Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3332633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7lrKniSRvi58fa0kV5t/4hTuFZlhftCi0O6e1rJR+N8=
Subject key identifier: 94:B4:6C:CF:FB:A4:E9:73:9D:9A:3B:81:CD:F1:61:AA:29:EC:0D:20
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 088A9D4ECADC4711AFF190CFDDC1369343C39E99
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:12 +0000
ROA not before: Mon 26 Sep 2022 09:55:12 +0000
ROA not after: Mon 25 Sep 2023 10:00:12 +0000
asID: 59282
IP address blocks: 2400:d680:32c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8a:9d:4e:ca:dc:47:11:af:f1:90:cf:dd:c1:36:93:43:c3:9e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:12 2022 GMT
Not After : Sep 25 10:00:12 2023 GMT
Subject: CN=94B46CCFFBA4E9739D9A3B81CDF161AA29EC0D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:3b:62:66:ce:16:99:8c:a5:d5:23:e4:72:
b3:96:b9:b3:83:08:29:af:c5:5c:21:b6:3f:29:81:
53:70:0d:b9:49:e2:34:5a:44:bb:ff:65:95:3f:48:
74:72:c5:8d:99:89:7b:1c:68:ab:92:d5:a8:76:81:
71:2a:4b:cb:b5:9c:d5:4c:4a:8a:02:81:b4:8d:31:
81:58:5e:57:7f:93:a6:45:39:4c:35:ee:c0:c7:9e:
af:e8:76:45:ff:2e:d9:2c:b3:f8:a1:b8:cf:3f:93:
3e:f7:83:79:86:b4:ed:87:1f:52:51:e3:78:1d:ab:
0d:d9:a6:e8:70:4d:1b:b9:9a:01:21:55:03:b8:a4:
49:06:f9:c6:f5:78:a4:9c:1f:fa:c9:86:16:ad:30:
f0:39:d9:d8:af:de:fd:19:d6:35:44:50:47:72:08:
e3:0f:85:93:4b:5c:d4:52:73:88:b1:6f:39:e4:e9:
d5:7a:da:ed:78:b5:8d:14:7e:18:8d:b2:8b:ec:02:
5e:28:f6:b7:06:41:87:9c:11:67:f8:be:5f:f0:24:
e6:4b:f3:c0:d4:17:3e:ef:82:3d:7f:cb:98:0b:6e:
27:ce:f8:70:06:94:54:3b:2b:e6:b9:e0:3b:67:b7:
6a:66:9b:37:38:6b:cd:bf:42:68:74:34:06:9d:d8:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:6C:CF:FB:A4:E9:73:9D:9A:3B:81:CD:F1:61:AA:29:EC:0D:20
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:32c::/48
Signature Algorithm: sha256WithRSAEncryption
6b:aa:fd:62:39:b1:8c:5a:5c:25:34:af:37:7f:89:30:0b:34:
67:82:2a:e9:6e:05:44:bf:7c:5f:8d:c5:67:14:d7:80:dc:12:
5b:65:a5:ab:e6:75:72:a3:c4:89:73:00:c5:88:19:7f:77:c3:
0d:9e:df:37:0f:b3:3e:dc:05:7b:1f:21:3c:b0:1f:0e:b3:9f:
21:0b:43:7e:7f:52:09:35:e6:73:60:9d:dc:26:7f:5c:37:a2:
b9:2c:fd:47:e5:87:a1:aa:fb:ed:ea:36:22:58:b4:96:89:df:
18:b1:88:90:20:8d:55:d6:45:fa:98:bf:db:2e:9d:af:31:9d:
95:74:31:62:ba:c8:82:75:fa:18:ac:de:6b:e6:ca:8f:1b:65:
93:a9:4b:a2:b7:35:b5:a0:cb:4f:fd:7b:3f:24:a9:b2:ed:17:
7f:e3:55:14:eb:06:c2:93:a8:6b:85:27:a6:7e:32:42:68:c2:
92:99:d7:0e:ba:7a:4e:94:e4:03:ee:cc:84:c4:bd:06:9d:27:
55:17:eb:ec:b9:3b:0f:b3:86:ee:e1:e4:12:20:64:ac:99:fe:
86:f1:32:a6:7a:25:ad:0f:a7:28:3f:e0:b5:89:89:0e:e3:b3:
10:a7:1a:ad:49:1c:a7:6f:f5:9a:46:0f:aa:34:11:8b:7c:d7:
4f:70:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org