Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3330353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Cm441ag4YpLa4LqoUZDYglc6e0IhapOwfI6Uk+ewhcQ=
Subject key identifier: D5:58:3E:05:F5:32:5D:D2:F3:7F:30:AE:0F:87:3D:D4:76:E2:58:8A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 782F7723118496CB8F9655A2DA487826A5C55D25
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:14 +0000
ROA not before: Mon 26 Sep 2022 09:55:14 +0000
ROA not after: Mon 25 Sep 2023 10:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:305::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2f:77:23:11:84:96:cb:8f:96:55:a2:da:48:78:26:a5:c5:5d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:14 2022 GMT
Not After : Sep 25 10:00:14 2023 GMT
Subject: CN=D5583E05F5325DD2F37F30AE0F873DD476E2588A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:fb:30:1e:22:37:37:c2:71:fb:54:f4:1d:
2d:0f:e5:da:47:08:7a:f1:95:96:91:6a:7c:07:67:
70:25:9c:a3:42:96:ad:fc:fb:be:b5:10:9a:85:d3:
d3:73:e9:ab:08:12:45:14:d7:c3:e0:44:6e:1f:e5:
3d:49:5a:59:69:3b:1f:50:e0:f0:79:4a:00:cb:ce:
07:b4:2a:2f:08:93:d2:54:c7:91:89:f3:d4:73:f0:
58:8b:b3:c0:37:70:9e:e5:62:52:60:cf:8c:63:2b:
1c:1e:a1:45:5b:c6:54:3d:96:4e:5e:e5:7f:98:bb:
d3:31:e2:d3:e2:01:58:f4:c8:2f:81:c0:6e:d4:eb:
70:a4:85:37:1c:d3:36:2c:47:6b:70:84:4b:24:73:
85:9c:de:ad:c4:df:fc:ee:09:d7:2b:97:7c:aa:ad:
a9:f0:f5:b8:ef:a5:f2:c3:56:23:aa:17:cb:be:f7:
63:93:3a:2e:dc:01:df:ef:c9:9a:43:f8:58:20:ed:
58:eb:d5:ee:ed:df:d2:c5:1e:52:62:1d:28:22:f0:
6f:58:b8:72:ca:26:4f:88:94:a6:cd:50:b9:89:08:
80:f9:77:4b:76:a1:ae:cb:5d:9c:a5:cf:19:97:2f:
c1:13:c4:d6:19:22:30:67:2e:31:00:f6:d0:54:02:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:3E:05:F5:32:5D:D2:F3:7F:30:AE:0F:87:3D:D4:76:E2:58:8A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:305::/48
Signature Algorithm: sha256WithRSAEncryption
a3:44:30:4f:38:b1:43:8d:7b:ee:b4:40:cb:4c:cc:f6:39:90:
f7:43:19:70:22:84:6d:31:da:90:3d:55:fc:0d:62:4e:4a:25:
92:ad:dd:08:a8:00:c9:4e:64:92:fa:5d:6b:81:a3:ce:58:bf:
4e:ea:9e:dd:4b:a6:2f:81:95:65:5c:6d:11:9e:66:8d:68:31:
d3:93:54:5a:5a:9e:30:2d:2e:99:9b:85:ae:5c:32:96:d9:e8:
ed:e5:95:7e:eb:78:7e:16:3b:68:18:11:99:e4:d0:ae:5b:bb:
54:40:74:ff:4f:e7:26:45:5d:f4:f3:07:36:35:95:fc:0b:11:
fa:12:fd:22:5e:01:54:76:1b:bf:cb:ed:7a:94:2c:17:f4:c6:
8d:31:78:7c:63:b1:26:9f:5c:6b:37:d1:97:d1:9a:1f:23:a2:
8c:7e:eb:9f:39:13:0a:ff:ac:2a:82:76:40:75:d6:88:aa:15:
f9:c8:16:12:27:a1:13:17:a4:02:03:70:0a:c2:44:77:4e:77:
82:c6:a1:f4:5e:8c:97:f6:d1:bc:10:42:58:6c:f6:30:88:56:
6b:57:31:08:99:8b:9c:52:c8:c5:e6:81:bd:68:d4:e2:d4:62:
22:46:7b:f1:61:ee:2a:05:1f:3b:c6:bf:06:20:d7:2c:bb:ac:
74:68:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org