Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: CfbNglizzyPMvK9xAybfAD3+m4s2R+/8WQGntTzydIU=
Subject key identifier: 7A:81:98:48:EC:7F:BE:A7:F0:6F:F0:81:C7:52:8C:A9:A5:3C:80:EE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 73D73EAE82524AF78C8712A6AC0DA63C4F7A0FBC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:17 +0000
ROA not before: Mon 26 Sep 2022 12:55:17 +0000
ROA not after: Mon 25 Sep 2023 13:00:17 +0000
asID: 59282
IP address blocks: 2400:d680:2da::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d7:3e:ae:82:52:4a:f7:8c:87:12:a6:ac:0d:a6:3c:4f:7a:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:17 2022 GMT
Not After : Sep 25 13:00:17 2023 GMT
Subject: CN=7A819848EC7FBEA7F06FF081C7528CA9A53C80EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:35:9d:64:32:6a:57:f0:78:b3:a7:66:8e:
2a:ff:bd:f8:cd:c0:e5:0e:4c:b8:4d:73:1f:7e:38:
b0:de:3c:4b:f9:b2:89:6c:a0:5b:1d:51:c1:53:d9:
05:a5:d6:04:11:ca:df:1c:ca:e6:18:ef:5a:e1:13:
ae:e8:40:67:de:c1:80:33:6b:e0:5a:73:24:7c:70:
7a:c1:26:dc:a2:0e:7c:1f:ec:60:bb:31:1f:5a:c7:
4f:f5:76:6b:e9:b3:50:9d:22:5e:ca:7a:85:28:37:
c0:f4:e0:d5:e1:f0:6c:63:0d:5f:f6:bc:3a:21:c0:
f7:29:99:2a:f0:a2:30:a4:8d:66:29:8b:a5:c7:1a:
ce:33:5d:7a:4d:7e:5d:54:f5:f4:fe:2a:82:13:d3:
ec:d4:8e:37:ec:2b:05:95:9f:98:ce:56:33:18:75:
b9:72:98:16:cb:f8:97:bc:6a:47:31:4c:47:e2:4b:
12:db:09:cb:04:76:ae:ee:a7:3b:1e:2c:ab:df:fb:
f6:63:e5:81:a4:c7:65:e1:df:fb:9b:73:00:5e:35:
5b:e3:1a:dd:69:ea:09:d4:04:d3:79:5b:6b:eb:65:
5e:2a:25:89:cc:3c:7a:e5:15:ec:6c:ec:1c:cf:d9:
2a:0d:ff:1f:aa:fb:7f:86:6c:81:55:f8:8b:ca:c5:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:98:48:EC:7F:BE:A7:F0:6F:F0:81:C7:52:8C:A9:A5:3C:80:EE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2da::/48
Signature Algorithm: sha256WithRSAEncryption
31:90:2a:a4:d3:91:d7:88:9e:94:84:e8:11:34:a5:32:cd:70:
e7:04:1a:51:c2:55:d9:32:0b:e1:90:da:d0:6b:7e:f9:25:3a:
fd:2c:8d:8f:cd:8f:ba:01:ec:5c:a6:b2:f0:1c:e0:73:46:f9:
17:94:b8:bb:25:b7:28:4d:e9:a6:1f:1a:5b:22:a9:83:97:1d:
f8:13:15:f9:36:6c:a8:74:86:91:bd:cd:46:37:14:45:09:ca:
55:c5:a6:f1:16:ea:96:bf:34:cd:32:d5:cf:0d:5d:5a:46:ae:
2f:bd:a2:0a:ef:b3:6c:35:23:1e:c7:1e:1f:37:36:c5:54:d0:
4c:80:3f:e8:55:0a:e7:a4:9d:b9:c8:b9:93:4a:2e:74:7b:8c:
4e:a8:f6:5d:62:cf:99:42:2e:76:dd:f9:a5:69:fc:70:82:25:
17:97:bf:cd:cc:e1:2d:6a:86:60:74:74:da:22:83:50:a8:c0:
3d:ac:c5:45:6f:67:e3:cb:75:b3:ad:71:95:0e:57:33:82:d4:
45:b0:04:c5:68:15:49:c4:cc:78:35:a9:1d:9c:02:0c:02:90:
2c:e2:02:7b:13:89:98:3b:98:2b:e2:a8:5c:2b:c7:06:f1:1d:
7c:88:fd:58:42:36:33:f4:00:3b:c0:bb:1f:2e:26:8c:a3:71:
49:f0:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org