Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: heK+zlARjeN58ZyrsTCPGv79ztxIIGo0aC86enKWeSE=
Subject key identifier: 25:8F:62:A3:8C:D4:27:12:6C:AF:50:F4:3F:15:9D:FC:00:3C:B4:36
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0924325B07315AAE501E034062FEDB4056CE9D68
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:24 +0000
ROA not before: Mon 26 Sep 2022 10:55:24 +0000
ROA not after: Mon 25 Sep 2023 11:00:24 +0000
asID: 59282
IP address blocks: 2400:d680:344::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:24:32:5b:07:31:5a:ae:50:1e:03:40:62:fe:db:40:56:ce:9d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:24 2022 GMT
Not After : Sep 25 11:00:24 2023 GMT
Subject: CN=258F62A38CD427126CAF50F43F159DFC003CB436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:ab:02:64:c4:af:45:fc:0a:17:be:0e:c3:
e9:4c:9d:cb:ba:f5:34:6b:2a:7d:33:ae:e3:0f:e0:
76:9b:ed:8d:f2:c6:57:da:b4:69:45:e8:07:9d:5b:
d8:40:1f:77:eb:30:b2:2b:fb:84:13:c9:a9:a9:cb:
12:87:d2:a0:a8:bb:7e:10:9b:a5:28:27:33:04:49:
34:bc:5f:5f:5c:90:0f:9c:c2:72:af:74:9a:1d:fe:
0e:c2:44:e3:ef:98:c4:ba:95:96:e7:90:33:ae:5e:
63:f8:e8:01:97:d8:84:8c:7b:37:0c:8f:88:cd:fb:
81:77:1f:29:05:38:b3:c4:1e:41:53:65:4d:f8:d3:
62:36:8f:f3:0a:b8:06:6a:9b:8c:a3:b5:74:75:b2:
62:88:a9:0a:49:ee:c9:08:3d:a3:e7:b5:8f:88:21:
9f:53:7a:16:9a:96:90:a5:83:a4:57:bb:d9:fa:03:
5f:ab:bc:26:88:29:4b:61:5c:3e:eb:33:bc:92:8c:
a5:d7:b7:de:dd:93:1b:56:55:f0:4e:bd:28:e3:91:
ea:df:56:85:22:e1:67:4f:08:1d:20:66:9a:c3:c1:
cf:4f:81:43:d0:df:34:48:5c:80:7a:5e:db:4c:7f:
fd:b0:68:a5:bf:e0:ae:77:a4:00:b4:20:49:42:34:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:62:A3:8C:D4:27:12:6C:AF:50:F4:3F:15:9D:FC:00:3C:B4:36
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:344::/48
Signature Algorithm: sha256WithRSAEncryption
23:5b:c1:46:6d:1c:01:be:47:c4:a0:23:62:a5:59:3a:3a:58:
a5:46:38:9d:20:df:86:32:74:01:8d:57:49:cb:77:4e:51:ba:
a6:51:40:0e:e4:bd:88:5e:38:85:2c:1f:09:96:f6:b8:ca:a7:
27:af:18:9a:cd:41:17:bb:e2:8a:a3:14:30:aa:0e:00:08:71:
51:7a:9b:fc:d1:95:0f:de:ba:61:ae:a3:01:aa:05:d0:9f:93:
51:d4:32:dc:22:78:b6:58:a8:be:70:49:96:40:8e:b5:4e:28:
d3:b6:94:4e:89:dd:58:99:ce:d4:4c:53:e9:4e:af:6d:23:5b:
0d:a9:2d:84:03:4e:32:fd:19:e7:88:c9:92:cb:2e:60:10:18:
97:c4:4b:43:e7:8f:23:7a:7f:81:30:e2:5e:e2:8d:52:0b:f9:
2f:92:00:fd:2c:2d:e8:2f:a9:f9:f2:33:db:64:f2:48:67:2f:
80:74:88:37:0b:6d:96:c5:4f:9c:cc:b2:a4:49:24:22:7a:1a:
60:8c:4f:76:6b:19:ea:43:2f:77:14:5a:38:39:9f:a6:dd:7e:
0f:6c:c8:d2:5a:b3:f1:2b:8e:05:20:6e:bc:71:44:88:85:43:
a8:19:98:fb:9f:7e:99:d6:9b:8e:80:79:9a:26:ce:92:51:24:
49:f4:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org