Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3265633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OnNqEevz2KXPUxh5piS0ZQzShwsBP4NF2q1GQAYP9P8=
Subject key identifier: 57:4B:82:C1:D9:C8:2E:53:7F:D3:06:AD:9A:80:45:80:72:E6:D1:C6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 79FDB06199DE1993F3D70444FF6B0A8382393555
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:09 +0000
ROA not before: Mon 26 Sep 2022 12:55:09 +0000
ROA not after: Mon 25 Sep 2023 13:00:09 +0000
asID: 59282
IP address blocks: 2400:d680:2ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fd:b0:61:99:de:19:93:f3:d7:04:44:ff:6b:0a:83:82:39:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:09 2022 GMT
Not After : Sep 25 13:00:09 2023 GMT
Subject: CN=574B82C1D9C82E537FD306AD9A80458072E6D1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:46:0d:a0:14:26:3e:21:d9:cf:c9:2d:58:
44:83:da:38:35:75:d2:f4:0e:e8:d4:7b:d7:bb:5a:
d8:a6:90:f7:c6:89:e0:b0:87:26:0f:c4:f0:21:2c:
e6:a7:d4:60:28:d3:e0:a7:9b:82:81:2c:54:48:3a:
9c:05:af:18:42:cb:87:bd:84:a9:06:db:9f:95:f8:
36:a8:57:0e:1e:a0:71:df:c7:34:75:1a:e5:23:3d:
cb:9f:da:23:5f:a1:ac:17:e5:a5:53:fa:1f:c0:10:
b7:b4:28:47:50:0e:f1:86:32:24:a6:49:7c:16:d9:
84:5e:f3:07:ec:52:42:b9:71:89:ba:39:47:37:b8:
7c:f3:ff:46:58:3f:e0:30:fa:e2:b2:1e:c3:e8:b0:
b0:ab:08:97:59:1b:cb:6f:c5:b7:2e:d2:ad:1f:d0:
a3:86:95:7d:45:9d:5f:e0:38:ee:4f:71:d6:bf:a3:
e9:1c:90:35:ae:44:60:35:34:f0:34:17:4d:d3:ad:
13:cf:61:fa:bc:09:57:4e:78:e1:25:86:63:83:db:
00:38:6b:e2:a1:39:1f:5e:95:bc:2b:9e:c8:ef:7d:
97:44:22:5e:e7:42:b8:e6:8a:7a:21:9f:c0:ed:62:
9e:85:14:9b:5e:fb:2a:f4:79:f1:c9:75:bb:5f:70:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:82:C1:D9:C8:2E:53:7F:D3:06:AD:9A:80:45:80:72:E6:D1:C6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2ec::/48
Signature Algorithm: sha256WithRSAEncryption
25:64:ff:48:a3:3c:3c:2c:ee:86:d0:9a:77:90:a1:66:e4:93:
86:68:15:b0:a9:c3:19:51:eb:c0:a6:69:6a:58:a4:44:59:86:
1b:8e:08:ad:ad:5a:63:3e:c6:9d:d6:e8:b5:42:ce:4a:98:a6:
11:76:31:14:76:be:fc:c4:ff:ee:4c:2b:05:c8:c7:2e:7c:71:
89:1e:32:fe:44:28:e1:e7:cc:be:d8:ae:35:20:e6:e4:4f:7d:
b1:c0:bf:52:36:bb:4c:0c:08:c2:57:03:f2:c0:a4:69:98:8b:
cd:f1:66:29:68:0c:e2:6b:15:b0:d2:26:83:4d:23:df:21:f0:
fa:8d:a8:94:52:d9:3b:91:81:29:ee:3f:ff:40:be:7b:68:d8:
54:ff:42:c7:b4:a1:0b:5a:16:b7:9d:23:5a:08:ef:6a:1a:61:
1f:3d:32:28:b6:e3:89:63:7f:2b:a4:f5:ed:f9:d6:16:73:e5:
fb:04:7d:b2:1e:7c:9f:b5:69:a5:7a:26:bb:4b:5b:f8:a6:87:
59:c6:08:14:6e:3d:3b:41:1f:27:0e:e2:c0:7a:eb:ce:24:05:
9e:9b:37:86:47:f1:d6:af:17:f0:e8:99:0a:4e:a9:90:52:ba:
b4:c6:0f:bc:c5:a8:1e:ee:87:96:b4:ce:dc:ef:ef:0e:d0:dd:
fa:c5:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org