Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: dIqYWqm3xu31eld5qbWk/BD/aCj5EvX7JjY6fPR4xgw=
Subject key identifier: 9B:F1:FE:B3:56:E8:F0:49:36:82:8B:E1:64:12:38:7E:47:9E:5E:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BF28483A17B28566AD3CCC24C54ACA7A52C0940
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:09 +0000
ROA not before: Mon 26 Sep 2022 12:55:09 +0000
ROA not after: Mon 25 Sep 2023 13:00:09 +0000
asID: 59282
IP address blocks: 2400:d680:2d9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f2:84:83:a1:7b:28:56:6a:d3:cc:c2:4c:54:ac:a7:a5:2c:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:09 2022 GMT
Not After : Sep 25 13:00:09 2023 GMT
Subject: CN=9BF1FEB356E8F04936828BE16412387E479E5E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:71:e2:e1:86:ea:41:a9:65:f6:fe:af:36:
03:f2:86:13:b9:6c:e5:53:c4:f8:ab:f4:a8:a6:52:
d5:a1:f5:7c:97:47:3e:fc:a8:b6:36:18:eb:5c:89:
c5:d2:b5:fc:3e:11:31:19:8f:44:06:3c:dd:02:8f:
07:75:8f:83:a4:fa:61:0f:e2:6d:09:9e:5c:87:4e:
7c:09:65:5a:6b:36:cc:2d:50:1b:c7:3d:a5:fc:39:
b7:9f:cb:dc:fe:27:a4:24:53:76:65:75:db:28:a9:
b7:58:45:c0:88:91:6a:ce:a0:81:58:7d:96:11:42:
85:5c:c3:51:9e:81:0f:f4:4f:39:bb:c9:a6:e7:26:
00:be:27:9e:45:b6:22:ed:c7:17:2d:1d:43:a6:6f:
e1:46:a4:31:19:a1:ef:28:af:b4:e4:80:49:03:2c:
8c:48:cf:05:75:5f:16:aa:a0:60:c8:98:60:6d:05:
1e:c4:a8:f6:cc:15:79:ab:a4:91:f4:83:c7:5d:00:
2c:28:a2:32:a2:a2:26:90:96:23:62:65:0d:1d:de:
68:a5:14:6b:9d:23:72:60:7c:4f:2d:4c:70:28:ab:
7b:5b:c7:9c:dd:e5:19:cb:b5:b8:06:73:03:27:39:
13:fa:f3:b9:ed:ed:66:d5:d5:6d:10:f8:8e:e9:00:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:FE:B3:56:E8:F0:49:36:82:8B:E1:64:12:38:7E:47:9E:5E:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d9::/48
Signature Algorithm: sha256WithRSAEncryption
73:56:7b:19:b2:db:74:98:73:d5:95:9b:b3:38:ac:1d:04:e6:
47:f3:10:2f:0d:13:5a:6e:1d:ab:2b:d8:55:a1:27:cb:46:3d:
db:be:3c:bf:b8:b5:a9:d1:7c:47:88:52:23:c4:80:0f:19:fc:
87:34:a2:c2:da:aa:34:d1:b2:f8:9f:81:cb:19:ee:62:e9:2e:
f4:b1:30:ef:4b:4a:e6:b3:ae:1f:7a:87:b8:b0:63:ed:76:b3:
83:31:61:77:94:e5:61:e4:cb:f7:d1:e1:a9:02:98:3e:a3:df:
5d:a7:a2:23:5c:ba:e6:e6:57:9d:8c:d8:1c:fb:50:78:20:1a:
ac:e8:c9:0b:15:23:f4:d6:9b:af:87:25:9f:ed:14:77:de:5c:
5f:f9:7f:04:4b:d6:69:3a:d5:d9:ab:f4:3f:7a:8c:73:c8:5c:
d2:0a:9c:f9:02:89:7a:93:2f:bf:b6:ad:4f:3d:a1:2c:03:0b:
c7:d5:c3:5d:2c:8e:8e:8a:99:24:72:79:30:2b:1b:66:93:0c:
fe:a0:f5:7a:77:b5:cf:9d:f0:7d:64:af:1d:41:1c:54:b0:98:
e3:c0:47:d0:96:42:1c:f6:38:87:3e:f6:f4:4d:6d:c3:b8:43:
1e:4a:ce:ae:88:f9:31:2c:f9:5e:c7:7b:77:cd:a4:d8:1f:1a:
44:6c:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org