Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: A7L3KaPxV5Aqz/hJDXHW0DsncyM5F+aY6dWk0O8zkIg=
Subject key identifier: B2:A7:B1:EA:96:57:B5:50:61:47:25:EB:5A:D9:D2:B3:01:F1:6B:4F
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 61F6C3FD1CD754F937670D11BA9DA349CC9825D6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:13 +0000
ROA not before: Mon 26 Sep 2022 12:55:13 +0000
ROA not after: Mon 25 Sep 2023 13:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:2fa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f6:c3:fd:1c:d7:54:f9:37:67:0d:11:ba:9d:a3:49:cc:98:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:13 2022 GMT
Not After : Sep 25 13:00:13 2023 GMT
Subject: CN=B2A7B1EA9657B550614725EB5AD9D2B301F16B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:e4:60:4a:6d:5b:0a:71:9a:50:2f:96:9b:
0c:9d:5a:e5:50:12:c6:20:33:50:6c:77:42:e9:26:
46:59:9c:44:31:9f:f7:aa:5e:65:11:5b:6f:11:f3:
f9:65:b9:50:aa:21:02:e8:89:21:fa:be:ce:60:0b:
e9:55:ee:1f:76:34:f5:2a:fc:05:9a:a2:64:9a:e1:
a4:96:02:4d:5d:f2:40:d1:45:d2:84:35:a9:59:5c:
45:e8:ca:38:af:64:67:e4:d5:34:43:09:d7:d0:54:
8a:ad:89:61:b1:af:42:4b:4c:c0:13:14:cc:ab:3a:
7d:08:db:0a:a0:46:e4:f4:f7:1e:7a:87:f5:d6:e4:
23:26:95:d4:fb:a9:75:b9:e8:17:e6:22:ef:4d:08:
04:8c:e1:90:31:da:a6:b9:35:8a:43:58:1b:98:df:
1e:31:b2:85:84:4c:46:6a:f4:24:a2:b9:ca:2a:73:
8e:84:8d:53:81:c3:1b:83:51:59:d0:13:31:68:d5:
98:d7:df:c1:1d:58:51:74:fd:20:16:34:48:ec:89:
22:2d:5c:e3:ed:0a:e3:fd:8b:8c:d0:5d:38:d1:26:
fb:3b:85:cb:fd:4c:1c:c9:fa:9c:c1:97:52:45:64:
c2:74:ce:ba:1a:03:6b:67:db:15:6b:f1:5f:2e:f2:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:B1:EA:96:57:B5:50:61:47:25:EB:5A:D9:D2:B3:01:F1:6B:4F
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2fa::/48
Signature Algorithm: sha256WithRSAEncryption
21:78:79:25:65:fe:ab:85:22:fd:f9:9a:d5:7a:e9:fc:fc:a2:
65:24:04:18:9b:87:03:32:b5:b7:77:4f:64:0b:f5:a7:56:ae:
73:46:4e:69:df:0e:81:da:0a:d9:c5:99:11:a2:b0:86:4c:8f:
89:b0:87:c7:ca:65:f5:f7:5c:a1:cc:30:3a:0c:19:1e:47:7a:
67:a5:34:7f:c9:be:5b:eb:cc:60:14:4b:5f:10:e1:25:29:16:
23:38:82:f9:e1:c7:4d:04:eb:5a:a0:df:51:18:43:8e:4a:1e:
bc:ca:41:73:75:91:96:b8:de:bb:11:6d:4d:d3:ec:26:3e:ae:
26:56:0f:d0:b8:f3:67:a7:37:22:d6:85:0f:52:b6:33:0b:50:
97:92:ae:70:01:04:53:00:4a:c0:f3:fc:6d:be:36:2a:5b:92:
09:5b:c7:2b:c3:1f:59:be:e7:cd:68:99:56:d9:d0:e5:7a:23:
28:6b:f4:4f:77:39:87:e3:a4:69:62:d8:26:a2:26:f6:eb:48:
34:43:5b:f4:47:e1:eb:3d:83:3b:63:4a:ad:fc:34:80:46:f6:
3f:29:b5:0d:e7:c7:3a:0c:6b:26:dd:b4:6c:be:a7:ee:53:35:
d0:a0:85:09:83:72:21:bf:56:03:c1:a5:8f:b2:77:0b:21:31:
54:76:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org