Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: u+8vtOiMV2fS1Lhaerc/iNmahuidpnJqUgXWa+W8mM8=
Subject key identifier: 93:25:71:6C:1E:39:75:9C:1F:18:53:4C:0C:DB:84:4F:4A:61:92:EF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 53EEE62D95FFD9CB2236181AB75C8ED7D4394618
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:18 +0000
ROA not before: Mon 26 Sep 2022 12:55:18 +0000
ROA not after: Mon 25 Sep 2023 13:00:18 +0000
asID: 59282
IP address blocks: 2400:d680:2d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ee:e6:2d:95:ff:d9:cb:22:36:18:1a:b7:5c:8e:d7:d4:39:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:18 2022 GMT
Not After : Sep 25 13:00:18 2023 GMT
Subject: CN=9325716C1E39759C1F18534C0CDB844F4A6192EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:d2:38:09:c9:78:2c:d7:a8:77:54:4a:5f:
03:b4:b3:cb:15:a9:fb:22:9d:4e:72:44:a2:fd:f2:
5d:ae:cb:13:d1:0b:ac:4c:c1:56:55:1b:85:46:1b:
97:a0:1a:0c:44:6b:15:9f:f4:60:31:73:35:dc:d5:
f4:38:33:16:f6:9e:3a:ea:83:61:00:4d:79:5e:12:
b0:59:96:c4:a2:ac:5f:99:84:ae:f9:b3:98:37:21:
37:c0:ed:0a:ce:00:2b:50:2a:5a:fc:57:ae:b3:cd:
9d:fd:90:3f:48:c8:d3:45:b0:ee:75:40:1a:2a:50:
cf:a4:2d:85:d1:30:49:cf:d6:f4:ed:9d:36:71:37:
b3:80:39:5d:20:e3:b7:8a:a0:3e:2c:3f:2c:73:27:
1f:db:ba:12:dc:f2:bb:ca:e1:f3:21:ad:c4:5d:ae:
97:40:99:29:54:b1:c5:1b:07:1e:d0:63:12:ad:58:
a4:9f:4f:72:a3:f8:17:dd:92:c5:ae:61:eb:54:31:
c4:d9:49:9a:3a:55:5a:27:ed:a5:24:ee:2e:08:90:
93:f9:5f:be:f8:bb:f6:3a:ab:a1:a1:ab:57:3f:31:
8b:2e:15:0e:a8:b8:00:90:b9:8a:1e:f6:ae:97:00:
eb:19:24:6c:d4:99:d2:61:63:11:cf:43:ad:a6:a8:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:71:6C:1E:39:75:9C:1F:18:53:4C:0C:DB:84:4F:4A:61:92:EF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d8::/48
Signature Algorithm: sha256WithRSAEncryption
9c:9f:49:a3:dc:74:9a:d6:51:20:3a:f5:3a:dd:b5:c7:34:ae:
47:ca:e2:5e:b2:48:ab:2b:3e:4b:1f:5d:38:8e:d2:82:81:45:
2a:2a:1b:a0:ae:46:c2:f8:c0:35:75:7b:49:5f:0f:15:06:f9:
e7:76:63:4c:fa:1d:fc:15:75:f0:a2:e0:de:ca:13:a6:af:1a:
29:12:8a:c1:8f:27:5c:6c:c2:0b:b7:26:01:1c:73:4e:5e:3c:
25:e3:80:a6:62:87:d4:cb:22:cc:49:4b:7e:5e:3d:3c:58:78:
a5:4e:85:c7:ef:77:6e:99:ae:7a:20:b8:5b:3f:b7:49:45:d6:
3b:ea:2e:e1:f0:b3:60:dd:f3:b9:06:a2:0d:86:e6:7e:50:3f:
22:b9:54:a8:d3:f2:6d:91:61:b1:5a:36:42:3e:17:6b:01:e3:
aa:0f:dd:4c:ad:b9:6c:d5:6f:ab:42:12:3b:8a:b1:9d:dc:1c:
5b:c2:b5:e1:e0:a3:d2:67:95:d1:d7:dd:62:f1:13:d1:dc:16:
e1:9f:f4:e8:e0:34:62:8b:3f:e7:7e:9b:9e:f6:cd:2e:c9:11:
cf:c7:e6:63:de:76:a1:84:80:94:30:42:8a:05:b0:7f:d5:99:
75:10:ab:e9:a4:84:96:20:c4:bf:6f:9d:e9:89:a1:d3:44:c5:
60:6b:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org