Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3330303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /u0virvaHJZtk2wVnB2FjVs0yE5Wk0hMX5o8dLhMpts=
Subject key identifier: 79:76:80:DB:CD:C8:99:4C:71:D6:97:77:02:A1:B0:8E:0D:66:AC:2B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5C13CBC557C3F28CF832FE3E4BE039041E4FBCA3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:18 +0000
ROA not before: Mon 26 Sep 2022 09:55:18 +0000
ROA not after: Mon 25 Sep 2023 10:00:18 +0000
asID: 59282
IP address blocks: 2400:d680:300::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:13:cb:c5:57:c3:f2:8c:f8:32:fe:3e:4b:e0:39:04:1e:4f:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:18 2022 GMT
Not After : Sep 25 10:00:18 2023 GMT
Subject: CN=797680DBCDC8994C71D6977702A1B08E0D66AC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:f7:a5:fd:4d:19:1e:78:3d:99:ac:6a:0f:
36:44:22:9c:05:46:22:0c:b7:56:8d:95:36:cd:5a:
93:db:a6:4d:d5:63:57:07:7c:28:4d:0e:35:f1:18:
3a:8c:d5:df:cd:7d:a9:df:95:a3:60:17:c9:c8:3d:
71:94:74:4b:45:17:31:11:44:66:a9:93:4c:e1:61:
29:83:71:ff:5e:9b:4a:66:d8:1a:ca:1f:cc:04:d5:
f1:9c:a7:b6:2c:f0:23:cb:af:4a:8f:1c:5a:f7:2d:
41:93:33:9d:a8:dc:f0:6b:dc:e1:ba:24:d2:b8:d0:
6d:b2:02:df:bc:b7:04:0a:51:d5:58:ad:46:a3:64:
bf:41:89:eb:60:0c:ab:04:e8:0c:a3:fa:52:87:e7:
59:4d:2a:26:2d:ab:5f:3b:f1:6c:6a:fa:91:0c:b0:
6e:fc:7d:c9:11:7d:29:de:55:1f:09:d8:2f:9f:c0:
e4:ff:06:89:0b:7d:15:4b:a9:eb:0e:e9:d5:14:54:
3e:0c:ae:30:f1:7a:9a:86:9d:52:3d:1b:b3:a9:db:
dd:b4:90:8f:ed:5d:55:f0:a1:8a:2e:02:47:11:fe:
7d:cc:08:96:a9:7f:13:0a:47:d5:e5:c8:f7:c8:b4:
21:03:58:23:fa:ae:75:b3:f7:ac:4b:d8:69:c5:1a:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:80:DB:CD:C8:99:4C:71:D6:97:77:02:A1:B0:8E:0D:66:AC:2B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:300::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2b:fb:20:9c:bf:02:83:85:13:da:c6:4a:a9:9d:59:ed:01:
a2:34:38:ed:e2:89:b0:5a:ef:cc:ab:e5:c9:70:aa:6b:9d:52:
fc:10:37:3f:68:4e:0c:a3:47:8a:64:d5:2f:a4:eb:52:2d:91:
05:a8:c8:0a:9c:43:87:0b:a4:f7:b0:4f:b6:85:39:bb:97:46:
56:5c:0b:dc:70:82:85:6a:00:ef:f0:97:3e:b3:ac:93:0d:6d:
58:18:a9:29:d2:69:64:80:74:0e:77:cf:8d:9a:bc:bd:47:ac:
69:4c:8d:8b:f2:61:bc:f8:9d:ad:23:41:0e:87:1f:e0:4b:ff:
4c:de:19:19:c5:c9:4b:c1:18:86:5a:c8:f0:36:d9:98:11:51:
9b:52:e6:48:ad:2e:40:ac:d8:49:fc:41:8b:8b:14:76:01:6f:
61:fb:44:71:de:49:6e:7f:dc:b5:fd:74:7d:3f:97:9e:a5:13:
94:28:41:89:6b:0a:33:21:4d:97:94:17:03:0a:28:f9:cf:e6:
78:12:b5:ec:68:95:da:50:b8:1f:14:4e:98:5d:cb:6e:07:57:
58:1a:4d:6b:9f:f4:63:de:90:d4:5a:ac:a2:a6:70:25:9f:73:
6c:ae:10:1a:4c:cf:f4:20:07:bd:84:8f:72:20:85:09:58:b1:
f7:c4:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org