Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3333373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: uMod5Y/PhjmuZFAHlPL1FC1zFNS9HtdOuGpuIisiYQ0=
Subject key identifier: 08:6A:F6:F5:05:BF:E1:18:58:10:AF:BE:B7:EE:52:AB:C2:2C:6C:D1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 40367F93ECF106E15CFBB1F820C4DE6C2E3E83E2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:15 +0000
ROA not before: Mon 26 Sep 2022 09:55:15 +0000
ROA not after: Mon 25 Sep 2023 10:00:15 +0000
asID: 59282
IP address blocks: 2400:d680:337::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:36:7f:93:ec:f1:06:e1:5c:fb:b1:f8:20:c4:de:6c:2e:3e:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:15 2022 GMT
Not After : Sep 25 10:00:15 2023 GMT
Subject: CN=086AF6F505BFE1185810AFBEB7EE52ABC22C6CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:a3:5f:27:9c:69:2a:9f:c3:d2:2b:b5:fc:
d2:23:10:c5:3f:45:77:41:8a:49:d7:aa:33:6e:e8:
29:b6:70:13:70:18:51:b5:ba:52:2f:18:1a:4b:80:
dd:3b:ea:d3:9f:a6:04:8b:58:87:e4:f9:c4:d1:f1:
e8:8b:c4:98:8c:14:62:2a:78:cf:c2:e8:38:47:7d:
86:a5:4a:41:63:e5:54:76:af:c2:9c:0f:ce:17:64:
9e:92:0e:af:6e:62:9b:aa:fe:f3:ca:ec:3f:22:7a:
41:ca:2e:ca:02:e6:36:57:cc:29:fe:75:02:c4:7d:
9d:a4:37:80:96:0d:44:14:65:46:80:13:8f:b6:cf:
3c:a9:aa:a4:5f:85:a6:49:a4:f8:47:ef:f4:4c:86:
ee:fd:41:cf:95:f4:69:f6:46:4c:d6:9e:67:13:d5:
08:e9:b6:94:59:12:b8:d3:01:ec:b7:c5:82:68:30:
f5:75:59:e8:ad:c5:d4:f0:18:8b:7b:94:41:51:a9:
6e:1a:f8:69:88:66:cd:7c:f1:8a:8f:9c:d5:13:e5:
98:3a:3c:b7:17:8b:19:d9:68:1e:52:3d:0d:a5:ad:
55:76:cb:3d:49:6f:e0:f3:4f:8e:46:66:a7:35:dd:
fb:ca:f5:8f:2e:15:25:e8:30:ca:1f:f4:bd:18:54:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:F6:F5:05:BF:E1:18:58:10:AF:BE:B7:EE:52:AB:C2:2C:6C:D1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:337::/48
Signature Algorithm: sha256WithRSAEncryption
9d:5a:b9:38:88:8c:6c:c6:3a:a4:93:5b:cc:3e:29:e7:03:f6:
ca:7a:a9:18:d8:07:c8:4c:a3:c0:05:2a:02:bf:e7:4a:49:b1:
09:03:46:9a:28:d7:da:bd:09:4f:e4:6d:f6:e3:c2:04:ca:21:
30:a8:e5:67:b2:08:f6:3c:04:a4:0f:66:a8:0c:db:4e:92:6b:
f5:d3:da:c0:46:f5:52:66:7f:aa:f2:4a:05:c3:e1:3e:a9:14:
b5:fc:80:e7:1a:6d:4b:ef:b2:7d:fc:12:a5:92:b3:14:0d:87:
97:e1:7c:39:3b:1c:ac:18:2a:e6:e9:27:9e:f9:8e:f3:69:11:
e1:8d:2c:4a:1f:3f:6d:3f:a1:8e:95:2f:72:37:b5:dc:12:fe:
a4:ae:bf:f7:ac:64:b5:92:bf:78:14:99:86:fb:bb:fd:f9:22:
06:6e:57:11:38:c8:a1:b2:37:18:fa:ea:e5:32:da:e2:f5:c9:
98:55:b5:e0:af:f8:ad:99:b9:76:58:ed:ea:b6:62:85:ec:9a:
59:a8:18:22:81:47:24:24:02:d4:71:c8:76:34:ba:27:08:6d:
28:f7:15:74:77:e0:5f:3a:80:14:0a:99:4e:08:61:75:96:5b:
0d:17:82:4f:d3:19:dc:33:4a:c7:eb:7f:b6:e1:3c:d4:da:c8:
b5:a8:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org