Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a32653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: j+wUOgpNACLzrjDqSTm8dWkY0dYQOXxqQIR1aQKzNkQ=
Subject key identifier: 9B:51:91:02:84:14:29:7B:E3:85:CD:37:7C:C6:9E:5E:3A:D4:FB:04
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 09A3568DD77EF4B70C21067168B277C97D25987F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:14 +0000
ROA not before: Mon 26 Sep 2022 07:57:14 +0000
ROA not after: Mon 25 Sep 2023 08:02:14 +0000
asID: 59282
IP address blocks: 2400:d680:2e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a3:56:8d:d7:7e:f4:b7:0c:21:06:71:68:b2:77:c9:7d:25:98:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:14 2022 GMT
Not After : Sep 25 08:02:14 2023 GMT
Subject: CN=9B5191028414297BE385CD377CC69E5E3AD4FB04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:d5:49:21:37:df:9d:92:af:97:69:f5:87:
3e:ca:aa:2b:12:05:40:9e:e6:fb:c9:d8:62:35:a8:
e8:ed:07:59:aa:51:cd:4b:c6:a0:4b:8a:69:a0:89:
70:f9:08:7a:59:1b:9e:dc:95:95:d9:23:22:a8:9e:
87:d6:9d:f1:c9:7f:ed:de:b1:df:c4:f1:ae:f0:61:
90:c5:e6:2f:65:9f:a0:44:4b:6f:73:13:7a:27:14:
3e:5f:67:28:19:fe:8c:51:1e:e4:db:53:cc:6f:2d:
8a:80:d7:b6:92:52:28:91:87:01:63:29:6a:9b:b8:
41:9f:e5:7a:6a:d2:12:dd:c7:3b:e4:8d:4a:c6:12:
03:66:df:db:18:c2:19:4c:41:d6:c9:b2:66:8f:27:
ab:b9:71:02:0e:ac:04:34:f5:6d:5c:8c:97:1d:26:
17:91:5a:21:77:cf:9b:cc:7d:dd:c0:c7:ba:f5:29:
7f:aa:d7:67:d4:01:9b:d1:93:9a:fd:3d:50:a4:51:
03:95:6a:d0:6c:87:2c:3c:db:d1:13:21:b5:2a:cf:
bb:c1:65:cf:0b:50:bf:fb:23:2e:7d:a5:79:4f:41:
9f:2a:7f:78:be:f2:61:cc:44:27:83:f0:f2:9f:30:
97:e8:3d:81:61:56:59:14:36:02:73:af:f3:09:3a:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:91:02:84:14:29:7B:E3:85:CD:37:7C:C6:9E:5E:3A:D4:FB:04
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2e::/48
Signature Algorithm: sha256WithRSAEncryption
15:df:c1:a6:df:a9:f1:78:5f:91:7b:bf:af:fe:d0:d0:01:00:
12:a2:ea:86:0e:42:63:ad:55:f7:50:a6:fe:87:2b:80:9c:d9:
71:8b:e0:d8:61:af:6a:2a:4c:8a:fc:01:de:63:3a:1c:92:99:
a6:18:01:f8:1e:df:25:f3:c2:02:86:80:ae:de:30:80:be:e7:
d0:e5:6b:8a:3b:3e:cb:5b:c9:04:08:d7:9c:fb:06:b7:8c:af:
ed:03:0f:e5:a3:25:93:40:8a:49:1e:66:10:d4:07:c6:69:2d:
d6:9a:5c:64:7f:35:82:50:c9:c7:5a:ab:8a:61:39:d4:ec:d6:
49:b9:a0:9e:76:b7:12:bf:0b:5e:f1:f0:b4:67:41:d0:b5:25:
f0:10:2a:da:32:df:34:6d:52:b5:77:b3:f0:4e:da:8d:eb:ec:
b3:6c:c4:ac:14:c9:4b:5d:f2:76:0f:44:51:a3:91:81:2d:cc:
77:64:6a:7c:35:6f:1f:a1:a8:9c:06:1e:20:0b:2e:62:e1:c1:
17:cc:a5:d8:e1:d7:27:92:01:85:24:e8:41:5d:38:3a:69:1c:
54:6e:00:1e:46:09:4f:b6:df:15:94:c8:d5:30:40:ec:5a:bb:
4b:41:32:2c:d5:f6:77:06:e7:26:12:91:da:d9:d4:a4:24:d3:
74:12:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org