Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3331663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6lDRhCLKVHW4nnn3ECWSLMa1WuzdE78gQmJYSlMyle4=
Subject key identifier: E1:ED:BC:87:71:93:1B:A3:EB:1E:BB:11:71:64:10:EB:81:91:82:C4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7D628F347C51ECF0218C2D05ABF96C543DE5A8BC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:22 +0000
ROA not before: Mon 26 Sep 2022 09:55:22 +0000
ROA not after: Mon 25 Sep 2023 10:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:31f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:62:8f:34:7c:51:ec:f0:21:8c:2d:05:ab:f9:6c:54:3d:e5:a8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:22 2022 GMT
Not After : Sep 25 10:00:22 2023 GMT
Subject: CN=E1EDBC8771931BA3EB1EBB11716410EB819182C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:2d:ce:75:89:30:5f:13:80:e0:d1:87:4b:
0c:ec:38:fa:41:08:80:e6:e8:3b:5b:15:a8:0c:c0:
5b:55:07:02:15:64:cc:ed:7b:ab:76:14:64:de:c3:
0f:0d:6c:ec:e1:21:2c:88:ef:d8:82:80:58:35:cd:
ed:6a:9b:49:86:34:a9:21:cd:77:2a:13:8d:b5:93:
a6:bf:77:5d:9b:0d:98:88:2d:ce:31:1f:23:9e:03:
35:14:e2:aa:ea:03:6e:d0:01:4a:94:31:3c:04:04:
9e:ef:7f:72:f7:57:99:d5:6e:c2:2d:3b:f2:3c:17:
e8:4a:0d:2a:81:1e:05:01:32:b7:81:ef:0a:c2:f6:
5e:d6:ed:ab:0d:c4:12:b5:4d:a1:4a:9a:d5:90:1a:
2b:e6:d8:dd:20:ff:62:0b:c5:99:a2:44:41:68:56:
af:fd:d4:e7:c4:2d:8b:00:09:eb:fc:25:f1:ce:23:
f1:fb:63:1f:1b:ac:b4:e0:d1:ff:93:ea:b3:47:d5:
b2:ab:4a:43:d2:f0:51:9b:ec:9f:ef:a2:ec:62:ff:
0d:c5:49:a5:05:04:da:81:d0:07:0d:14:b1:b1:ad:
d2:b6:72:a2:e1:02:76:b3:63:4a:da:b3:80:d7:dc:
0a:4d:78:5f:f8:b8:40:cf:b1:d2:e6:35:dd:be:df:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:BC:87:71:93:1B:A3:EB:1E:BB:11:71:64:10:EB:81:91:82:C4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:31f::/48
Signature Algorithm: sha256WithRSAEncryption
90:67:a6:d7:df:a5:09:d1:00:e9:54:de:47:e4:df:d5:bb:cb:
80:60:a1:a0:e8:89:ea:98:9e:a6:30:c1:b3:1c:02:83:c6:7c:
49:98:18:68:50:86:a1:a1:89:6e:64:f6:df:2a:48:bd:14:80:
43:11:d5:e0:e6:f4:1e:38:6d:8b:8e:c7:9e:ca:64:01:1a:0b:
6e:fe:87:1b:c4:d8:0e:17:e8:1e:6e:03:be:a4:22:08:4e:85:
98:df:d0:17:3b:ac:62:70:d1:b3:2c:fe:e4:b8:60:65:85:7b:
b6:af:0e:b5:b0:5c:4c:3a:cf:83:e2:a0:82:13:53:ee:da:dc:
17:21:b6:e7:c6:cc:dd:f3:6e:24:70:86:dd:54:c2:67:ba:f0:
c3:71:c9:34:aa:9e:a2:82:a6:2a:66:13:8f:d5:d0:6b:e8:0c:
71:4f:00:57:4e:80:83:18:47:e0:1f:25:1e:8b:c9:25:74:3c:
2d:21:05:db:e5:1f:5c:a5:1e:9d:4e:b8:bf:2f:ca:b0:0f:3c:
22:99:e8:0d:22:48:27:30:9b:9d:c1:92:c1:d3:98:42:65:9d:
63:af:b9:6d:d0:3d:db:b1:7b:92:f6:3d:7c:44:b5:43:01:02:
1b:86:25:a0:da:4a:38:fb:6a:1e:61:82:1d:70:69:6e:b6:c1:
bf:34:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org