Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3333313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Czrs3kgBhDUKN7PYRuTRzZFW8IY9pm3OSnuBmM8X+Oc=
Subject key identifier: 19:30:BD:CF:45:49:BA:C5:C7:8E:35:00:36:39:BF:E6:29:4E:0C:8A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7A9322E2093B644681BDF93FC3DA4138586A7327
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:13 +0000
ROA not before: Mon 26 Sep 2022 09:55:13 +0000
ROA not after: Mon 25 Sep 2023 10:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:331::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:93:22:e2:09:3b:64:46:81:bd:f9:3f:c3:da:41:38:58:6a:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:13 2022 GMT
Not After : Sep 25 10:00:13 2023 GMT
Subject: CN=1930BDCF4549BAC5C78E35003639BFE6294E0C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:e8:1b:27:27:2d:69:b7:60:a5:8a:2b:06:
1e:8f:5c:18:2c:aa:55:39:5c:e7:b9:77:16:c2:2f:
31:ef:b9:80:18:b7:24:05:b0:fd:c1:b4:d1:f1:88:
ed:56:29:37:45:2c:71:aa:64:0b:a1:20:c0:0c:5c:
3d:f0:ff:de:71:08:d3:d0:1d:35:f7:56:da:8b:cf:
3f:9d:80:9f:7e:a7:37:3f:57:87:3a:0d:23:72:39:
7f:76:24:bb:c4:72:30:eb:8d:0f:52:7f:5f:da:93:
ea:83:e2:59:a6:cb:a2:e8:2a:a7:06:50:74:24:86:
e1:b5:62:a6:4b:58:0b:b0:d2:f1:20:90:94:cf:58:
f0:fc:fc:a0:f5:df:0e:14:02:6a:d1:91:77:e1:f8:
a3:cd:27:34:64:09:7a:ab:b8:c5:5e:cb:a4:f0:c8:
b0:31:0b:c7:25:6e:12:92:a8:9d:16:83:cd:cb:88:
5d:f2:dd:b2:72:9f:0e:57:48:15:c9:e7:e6:c0:44:
26:dc:9e:09:69:cb:c3:24:c5:61:13:7a:d3:dc:68:
b7:22:89:96:8a:b6:db:9b:e9:7b:b2:99:21:a0:21:
84:ea:d2:75:b6:1d:95:e5:88:c9:27:61:33:08:b4:
19:2e:ef:00:6a:ed:9a:76:6b:8f:bd:4d:6a:c3:65:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:BD:CF:45:49:BA:C5:C7:8E:35:00:36:39:BF:E6:29:4E:0C:8A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:331::/48
Signature Algorithm: sha256WithRSAEncryption
4b:9b:e6:41:94:99:9b:ee:62:bb:87:7c:e0:d8:c1:0b:e1:a7:
10:0f:09:f4:16:07:5f:3a:f9:f1:c0:83:41:db:df:ed:fe:09:
83:26:e1:24:70:6f:ae:47:d6:e0:58:b2:58:1d:a0:17:b8:f7:
09:bb:8d:e1:cb:cf:bb:3e:2a:7d:e5:bd:a4:d6:6d:f3:00:c2:
8a:66:ac:86:62:fa:dd:22:53:30:e7:84:1e:b8:e2:0d:69:b4:
50:a6:df:3f:0d:78:af:84:f0:69:8f:18:51:70:3e:53:f0:b8:
36:d8:cb:f4:a7:bc:56:5b:26:a9:ee:d4:6e:b1:08:23:5d:90:
35:9c:0e:66:9b:38:02:e6:20:ef:0b:66:72:d6:c7:21:11:d8:
f4:44:7b:d7:1e:d8:bd:59:cd:9a:e6:49:56:30:df:64:df:89:
23:a8:e5:2d:6b:a3:42:e3:07:90:cc:b1:1c:40:4e:23:ab:ab:
15:38:c6:4a:3f:c2:7c:8f:62:af:56:ec:5a:e1:69:e6:f4:e9:
24:ef:82:09:5d:bb:2e:ad:65:a9:47:b1:c2:ba:2a:e2:47:14:
81:25:c0:2c:5c:93:0f:82:da:63:29:26:34:90:88:fa:0b:ea:
56:d3:c7:31:64:89:3d:c6:74:c5:3c:f1:11:d6:7a:cc:b7:a3:
2f:a0:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org