Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3331373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: S6jds8OjuHIL6pR9yamtacjYO+hbNX4TMC3dG3ZTDfU=
Subject key identifier: 0F:27:77:1F:20:1B:09:7A:6B:ED:60:82:9A:BA:4E:71:B7:1D:D3:48
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 526BDE00AC4B7FFB22E3F8127235A2C30D5D7242
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:06 +0000
ROA not before: Mon 26 Sep 2022 09:55:06 +0000
ROA not after: Mon 25 Sep 2023 10:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:317::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6b:de:00:ac:4b:7f:fb:22:e3:f8:12:72:35:a2:c3:0d:5d:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:06 2022 GMT
Not After : Sep 25 10:00:06 2023 GMT
Subject: CN=0F27771F201B097A6BED60829ABA4E71B71DD348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:ce:f0:f3:15:f5:6b:2a:68:80:79:5a:88:
86:de:bd:ac:b6:31:02:02:d0:c0:71:3f:51:31:92:
12:04:97:2a:ba:29:50:b7:e8:f6:fb:24:1d:de:fe:
44:0d:99:ed:b2:19:03:04:5d:45:ec:2e:ac:aa:5b:
9b:b6:21:d1:ee:ed:10:78:2c:ed:24:af:41:22:68:
47:94:4b:85:b3:44:a9:4a:18:7b:c6:7f:b7:c2:91:
34:1c:09:19:00:58:7c:09:c3:67:f8:61:9f:f2:c1:
62:a5:97:2a:19:a5:56:db:9f:e5:3b:39:32:bb:39:
2f:96:10:b5:a1:88:00:1c:41:77:b6:42:67:30:94:
22:31:82:45:6f:06:c9:0f:9c:82:12:38:45:cb:c1:
69:36:ea:f0:48:9b:62:94:9d:10:2a:0d:51:60:4c:
b8:7d:73:98:fb:30:b6:f4:1c:e4:1a:46:f0:29:36:
62:63:5a:ae:f7:6c:dc:ab:83:98:7d:67:47:33:c0:
4d:c7:c5:d3:65:06:35:21:52:e2:56:fa:81:61:77:
7d:73:0e:20:77:cb:23:11:04:08:eb:c8:cd:b4:23:
dc:ff:12:f8:3e:54:b0:57:a6:7e:68:dd:ee:b7:a5:
4e:d4:a7:c5:15:c7:f9:be:11:33:50:70:15:51:b2:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:77:1F:20:1B:09:7A:6B:ED:60:82:9A:BA:4E:71:B7:1D:D3:48
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:317::/48
Signature Algorithm: sha256WithRSAEncryption
c0:79:30:e0:ae:29:1c:f0:97:1a:0f:de:2e:8f:a7:e0:56:41:
b4:2e:3b:c3:82:bf:3f:f6:73:4c:07:7d:ea:64:70:e0:7d:f8:
c7:c7:6d:07:24:3b:cb:aa:cb:6f:ce:d7:fa:15:ba:a9:3e:0d:
2c:6d:7d:cc:dc:17:ba:29:5c:ac:48:d2:45:77:08:3c:c5:41:
a7:b0:c5:cd:c9:76:86:df:93:66:e1:a3:54:42:01:d7:92:86:
3b:b8:bc:29:78:1a:26:08:e2:9c:c0:71:d7:0c:fc:a3:64:de:
db:61:08:cc:85:ad:58:06:78:14:ca:73:6e:9c:de:f9:c0:28:
0e:30:c8:56:33:2a:12:ec:0f:05:bf:81:c9:e9:be:14:4c:88:
af:ee:e9:33:2f:0d:3f:60:ee:1c:ce:08:b4:ed:2b:4a:60:89:
a3:c3:30:a7:2b:a6:ac:a3:35:cf:71:77:f4:a4:5b:a4:c6:b8:
86:a8:ab:bb:b0:62:3b:7c:31:6a:6e:c9:d0:64:f7:9d:68:34:
14:72:fa:bd:b4:e8:a4:c4:f6:bd:e4:fa:0b:02:f6:a7:6a:c1:
f7:a0:39:11:7f:01:5a:97:97:92:16:ab:fc:59:73:48:6c:bd:
6c:11:d7:9f:b0:f3:41:e1:58:2f:7c:76:3b:45:a3:c6:40:dc:
32:89:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org