Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3331653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: PhBbDlBUIeX1RP/gJKy48WY2Z/qlkjYSNVi394lrPBo=
Subject key identifier: 81:DE:9F:EF:E5:BA:EC:26:D4:DF:60:26:A8:27:74:65:71:0A:9A:98
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1AA6CBDFA5C27DBC1EDF5E504804EB5E482416DE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:14 +0000
ROA not before: Mon 26 Sep 2022 09:55:14 +0000
ROA not after: Mon 25 Sep 2023 10:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:31e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a6:cb:df:a5:c2:7d:bc:1e:df:5e:50:48:04:eb:5e:48:24:16:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:14 2022 GMT
Not After : Sep 25 10:00:14 2023 GMT
Subject: CN=81DE9FEFE5BAEC26D4DF6026A8277465710A9A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:88:35:ca:93:f1:e8:7a:a6:d7:cd:27:15:
c5:b1:c9:a1:84:10:f9:a3:54:54:3f:86:ba:c7:53:
ed:6a:a0:af:d0:99:4d:ab:ef:fe:c7:4e:9f:bf:d2:
8d:ce:5d:84:4d:b9:ab:fb:33:c8:dc:75:a1:05:8f:
e6:4f:ba:99:5a:b1:69:50:a1:52:e5:f8:98:39:3f:
74:00:0b:82:78:f2:87:64:de:bf:e1:0d:95:45:68:
6c:1f:69:b7:c2:1e:04:ab:c1:dd:be:85:2e:64:07:
ac:2b:93:5d:b4:1b:a8:02:4f:a7:af:fb:d0:9d:9b:
0d:ac:04:2c:b7:9d:13:9c:1d:25:de:8d:93:a6:fb:
ff:df:ca:47:4b:ed:00:08:69:9b:82:b4:b1:42:14:
cf:89:5d:c5:bb:e6:c1:a0:20:12:fc:df:02:c7:8f:
2d:23:3a:82:d6:c8:96:da:52:13:67:cb:b6:9c:06:
80:59:9d:de:38:ce:29:e8:68:6e:65:9e:15:2d:15:
30:a9:89:05:c9:94:42:d0:14:80:f9:a6:fe:6a:f6:
10:96:d1:47:26:ed:2b:39:27:28:68:c2:6a:ff:1d:
f1:73:97:b8:af:b6:61:e5:28:51:12:45:0a:23:7f:
51:2c:d2:bf:54:08:ab:59:3b:f1:51:be:3a:a0:99:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:9F:EF:E5:BA:EC:26:D4:DF:60:26:A8:27:74:65:71:0A:9A:98
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:31e::/48
Signature Algorithm: sha256WithRSAEncryption
58:32:37:df:af:40:74:ec:1e:1f:67:ef:0a:bf:e2:7f:4f:79:
80:6f:e3:f7:83:21:f8:a1:b6:8b:3f:26:1b:09:98:af:a2:51:
7b:cb:aa:1f:95:63:3d:5a:00:b2:20:92:80:64:3f:ea:32:ff:
1a:9d:0e:e0:20:0a:ff:c9:43:4a:e2:39:a3:9d:29:c4:3d:39:
5b:c4:2d:1e:a5:20:c8:ad:fc:53:51:da:b6:8d:5d:87:7b:da:
32:aa:44:07:40:47:6d:c2:ef:49:6a:58:d1:c7:5b:41:93:16:
00:04:87:e6:53:38:fc:0b:46:09:92:93:41:dc:68:77:10:42:
18:50:73:4b:46:67:d1:7e:95:8b:ae:28:71:2f:ce:43:0c:52:
81:5f:48:56:8e:be:d5:35:d6:ab:55:d2:05:92:e0:7e:2a:df:
b5:76:4d:d1:39:98:ff:6f:57:9b:1a:19:ba:81:11:3f:eb:3e:
ad:cf:5b:61:1e:83:20:df:16:ba:d2:5e:60:41:04:c6:7a:be:
87:82:a8:43:24:66:6a:61:0f:fb:98:16:51:73:d0:d8:37:5f:
5d:67:be:00:a0:73:3e:02:23:26:36:e8:35:fa:bb:ce:55:c4:
65:1f:75:e3:0f:39:b6:bc:34:9b:60:e9:99:23:d9:d2:cc:7c:
8f:95:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org