Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3265653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: AeCOoDE34dpjMneolmBRi5p2r+ipFyn07THxvSGSNHo=
Subject key identifier: A9:79:62:28:7A:10:9C:33:3C:EF:20:4E:79:DF:95:62:C0:79:97:DF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4E65575D532C6C602947039E34686EBFA602D1A2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:20 +0000
ROA not before: Mon 26 Sep 2022 12:55:20 +0000
ROA not after: Mon 25 Sep 2023 13:00:20 +0000
asID: 59282
IP address blocks: 2400:d680:2ee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:65:57:5d:53:2c:6c:60:29:47:03:9e:34:68:6e:bf:a6:02:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:20 2022 GMT
Not After : Sep 25 13:00:20 2023 GMT
Subject: CN=A97962287A109C333CEF204E79DF9562C07997DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:a1:59:73:65:30:a7:76:b5:d9:ec:79:72:
cc:54:9c:92:fc:81:15:a3:e5:dd:32:1a:e4:e7:ad:
15:76:2e:cc:71:2f:cf:b0:28:0c:56:7c:76:34:8b:
cf:a3:33:3e:b8:96:22:93:90:17:ee:ca:0c:2b:6d:
ea:67:43:79:2d:01:d1:81:86:6b:d6:fe:62:27:ce:
23:a7:78:cf:99:64:72:be:87:12:63:82:1a:99:63:
b4:fa:6c:c0:8f:00:8e:33:04:55:17:47:2c:0b:47:
3a:ca:b3:8e:89:45:fb:eb:71:62:b5:cb:3a:f8:e8:
e7:f1:56:d0:72:13:83:a5:16:c7:45:b3:1d:b5:2e:
d4:17:cb:ac:0b:60:e9:9c:9e:d0:2c:00:f4:58:c7:
cb:3e:a6:04:be:9a:7c:68:88:01:15:ee:85:67:7d:
ac:c8:d6:bf:32:5a:11:8e:2a:68:90:af:66:d5:ca:
74:f5:d6:fb:7c:6b:da:c0:9d:5e:f7:ac:6c:55:f2:
91:7b:ba:b6:73:c7:09:3d:78:96:17:f8:98:2d:cb:
1d:97:9a:2c:de:58:4b:46:9a:b0:96:5b:7c:6f:8b:
1f:c7:20:51:b3:0e:16:be:4c:47:cc:32:af:ef:ce:
54:00:a8:97:0a:c7:73:3a:8b:0e:b4:27:f1:56:16:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:62:28:7A:10:9C:33:3C:EF:20:4E:79:DF:95:62:C0:79:97:DF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2ee::/48
Signature Algorithm: sha256WithRSAEncryption
b7:b0:a4:f6:bb:f7:4e:be:89:ca:0a:8a:61:c2:46:7c:7b:4f:
23:29:27:e4:e1:09:3a:12:05:8b:8e:24:fa:3b:dd:2a:1a:58:
1f:47:23:85:f2:0f:53:3d:d7:f0:fc:08:39:18:ab:75:67:60:
e2:6d:17:df:4f:5e:ad:1d:20:a8:8d:d2:f2:70:f6:cc:ec:5b:
ba:86:4b:f0:4c:43:7c:4a:e6:9c:7b:7a:2d:21:52:2f:b8:a6:
42:4c:6b:fc:73:6f:16:ad:09:fc:88:1f:e0:0f:63:9b:98:e3:
8c:d5:7b:f6:34:3e:26:e2:5b:e3:1c:03:bb:a1:ff:dd:e5:98:
1a:e2:62:4c:25:4c:95:e4:c3:b7:93:18:91:bd:a9:b7:e0:70:
e4:a8:42:45:1f:0a:bc:3b:97:b9:d1:81:9f:03:ca:34:13:d1:
b4:da:d7:0e:d8:af:99:79:74:47:bd:78:8a:84:c9:a3:f2:05:
f0:54:e9:ec:e2:ed:e1:90:95:e8:df:fe:e1:40:cc:d5:54:0b:
56:91:c5:a6:54:ef:95:e8:70:bf:14:e6:82:96:29:3c:93:b3:
71:db:14:34:64:d1:b4:ba:dc:bd:a2:bd:75:fd:98:b7:45:7b:
fe:c3:75:8e:d9:8e:82:8e:a1:cf:f2:2f:8b:b8:07:6e:97:11:
75:56:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org