Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3333363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: CL6SiTx1IUdjOL5ByEc1zNNDwrZsL+AdA9OTipPF/WE=
Subject key identifier: 8F:20:B4:3E:53:19:8B:C9:85:8B:5A:9D:58:7F:6D:7A:37:29:63:7E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0E020C76424AE5F6D537A96EEC4E979265568EFA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:25 +0000
ROA not before: Mon 26 Sep 2022 09:55:25 +0000
ROA not after: Mon 25 Sep 2023 10:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:336::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:02:0c:76:42:4a:e5:f6:d5:37:a9:6e:ec:4e:97:92:65:56:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:25 2022 GMT
Not After : Sep 25 10:00:25 2023 GMT
Subject: CN=8F20B43E53198BC9858B5A9D587F6D7A3729637E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:0f:24:ba:fd:1b:8a:e9:2a:bb:e2:02:57:
16:41:f1:ab:d8:4b:c7:1b:e3:bf:0a:74:5b:30:0e:
3a:17:6c:9e:93:10:44:17:52:38:a4:94:e8:4f:32:
d7:52:b1:02:a5:48:43:5d:cc:74:bc:c2:d4:46:ea:
08:1f:4b:7b:6c:e6:55:ba:6c:e1:00:9b:9c:15:72:
a2:d6:d5:29:9a:54:82:d7:22:8f:58:a7:94:17:75:
3c:67:0c:72:b1:3f:fd:f6:60:eb:f5:38:f1:0c:c8:
b5:dd:69:78:ea:57:2a:82:96:52:ce:ce:05:8b:56:
32:a9:ac:a3:70:ab:ad:1c:f6:74:2d:3f:06:95:6f:
29:37:02:ad:ee:1d:36:f8:d4:7e:c3:f6:d6:1b:d1:
19:3b:62:93:79:08:d2:41:57:83:fb:3d:bd:80:d6:
df:16:2f:3a:14:d2:a0:12:bb:6e:58:b8:3b:a5:f8:
72:6a:ae:a5:f3:8c:a9:39:cc:2c:e1:bf:3b:b6:7f:
c9:60:9c:f2:b6:4a:cf:13:c0:e7:75:f1:bd:b8:bc:
b7:2c:c8:36:d5:9f:0d:27:18:c3:8b:04:9c:09:13:
ae:cb:8f:37:7e:2f:b0:9f:26:26:c4:21:f2:be:d3:
7f:0f:07:51:b9:07:5c:18:66:25:a5:96:45:b9:7b:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:B4:3E:53:19:8B:C9:85:8B:5A:9D:58:7F:6D:7A:37:29:63:7E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:336::/48
Signature Algorithm: sha256WithRSAEncryption
0d:3c:c4:24:4f:db:fe:e4:b5:fc:e1:03:04:1a:f1:09:9a:02:
c0:0e:11:72:ea:3c:c0:8d:4f:aa:6f:99:15:b7:c3:1d:a2:aa:
5a:c3:0d:44:6e:65:4b:7e:1c:b1:1c:8d:a2:11:2f:6b:e5:a3:
0a:b0:08:17:c1:30:6e:fc:ae:44:02:44:a5:1c:9d:2e:26:9c:
36:04:08:be:53:af:4a:f0:67:39:fe:a8:73:5f:8b:3f:8b:a7:
14:67:3a:37:0c:3e:24:60:e8:17:23:0a:7b:a5:06:98:1e:02:
18:21:4f:83:91:2c:45:1e:9e:f9:2c:10:57:90:7a:59:d5:43:
8b:1e:c7:a2:3d:f2:f4:71:39:db:74:2f:a3:57:d2:e8:be:06:
51:9d:b6:0e:28:bb:6d:21:19:51:34:ac:96:93:6a:70:8f:f9:
29:f1:6b:78:cd:fa:32:a0:d0:5a:af:53:87:b6:c4:4e:87:01:
f1:b2:5d:b2:4d:3f:73:53:48:e4:cb:e5:7b:17:0a:29:a6:d3:
bb:17:97:91:78:63:3f:fa:bb:55:06:d3:b1:48:86:03:e8:d3:
07:c9:ca:cc:3b:c7:67:35:13:f8:eb:68:ce:54:27:2c:7e:ac:
3a:b4:3e:b5:44:b3:56:1b:40:61:95:31:fa:af:2a:f6:ad:c5:
6b:b6:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org