Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3266643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MRghHGDbBCar29mG/PgCyNGxtI/ZbJPIPsaV/ZX1gEU=
Subject key identifier: F6:E5:5B:D8:9C:2B:23:28:D3:56:F1:52:C4:7B:6F:E5:14:05:E2:55
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 059055EDF8C1F796DE3E2A65D13CAAC4A657EE8D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:14 +0000
ROA not before: Mon 26 Sep 2022 12:55:14 +0000
ROA not after: Mon 25 Sep 2023 13:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:2fd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:55:ed:f8:c1:f7:96:de:3e:2a:65:d1:3c:aa:c4:a6:57:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:14 2022 GMT
Not After : Sep 25 13:00:14 2023 GMT
Subject: CN=F6E55BD89C2B2328D356F152C47B6FE51405E255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a3:7f:9d:51:49:2f:b7:0e:15:2d:8c:38:d6:
e1:58:05:ae:02:79:8b:40:32:51:68:98:d4:82:11:
e9:62:61:2b:0b:18:b4:e3:03:66:3d:d2:45:02:5e:
3d:a3:a1:e1:0a:7e:b5:2f:06:a5:fe:91:9f:16:b1:
21:0e:9f:50:3a:3e:1f:e5:a7:46:76:d5:f8:80:85:
03:ac:b5:5e:e5:d4:9c:5e:5e:58:cb:f2:34:13:78:
bf:97:6d:1c:3c:f0:78:eb:87:ad:e4:10:5e:d1:ab:
59:b1:43:a4:ee:2c:7a:fe:e3:74:57:3c:9b:ef:0d:
5d:6b:c3:49:f3:e7:be:ac:ec:9c:03:9a:1d:6f:84:
0a:00:86:fd:0c:67:a4:14:37:21:f3:84:71:f9:fe:
6f:08:13:57:43:ab:7d:83:41:65:02:08:69:6f:3f:
6b:d8:9d:61:9f:5f:dd:bc:52:db:06:57:11:fb:0c:
4a:c2:73:31:f5:15:43:ad:ec:39:6d:b1:55:81:c1:
52:54:95:0c:c6:90:32:cc:8c:c7:a1:47:2c:2b:b8:
70:d4:67:0b:1a:1a:86:f5:6e:be:c3:ef:3f:b0:7b:
e5:6a:97:79:7b:7e:9f:ac:a6:13:1e:91:5d:3e:77:
2e:67:7c:8a:d5:eb:a5:bc:86:04:07:58:cc:70:95:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:5B:D8:9C:2B:23:28:D3:56:F1:52:C4:7B:6F:E5:14:05:E2:55
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2fd::/48
Signature Algorithm: sha256WithRSAEncryption
49:19:c3:82:f9:f8:d6:95:66:75:d8:e4:52:ac:b5:9f:be:b6:
ed:1f:79:b0:2b:85:c9:43:86:64:a9:20:37:c1:f7:63:8f:07:
9a:88:36:64:a6:82:a2:7d:f0:ee:55:c8:e8:80:40:c6:4e:26:
61:8b:39:7f:d0:f1:d0:a2:d6:01:85:27:7e:8e:51:16:24:ec:
3b:6a:e3:0e:06:11:a6:f1:1c:fa:4a:4e:5c:87:a3:82:c5:cf:
47:e4:55:2c:e5:7c:9b:9e:5f:12:48:57:89:58:2c:9a:be:4e:
7c:67:7c:c6:2a:6d:97:f5:11:b9:da:51:80:f0:5b:c4:70:c2:
3d:47:9b:a8:08:d8:b0:46:ca:63:aa:76:2c:b9:88:5c:11:69:
51:c6:ae:26:f9:11:4f:b8:17:02:da:30:6d:ba:a2:25:18:8c:
c1:64:06:19:64:2d:b2:3e:8a:de:d6:a0:84:84:df:15:a6:b0:
5b:f3:d8:29:a4:64:fa:d5:d0:f3:e7:9f:28:c8:b6:22:45:a2:
e0:bd:68:22:17:45:b8:5e:bd:c2:7b:0b:6d:a3:07:67:30:d0:
e7:f2:ed:ad:3c:40:70:20:f5:9b:03:48:24:83:0c:97:9e:3e:
2d:3c:44:4e:d0:7b:27:3e:2b:3d:fe:b3:f0:cb:9d:a0:04:3f:
24:2a:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org