Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: lWQJ8PE3rjkbWZAlCiE9/mbPPHMlrBSfdJhuNKVvLfM=
Subject key identifier: 52:45:10:91:25:B8:ED:BD:EC:83:76:EC:46:43:2C:B8:47:05:2E:EF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0C71E835107A12A6066157C4D5DD6A5F478E07D1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:19 +0000
ROA not before: Mon 26 Sep 2022 12:55:19 +0000
ROA not after: Mon 25 Sep 2023 13:00:19 +0000
asID: 59282
IP address blocks: 2400:d680:2f6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:e8:35:10:7a:12:a6:06:61:57:c4:d5:dd:6a:5f:47:8e:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:19 2022 GMT
Not After : Sep 25 13:00:19 2023 GMT
Subject: CN=5245109125B8EDBDEC8376EC46432CB847052EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:60:cc:f4:97:d8:d9:d9:95:e5:57:63:0d:
87:be:42:80:7d:30:1e:60:f8:7e:70:f1:03:3d:fe:
c4:6f:32:42:55:27:e1:fb:f5:89:34:ac:7b:f2:ab:
ef:63:af:a8:1c:b7:e5:84:a4:4c:37:e9:c2:48:0b:
bd:14:79:2f:1c:32:f8:e1:c0:19:f1:02:55:4a:84:
73:65:56:f8:66:13:6c:ec:95:ce:4d:ca:b8:e9:b2:
a9:6c:8b:ce:ff:ef:be:00:57:a3:80:d6:ae:66:62:
fd:53:d1:84:da:43:7c:0e:fd:8c:36:5f:15:ba:e2:
db:18:9b:c1:fb:0e:de:db:ef:c7:f6:29:38:93:c5:
35:5d:ed:4a:69:a6:52:6c:7e:a9:bd:10:fd:50:6d:
ca:da:69:2b:dd:3e:b2:40:0f:99:ef:bf:f6:65:28:
b1:38:75:00:c6:56:20:d3:af:13:01:89:0c:77:71:
b4:da:32:4a:fe:4d:4c:84:4d:5c:a0:d4:da:4c:51:
d8:a5:ad:53:7c:97:ea:65:9f:eb:dd:64:50:44:14:
c2:7a:7a:43:89:14:8b:dc:dd:a1:8b:0e:0f:ec:c7:
94:cb:92:5b:6f:d0:4e:8e:d7:ac:2a:55:39:68:70:
db:c2:67:99:09:e5:b7:ca:d2:51:25:02:96:9c:8e:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:10:91:25:B8:ED:BD:EC:83:76:EC:46:43:2C:B8:47:05:2E:EF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2f6::/48
Signature Algorithm: sha256WithRSAEncryption
a1:2b:96:02:25:1c:3a:e8:24:b5:74:70:b8:70:15:72:e4:13:
5a:35:47:6f:81:2e:35:c6:ea:0a:23:b1:67:1d:66:a9:ce:c5:
a4:34:5f:66:78:21:73:3a:e0:c9:0e:a2:9f:69:4e:fc:39:c8:
8f:6e:34:15:6f:b0:a8:2e:56:dd:21:e2:32:0f:80:c4:8c:92:
f5:30:46:a9:4a:48:17:51:b5:87:ae:ac:c1:19:d2:01:fc:e5:
1a:7c:45:0b:23:9d:39:68:12:b7:2b:d1:27:73:22:03:72:eb:
96:0f:d8:c8:87:f8:cb:4b:41:f8:30:3c:31:45:ad:92:24:bc:
bf:58:fd:d1:a0:6d:57:f9:a2:ba:d0:6e:da:ee:3f:65:c4:85:
6b:15:47:cb:ea:83:49:3b:45:a4:44:4d:9e:fb:1c:69:84:32:
e6:7a:64:a6:68:41:f2:5d:ab:30:95:4a:4d:0b:f7:5a:45:ec:
69:84:4f:37:30:c9:83:58:e7:57:19:3b:7f:e9:99:44:ac:4d:
72:a0:9c:f1:b2:89:e9:8e:f5:6f:d1:73:4b:90:5b:b3:bf:6c:
22:7e:6d:19:87:b2:c6:6f:e3:a4:06:e3:0c:d9:3b:08:68:17:
4d:af:6f:e0:fa:87:ec:44:e5:70:82:c5:7d:ab:39:86:5f:6d:
b9:4c:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org