Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3330383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: vL4tsU1etsC/9qeoPeNhQXxZDTIVaswxW/jICPHSGB0=
Subject key identifier: F3:8C:2F:BE:51:2E:AF:21:9A:E2:E3:9D:04:BB:EA:F9:10:D5:87:0D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4F7AF1ACE43B085E8D306C8338C884EF0CD02343
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:00 +0000
ROA not before: Mon 26 Sep 2022 09:55:00 +0000
ROA not after: Mon 25 Sep 2023 10:00:00 +0000
asID: 59282
IP address blocks: 2400:d680:308::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7a:f1:ac:e4:3b:08:5e:8d:30:6c:83:38:c8:84:ef:0c:d0:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:00 2022 GMT
Not After : Sep 25 10:00:00 2023 GMT
Subject: CN=F38C2FBE512EAF219AE2E39D04BBEAF910D5870D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:50:c7:7f:2f:64:03:50:75:18:86:93:8c:
b0:89:eb:53:43:bf:f9:8c:87:8a:6a:43:ff:ec:f9:
23:78:9b:aa:42:98:8d:e1:2c:95:0e:ae:2e:c5:4e:
d3:e3:b2:1d:45:a6:da:d9:79:a1:8a:cd:db:fd:eb:
2e:a7:4c:5a:ec:66:cd:5e:a3:2f:8c:99:17:be:a6:
87:3f:ff:40:59:3b:00:e3:c3:b5:c8:f8:36:d6:8f:
0a:49:ab:f5:30:00:08:95:bf:57:ba:25:68:6b:d3:
e8:ca:98:c4:41:a5:15:d9:fe:18:a7:ca:4a:5c:e7:
f9:fa:15:62:c4:3d:9a:ff:89:c3:bc:ac:ca:0c:25:
90:96:e2:24:9d:db:a8:a2:f8:be:ff:b1:5c:57:7a:
e3:93:59:3b:ca:94:52:7d:41:3e:95:ad:c4:5b:b5:
25:6b:9f:9e:d2:17:08:92:ef:d9:f6:6d:7d:a3:7f:
04:9c:48:b7:61:c6:6c:db:85:41:eb:4e:25:10:e2:
ba:d6:46:41:b8:56:78:25:ee:03:a7:3b:34:64:74:
52:3e:b0:51:86:6a:45:c5:a8:59:e6:3c:69:da:e9:
6d:45:e0:3e:70:24:dd:ad:db:16:cf:51:57:0d:a8:
e4:27:b4:63:04:51:4f:62:33:65:e0:94:a3:4e:d5:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:2F:BE:51:2E:AF:21:9A:E2:E3:9D:04:BB:EA:F9:10:D5:87:0D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:308::/48
Signature Algorithm: sha256WithRSAEncryption
38:bf:e2:10:9e:1d:2c:9f:3e:bd:79:ac:61:05:92:9e:75:fa:
19:4f:e4:26:b5:58:aa:3b:85:9b:3a:ad:38:82:9c:c7:e5:1c:
e3:b0:c7:55:e7:75:ff:93:b9:82:46:3c:82:cc:c0:fb:3e:7d:
35:e7:92:11:ad:a8:db:1b:b6:3a:d3:f5:98:21:f8:ad:29:1a:
c7:88:e7:36:03:2a:ba:ef:5d:7c:ed:0a:09:66:55:e0:9e:0e:
53:18:73:a4:aa:20:5d:c3:4c:be:76:47:2c:14:9d:ab:78:a8:
41:7d:9a:a4:08:f0:11:08:63:8c:45:32:32:2d:ca:e3:ce:d9:
a9:d8:ac:b4:ad:5c:fe:f0:a8:a7:c7:90:28:af:48:63:a5:9a:
2e:3a:ad:5b:6f:d9:5a:06:7d:83:b9:9b:ea:7d:d5:e5:e4:a6:
48:a1:bc:a5:f5:2f:73:04:43:09:fe:54:9f:0b:07:2e:44:7f:
1f:aa:6f:97:61:95:c1:87:85:aa:ea:80:b2:89:cc:d1:af:49:
b7:50:01:a3:29:84:90:32:03:10:95:e2:44:8a:dc:70:8c:cb:
b2:4d:5f:db:8c:64:94:2b:94:72:99:63:1a:98:a3:42:1d:e8:
70:d6:50:8f:71:ba:01:de:5e:b3:5f:18:8d:45:7e:37:f6:45:
9d:67:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org