Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3332393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6R+xPUC+USlDnCEVHFZhOUZ1ncO4DnRzGgc0T0Br1yU=
Subject key identifier: 08:56:83:8C:0D:F4:39:26:98:35:DF:1F:0B:5E:CE:B0:EC:FF:FF:23
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7C6BB04488B4AAB424708B0A104FC75C2FFC24E8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:23 +0000
ROA not before: Mon 26 Sep 2022 09:55:23 +0000
ROA not after: Mon 25 Sep 2023 10:00:23 +0000
asID: 59282
IP address blocks: 2400:d680:329::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6b:b0:44:88:b4:aa:b4:24:70:8b:0a:10:4f:c7:5c:2f:fc:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:23 2022 GMT
Not After : Sep 25 10:00:23 2023 GMT
Subject: CN=0856838C0DF439269835DF1F0B5ECEB0ECFFFF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:e8:be:15:14:f3:d6:73:44:16:70:61:77:
fd:70:43:f3:3c:5f:ec:9b:5e:89:94:86:66:31:3f:
58:0a:0f:a8:23:45:65:66:b0:4d:1f:07:25:a9:02:
20:ad:d2:a4:a4:15:56:3f:35:de:ba:94:34:60:9a:
df:04:21:e7:ac:16:c8:db:f4:85:be:d7:3d:d8:83:
2b:c2:33:b8:1c:0e:17:5d:6a:b7:06:4b:b2:12:4d:
4a:13:a0:3f:6a:8e:b7:fa:4d:94:1a:a8:5a:a8:90:
fb:c3:00:e0:fd:85:22:98:d2:1e:f6:8d:dd:5f:81:
da:90:a3:61:b9:e7:96:51:06:dc:c1:cb:bd:bb:94:
c9:f2:fc:13:6d:c6:fd:91:44:d2:0f:1f:9a:c1:27:
7c:ee:e6:3c:d9:5e:2b:d5:d8:72:8b:ad:38:cc:a9:
96:d6:48:35:1b:d1:ed:cd:99:fb:b0:56:92:26:c7:
5f:25:0f:e0:13:fe:80:0f:9d:37:30:98:4e:04:5c:
6b:46:27:f5:d8:67:01:8b:22:66:f2:0e:61:a1:18:
66:6f:ef:5b:a2:09:79:6b:c1:e2:f6:05:11:cf:f4:
6e:f7:e6:83:50:ec:07:ff:20:bf:02:15:b6:2e:13:
c4:69:1f:10:10:33:bb:f3:c2:51:9e:54:5d:20:9f:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:83:8C:0D:F4:39:26:98:35:DF:1F:0B:5E:CE:B0:EC:FF:FF:23
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:329::/48
Signature Algorithm: sha256WithRSAEncryption
48:3f:b9:2e:9c:07:4e:21:4b:79:0b:60:1c:7a:6c:28:3f:ad:
6c:de:03:a5:72:4b:70:5c:6c:03:67:a9:17:04:c0:ba:4b:63:
e3:a0:57:36:c7:8a:cf:c1:bd:f9:e7:1d:9d:e3:da:6a:76:11:
9c:ae:5e:77:b2:e1:32:c5:69:58:11:fe:89:d1:bb:cd:ad:34:
ca:18:53:67:60:d5:b6:7b:64:c8:0e:1f:4e:e1:b0:04:eb:5a:
7c:cf:44:53:8b:62:cb:b7:3b:ab:aa:d2:aa:e1:94:20:1c:73:
cf:38:b0:fa:10:cf:5c:67:2e:af:be:99:e3:5e:81:b0:3f:76:
1c:0f:14:65:10:5b:4a:c4:b1:c3:bb:2d:bd:58:2f:2d:45:c3:
0c:74:fe:36:61:59:f4:2a:31:3a:54:b8:36:8e:06:7a:c6:2d:
7c:10:4c:eb:36:f3:b5:7f:08:5f:be:29:4a:f1:c2:cf:db:72:
d9:4c:42:c2:6a:dc:fa:99:bc:46:27:80:78:da:31:f3:5d:96:
e6:d3:f4:b4:9b:3f:54:a1:4c:2d:95:ee:8e:d9:8a:38:2e:c9:
80:5f:76:55:1d:85:07:67:ff:71:ed:5d:41:59:2e:1c:16:23:
b6:0a:0e:c2:c0:47:9d:b7:1f:b1:99:27:5f:74:61:b8:fc:8b:
b0:8f:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org