Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: UUvUl4BIA1gvA55MNC3V1vHRPPbmHYVmeYXM+msv/BA=
Subject key identifier: 56:E5:02:F9:83:DE:4B:8E:7C:97:54:6D:DF:07:7E:26:09:2B:BC:FC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 131A3A25FEDB537D9E660AA86D94BE7457F8EF16
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:03 +0000
ROA not before: Mon 26 Sep 2022 12:55:03 +0000
ROA not after: Mon 25 Sep 2023 13:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:2d5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1a:3a:25:fe:db:53:7d:9e:66:0a:a8:6d:94:be:74:57:f8:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:03 2022 GMT
Not After : Sep 25 13:00:03 2023 GMT
Subject: CN=56E502F983DE4B8E7C97546DDF077E26092BBCFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:8d:ce:35:68:6c:3f:44:2e:7c:b5:5a:07:
c5:c3:5c:01:25:3c:0c:08:fa:6e:f2:b0:a1:f0:86:
47:2c:26:d0:d7:c8:f9:1c:1b:f7:01:04:1a:dc:5a:
81:06:ab:a9:1f:07:fc:68:d5:7c:10:ba:0b:0d:6e:
7c:46:e9:c0:1a:3b:d7:9f:ac:ff:23:96:7f:23:96:
82:d2:3a:63:ed:fb:b1:0c:62:31:2b:c0:ba:a3:66:
75:26:9b:63:de:ad:6f:ee:aa:83:b0:f6:1b:54:d2:
07:a1:d0:b7:36:86:17:7b:45:d0:e2:41:3a:e9:64:
31:67:03:a6:55:51:03:ad:fe:42:24:72:be:31:45:
5c:cb:95:79:6a:84:8f:80:3c:aa:e6:36:c5:a4:b0:
fa:88:16:c5:07:86:9c:cd:f4:76:4d:df:00:0b:fd:
03:8c:fd:d4:63:0d:0f:47:60:fe:f9:35:d5:79:ef:
09:be:4e:05:ff:ff:52:35:ab:e9:59:2e:59:18:1b:
9a:f9:9f:be:2d:aa:6e:f8:2a:f3:af:09:94:fa:ea:
c3:8b:35:bc:f1:f0:37:41:d2:0b:b7:8b:66:87:ff:
bf:73:b7:cf:e0:2f:fa:55:d5:a7:d6:0b:c5:ad:a0:
f1:11:57:69:18:07:0a:f2:e7:34:83:e0:21:e6:07:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:02:F9:83:DE:4B:8E:7C:97:54:6D:DF:07:7E:26:09:2B:BC:FC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d5::/48
Signature Algorithm: sha256WithRSAEncryption
28:08:0b:29:74:a5:f8:17:34:16:2f:af:37:54:63:a9:60:d0:
11:5a:f9:51:34:00:df:bc:f5:74:fd:60:c4:2d:10:00:93:48:
d0:b2:79:8c:27:be:e4:d1:1a:96:20:51:2a:42:f6:8c:3f:67:
b1:48:02:57:6d:22:20:9b:c3:fd:0b:95:38:84:b8:62:b2:02:
2a:89:bf:eb:f2:c9:b6:93:67:68:98:fd:9c:f8:27:0b:1b:7a:
dc:08:ab:6d:3b:ba:9f:f1:74:f4:24:df:23:2a:d0:6d:47:fc:
a1:0e:52:19:b9:cb:7f:ca:26:36:b0:ed:06:aa:dd:47:27:3f:
5a:ab:e5:07:7b:93:48:f7:49:fc:96:92:95:96:92:07:be:b1:
93:10:41:ba:2c:a6:21:d8:f5:f2:3a:83:c5:77:6d:77:db:b2:
2b:8a:75:19:85:ba:fb:81:52:5a:a1:25:e4:be:7a:66:46:94:
7e:cc:01:f9:53:04:09:56:f6:a2:c4:5f:d6:d5:f0:08:3f:11:
20:0e:59:a7:35:5f:ba:48:37:e7:01:b3:2f:eb:d8:2a:5c:c8:
cc:5f:96:72:9b:00:90:c8:86:f6:e1:17:09:e7:27:ed:92:5d:
30:a8:e4:7c:ca:68:69:35:91:37:54:8c:67:1d:1a:1d:21:e2:
fa:2c:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org