Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: b0yCQwFxNoc9SLx10rKuKEV2MkYQx+MzF/Bhpu9+LM0=
Subject key identifier: 9E:D4:0A:10:E5:CA:D5:5B:89:CA:DB:F4:F6:00:A6:E7:FC:FE:8A:56
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 59CD2228FB59041D2B431763298FA8DDA37FC398
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:49 +0000
ROA not before: Mon 26 Sep 2022 10:55:49 +0000
ROA not after: Mon 25 Sep 2023 11:00:49 +0000
asID: 59282
IP address blocks: 2400:d680:34a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cd:22:28:fb:59:04:1d:2b:43:17:63:29:8f:a8:dd:a3:7f:c3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:49 2022 GMT
Not After : Sep 25 11:00:49 2023 GMT
Subject: CN=9ED40A10E5CAD55B89CADBF4F600A6E7FCFE8A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:8c:a5:ac:03:6b:7a:22:a9:d4:42:2a:44:
c2:84:ee:9b:a8:04:b0:fb:f8:69:d9:8e:cc:85:74:
e0:94:04:fc:2a:21:62:b7:f8:12:b3:eb:c1:2a:0e:
da:57:46:bb:9d:02:8b:24:84:27:b8:46:19:98:79:
19:e4:23:d5:87:b8:b9:16:27:b8:9d:8b:f0:f1:79:
f6:bb:cf:cf:45:9f:60:8c:c5:5a:68:42:cf:f0:9f:
8f:62:b6:1f:12:5c:a8:57:47:e6:7a:d6:44:78:6c:
e2:32:81:98:7b:25:70:50:92:27:40:8e:4c:97:36:
15:5a:da:62:a4:a3:b2:77:0c:3e:bd:cf:01:06:7c:
9d:18:5d:8b:fa:3d:7e:16:d1:16:3d:2c:35:6b:43:
47:0b:7f:38:93:75:ea:70:66:58:6d:5a:99:13:fd:
63:9f:cc:6e:cb:0f:f5:ba:98:b8:07:f7:a0:1e:15:
52:84:1a:6a:00:66:c0:77:61:f7:06:b0:46:dc:29:
a4:98:dd:8b:7c:ad:3c:5a:6e:32:bd:ee:0a:55:5e:
c3:16:f0:0c:4f:23:3c:06:93:06:81:c6:57:fe:89:
09:bc:bf:ab:c7:b0:9e:df:af:9b:b6:bb:c6:e6:be:
e6:01:20:90:95:93:d5:59:0d:89:30:7c:8d:ff:0f:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:0A:10:E5:CA:D5:5B:89:CA:DB:F4:F6:00:A6:E7:FC:FE:8A:56
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:34a::/48
Signature Algorithm: sha256WithRSAEncryption
80:e9:55:f7:34:f1:0a:ee:63:c9:13:da:68:22:85:ac:2d:ba:
3f:f0:43:72:e5:85:2f:3b:3d:7f:65:00:31:46:5c:74:84:eb:
0b:b1:fc:eb:c6:39:e7:41:dd:21:07:67:1f:97:eb:10:9f:e1:
74:3d:a0:b6:c5:fa:33:f7:8b:de:73:73:e1:86:2a:31:e8:3f:
54:18:f4:21:22:ef:88:c7:90:eb:80:79:37:d0:dd:88:b7:e8:
98:2c:54:f4:c5:85:5c:e2:5c:45:86:e9:31:9f:e0:f7:7e:c8:
d0:5a:9f:d2:bb:90:ea:f4:2c:6c:b7:8d:31:2d:14:36:b0:7d:
04:d8:90:78:2b:4c:c0:08:29:95:5c:52:4a:70:59:4e:ad:be:
ca:a0:2a:97:b5:19:28:c3:17:e1:d4:40:ab:32:d5:d6:7c:fb:
9c:8c:be:e8:98:d9:d5:a1:08:7f:64:40:c5:0f:1f:1f:8a:55:
06:63:e0:3a:a2:ac:fe:0a:3e:24:c7:d1:6b:e8:cd:38:f5:70:
ed:4c:9e:26:60:e7:07:1d:6c:15:d1:60:0e:57:8d:48:8f:0b:
5f:88:a7:da:3d:b3:2c:0c:09:5f:d3:89:ef:5a:26:14:ca:00:
d9:3b:41:ec:69:ef:29:61:79:64:d0:b3:31:e4:15:86:74:32:
59:50:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org