Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3333613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: xxlN2bspIp11Uq6ZRQiEiZpFJAZtvLyEyyOJ0uGOvzw=
Subject key identifier: 8C:83:4B:93:94:4B:25:B3:03:B3:3C:64:42:A7:D7:E8:D1:23:9D:01
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3429AE96A9B2ADE2861CE08517AAD217A425CAE3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:14 +0000
ROA not before: Mon 26 Sep 2022 09:55:14 +0000
ROA not after: Mon 25 Sep 2023 10:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:33a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:29:ae:96:a9:b2:ad:e2:86:1c:e0:85:17:aa:d2:17:a4:25:ca:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:14 2022 GMT
Not After : Sep 25 10:00:14 2023 GMT
Subject: CN=8C834B93944B25B303B33C6442A7D7E8D1239D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:46:e7:09:0a:e0:77:67:29:42:e7:09:f0:
c1:e0:c0:25:85:03:e0:18:d2:38:a8:c7:2c:98:f4:
de:93:06:de:c2:38:3b:8b:35:5e:05:b8:14:24:53:
ba:57:c2:b4:c3:70:9c:85:ae:cd:f3:b8:de:b3:75:
51:a8:4a:37:67:9e:2e:01:c3:f3:db:9d:d1:4c:1a:
ea:f8:0e:68:af:98:ae:c2:4b:89:f7:00:1d:1c:9e:
48:81:d9:0c:69:06:93:f1:68:a3:78:d6:09:c5:d3:
1c:47:7a:31:cc:25:39:79:7b:d7:dc:e3:18:cd:e7:
fc:85:bb:f0:a1:da:2f:1e:b4:39:15:d7:38:11:ae:
b7:b0:c1:3e:2a:df:53:d3:f5:7f:12:3c:4e:61:93:
86:47:66:37:09:5e:10:38:9e:4f:59:cc:91:d7:e9:
80:65:b7:a4:be:d5:85:08:1c:67:3b:b6:65:75:78:
44:a8:77:23:16:c9:37:71:1b:23:65:2d:d1:df:59:
26:85:09:87:e6:fa:29:8e:35:3d:fa:a6:a0:0f:7d:
3c:6d:d5:75:ba:fa:47:df:3b:8d:c1:dc:f2:8f:15:
25:8d:2d:fc:98:0e:a9:e0:55:a9:80:76:c1:24:31:
41:b2:4f:5b:3f:e4:01:5c:da:e5:6c:4d:50:ed:ff:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:4B:93:94:4B:25:B3:03:B3:3C:64:42:A7:D7:E8:D1:23:9D:01
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3333613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:33a::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ef:92:2e:8b:a3:12:24:6f:7b:9f:94:98:cb:cd:13:d6:8d:
b7:07:b4:4a:c4:d3:8a:ee:60:54:4c:e5:2a:ea:37:4f:9d:81:
5f:c3:ec:b8:37:88:f4:70:2f:e9:9d:df:5c:de:11:eb:8f:9c:
98:90:2f:b1:da:34:b5:47:a7:db:37:48:35:60:4b:6f:e7:00:
3f:a7:8e:21:a3:20:36:b9:f7:1f:fb:08:cd:65:c6:c2:e5:c7:
cf:1f:75:a6:6c:2f:cd:81:b3:95:cb:38:17:24:39:84:67:b6:
40:e2:99:46:22:f2:06:52:76:41:cc:b6:23:17:74:07:8f:ba:
7e:16:5e:61:ff:fe:cb:f9:1f:de:b4:02:63:ee:66:91:9c:ed:
af:12:75:81:13:d2:f1:73:7a:4e:b3:b4:3c:6b:e4:81:cc:cd:
22:2c:ad:a4:11:44:aa:f3:d4:94:5b:fe:f6:f7:fc:d1:b0:91:
90:fd:e8:59:eb:98:99:ff:c3:d4:cc:e5:30:27:b9:21:3d:c9:
71:1a:4c:2f:f8:45:e5:19:3f:7b:04:ba:25:a7:96:72:1d:50:
94:72:8e:ca:42:3e:69:86:5d:82:be:1a:26:6c:17:f2:50:89:
6a:93:89:c5:4a:b8:ce:b3:90:b0:d4:82:06:7e:60:80:2b:3c:
8c:1c:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org