:77:de:66:c3:7d:63:e0:5f:8c:ee:72:e5:73:
67:78:42:85:71:b7:a1:f4:3b:d1:be:60:60:78:6e:
04:76:43:78:c0:a6:64:14:63:95:87:8f:b1:64:6b:
f7:f2:ea:31:0c:a2:35:4b:e8:80:bd:82:cc:47:03:
80:45:3b:03:52:44:ef:87:05:bb:12:34:89:2a:d8:
25:70:d6:6e:13:49:11:32:80:74:0b:c4:cb:6e:fd:
19:87:59:2c:fb:02:a5:9c:61:36:80:27:77:c8:dd:
1f:3a:4c:75:11:04:25:a2:89:b1:67:ee:7b:c9:de:
f6:2b:41:de:14:90:de:b2:30:1e:5c:c9:5e:6d:da:
4a:17:54:6e:bb:c9:11:e1:e4:99:6f:19:ca:6a:75:
69:03:43:c8:7b:c5:72:b1:91:3b:ad:78:d5:cb:d7:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:31:CE:08:E9:0F:75:39:9D:6E:A2:A6:A8:46:5A:34:8F:37:3C:58
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d0::/48
Signature Algorithm: sha256WithRSAEncryption
ce:08:3f:b0:9d:53:79:f2:49:0e:06:13:2d:0a:5c:f7:af:5e:
7b:9e:80:61:34:9d:08:46:81:36:12:9e:77:e6:b9:e9:86:55:
33:2d:ba:40:3b:31:2a:17:a0:9d:0d:d5:68:ad:ab:2d:ec:db:
b6:5f:18:9a:cc:b4:e2:b3:b4:c5:a6:1c:96:de:6b:52:ed:1d:
50:62:58:df:21:45:9b:d6:1b:60:e5:8e:ad:72:d0:2c:b9:0a:
9c:23:f4:57:08:0d:09:84:5d:88:e8:8a:1a:1b:df:c7:11:6f:
f7:a0:c1:19:73:2d:42:e1:d9:c2:60:f5:9b:6a:f2:e6:36:5a:
35:8f:52:95:84:74:49:e4:4a:7c:9c:c0:b1:10:86:95:0d:6e:
d4:5f:fe:fc:14:e5:b4:3b:55:6d:de:c0:d1:51:99:c3:c8:99:
d2:3b:8d:ec:74:3d:a1:16:d9:71:79:78:d6:45:9f:7c:d1:bf:
6e:42:74:47:9d:fe:e7:75:4d:af:ae:64:ed:ad:64:cd:45:ac:
de:d9:4a:9d:67:bd:99:d6:35:ab:2b:82:09:90:53:33:e5:82:
e9:4f:be:56:30:5f:1a:d4:23:d1:a9:2c:2e:6f:30:1b:c0:35:
49:cb:5f:c2:d5:88:f9:e5:53:cb:dc:a3:05:9a:d8:80:c3:88:
81:99:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org