Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3330333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: waKrIH1V5d1OXjIP9IpAePsuQ3QQyXqvoa6N2d3F2tw=
Subject key identifier: 4E:FE:54:3D:B6:D0:B0:FE:93:F8:C8:0D:D7:DF:AE:19:FC:18:62:4A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1E1AE8D7635570268EE27E45660B768B92E603A8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:32 +0000
ROA not before: Mon 26 Sep 2022 09:55:32 +0000
ROA not after: Mon 25 Sep 2023 10:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:303::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1a:e8:d7:63:55:70:26:8e:e2:7e:45:66:0b:76:8b:92:e6:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:32 2022 GMT
Not After : Sep 25 10:00:32 2023 GMT
Subject: CN=4EFE543DB6D0B0FE93F8C80DD7DFAE19FC18624A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:b3:b2:72:b2:c3:94:69:be:b4:86:32:31:
b2:48:6c:cf:94:2c:bd:3c:75:ad:54:c3:50:b0:9e:
1c:54:70:42:be:f2:3b:fe:d4:d9:26:bd:2e:b5:65:
71:1f:8d:bd:ac:91:3d:e6:48:38:d4:c1:49:67:8f:
cb:bd:a5:9d:c5:a1:4b:d6:9f:ec:a5:27:6d:0d:47:
27:a2:a5:87:06:a9:17:54:ee:92:15:e9:44:83:16:
59:f0:57:9d:cd:de:15:87:b0:94:96:52:22:2f:a4:
09:51:1f:67:2d:e8:a2:2f:d1:31:eb:f5:db:04:5b:
7d:ea:bc:3c:29:80:8d:15:6a:45:af:1a:82:0f:4b:
1b:66:d1:ad:7e:d4:ec:ec:f0:d0:9a:a7:62:36:68:
40:9a:73:a8:11:e9:40:15:c5:ac:3b:56:57:9e:87:
d3:09:07:49:ca:61:9a:59:fa:eb:b4:aa:93:5b:e5:
50:83:95:76:f5:5d:4c:ef:e0:0a:b1:cf:2a:5e:5d:
0e:8f:86:f3:5a:a1:29:30:cb:7f:f0:b0:d4:a2:62:
c2:b2:d3:8a:31:e7:ad:03:94:28:e9:50:8a:65:0e:
98:05:2a:a8:84:04:e1:13:7c:3e:4f:88:86:d0:e1:
a1:b1:55:38:be:bd:6e:89:fb:ec:9d:e4:24:ce:8d:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:54:3D:B6:D0:B0:FE:93:F8:C8:0D:D7:DF:AE:19:FC:18:62:4A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:303::/48
Signature Algorithm: sha256WithRSAEncryption
1b:63:c9:54:ec:2c:74:19:29:b6:62:9e:95:3b:fe:96:72:39:
db:f2:a0:95:57:20:2d:ad:32:7a:de:28:78:85:2b:4a:56:79:
c1:ae:7c:f6:91:6e:58:63:2e:7d:ef:ac:ed:19:c8:0c:26:da:
a3:d6:4a:2f:09:d8:7c:1e:4f:ac:5a:f9:5f:c3:ba:d2:55:0b:
62:a3:f9:88:78:5e:94:3c:1d:cd:6f:49:fc:b4:41:49:13:3c:
73:c0:d5:98:95:71:24:c4:7a:b8:7c:6a:c7:f8:fe:f2:e9:a2:
f4:94:6a:80:f1:90:12:20:b5:3c:8b:b6:8f:9f:25:ed:c7:7c:
8a:4c:2f:f2:e1:cf:7c:8b:30:42:91:16:dd:9b:d0:fe:5b:c2:
91:4a:95:49:1a:9e:6b:92:87:bc:8a:a0:c4:fc:e3:a5:f1:64:
dd:77:7e:5a:9b:f7:6c:d7:24:9f:c2:32:82:d9:dc:ce:9f:bf:
db:ca:8f:a8:b0:2d:6f:0b:72:f7:1a:36:de:26:f2:db:2f:54:
b9:ae:a5:d0:df:23:79:19:9e:c4:e8:84:7a:3f:59:56:13:6f:
93:e2:e5:8a:fb:6f:be:ea:ae:11:d6:82:8a:1f:20:cd:e5:12:
ab:dd:21:61:cc:27:0c:8d:f9:41:31:69:1c:df:c6:75:65:5c:
38:85:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org