Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LlaihM0DmFikjl/KaR14kZ71Pqp00Qn5HNEpaXieAJQ=
Subject key identifier: 91:ED:2D:85:45:C8:4A:CC:07:A3:AA:F3:D2:19:C6:A8:89:42:FF:AF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7AA7786CD841F1C200C181A3449ED3602B9CABAA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:08 +0000
ROA not before: Mon 26 Sep 2022 12:55:08 +0000
ROA not after: Mon 25 Sep 2023 13:00:08 +0000
asID: 59282
IP address blocks: 2400:d680:2f9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a7:78:6c:d8:41:f1:c2:00:c1:81:a3:44:9e:d3:60:2b:9c:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:08 2022 GMT
Not After : Sep 25 13:00:08 2023 GMT
Subject: CN=91ED2D8545C84ACC07A3AAF3D219C6A88942FFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:7f:ae:89:f3:7e:e0:f2:f2:36:bb:aa:95:
ce:1d:14:00:7e:10:16:6c:19:b5:29:80:64:83:33:
2b:e5:c4:96:be:52:4d:c1:5d:ad:3c:30:04:5e:71:
10:8f:1c:30:58:d3:c0:d9:97:68:1b:4e:3a:12:4a:
04:39:d4:45:79:67:66:8b:76:f9:0b:6a:86:ef:52:
4b:6c:f9:47:b8:03:1a:a6:53:47:2c:53:5a:c5:e1:
e4:6e:24:63:3a:45:00:ec:e2:0a:d1:65:70:a5:fe:
a8:55:e3:b1:f6:1b:71:7e:b3:f1:31:e9:ff:aa:c4:
48:5b:bf:39:f5:8d:1b:69:d3:30:f9:e0:89:73:07:
fc:4d:98:52:3e:66:ae:68:d9:6e:71:8f:95:48:be:
c1:0f:0a:4c:5a:14:4f:c1:c8:33:15:d9:5c:a9:25:
07:28:76:b7:15:97:6f:82:d1:8e:6c:f9:b7:c3:3e:
ce:8a:1a:8a:2f:e0:ea:59:04:03:07:fb:40:0c:40:
8b:e6:39:83:a9:f0:c5:ee:98:55:71:59:46:8b:94:
1b:89:bb:9d:c4:6a:ea:58:01:5c:d1:de:a9:e0:6d:
a9:bf:cf:4c:d9:d6:65:ac:e8:5d:e2:84:cc:89:94:
9c:8b:f5:86:80:0d:52:59:92:fb:2e:d3:5e:fb:f7:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:2D:85:45:C8:4A:CC:07:A3:AA:F3:D2:19:C6:A8:89:42:FF:AF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2f9::/48
Signature Algorithm: sha256WithRSAEncryption
c0:4e:65:27:82:e3:ff:56:41:c7:62:45:ac:3f:b9:db:d8:9e:
19:1d:85:3f:70:5d:c2:4d:40:e1:d7:dc:b0:52:e5:39:ca:7d:
3d:9d:9e:9d:98:84:4a:91:7a:87:62:cc:0f:91:79:43:ee:96:
cf:5d:58:e5:c3:44:4f:04:4b:01:31:0c:b4:9e:80:0b:f8:91:
92:0c:30:66:31:7d:58:32:78:80:4a:6b:78:19:43:43:9c:55:
48:98:6c:52:fe:e1:51:53:43:f5:6a:f3:85:be:be:df:de:ca:
2e:40:4f:70:b9:92:67:e7:15:c6:89:35:c6:57:24:5f:08:72:
45:f2:83:e0:6f:62:d0:4b:86:9a:61:67:36:56:88:d1:98:e5:
55:d3:8d:86:68:e6:55:f3:e4:a0:8c:83:9b:82:de:8f:0b:69:
ef:fb:8b:05:33:b9:0e:d5:bc:05:0c:62:f8:49:eb:fd:b5:6f:
55:9c:cb:30:e9:b8:d8:07:d1:85:1a:60:31:ec:cf:31:9d:8f:
0f:e7:3d:3b:f8:d4:30:ab:83:14:f2:5f:f8:c8:e5:6a:6a:2f:
1d:68:61:9d:66:3f:af:43:49:2a:c0:8b:91:2f:35:92:48:75:
23:7d:8a:bb:f7:96:33:ae:c2:21:b2:63:3b:3d:de:17:af:53:
c0:6b:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org