Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: TDy8NDPFehB0yFe71Z5dacSTV7QjBV47jCHBZldI+6Q=
Subject key identifier: 4D:86:FE:FE:0A:10:E7:C2:FF:41:89:72:12:8D:97:3C:79:8E:6D:91
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 64BA1C7DFD93AC638BEE27B87F490835EB86C961
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:32 +0000
ROA not before: Mon 26 Sep 2022 10:55:32 +0000
ROA not after: Mon 25 Sep 2023 11:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:34c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ba:1c:7d:fd:93:ac:63:8b:ee:27:b8:7f:49:08:35:eb:86:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:32 2022 GMT
Not After : Sep 25 11:00:32 2023 GMT
Subject: CN=4D86FEFE0A10E7C2FF418972128D973C798E6D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:53:1b:bb:08:aa:74:d0:54:40:f3:10:bb:04:
25:f9:f9:95:e2:cb:cb:63:7d:0e:ec:b4:06:d9:02:
b4:07:b5:f3:ee:b2:19:07:90:ce:7f:e7:f2:f9:8b:
65:29:50:b4:8e:30:1e:62:7c:eb:25:bc:64:2f:8b:
fe:43:ed:5c:c5:7d:77:25:1b:a7:1e:2a:ab:a1:04:
d7:2c:f9:f1:c6:2b:86:ed:37:66:74:5a:1f:c2:89:
74:e6:0f:1e:5d:6b:13:6c:b4:35:ae:37:1c:9e:a4:
a5:0b:81:56:92:3f:05:df:b0:03:06:16:e2:de:15:
57:15:aa:b0:07:00:7d:38:48:31:23:f1:19:fe:ac:
5d:d7:b8:ca:de:44:2c:c0:64:73:3e:dd:70:e5:41:
13:94:b1:db:85:2e:e6:e8:2d:ed:45:66:64:01:8b:
bc:1a:75:ba:46:66:36:11:68:53:7c:a5:b7:a9:b8:
f3:6c:94:c4:81:5b:7f:e7:c9:91:67:98:c1:63:25:
a2:53:f5:19:f6:91:36:78:30:67:ae:78:44:b3:27:
f9:cb:2c:bd:e5:b0:a3:7d:bb:50:32:a1:2f:dd:6a:
e9:01:54:0f:50:36:12:e1:16:2a:b6:e6:68:04:82:
59:f3:12:7f:13:13:20:9e:00:d4:d8:17:5b:cb:7b:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:FE:FE:0A:10:E7:C2:FF:41:89:72:12:8D:97:3C:79:8E:6D:91
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:34c::/48
Signature Algorithm: sha256WithRSAEncryption
5d:f6:7f:f9:82:9c:9d:2a:e8:44:34:0d:c7:d1:fe:b6:e3:99:
d3:c6:8b:58:91:72:94:a7:50:c2:66:d0:47:87:ec:b1:09:86:
9f:18:ff:91:3f:2c:fb:6f:58:f0:3c:55:dc:4b:68:83:18:a7:
9e:5a:fd:84:38:1f:c5:73:dd:a7:38:d1:94:00:0e:32:dd:84:
06:77:8e:37:76:15:ec:86:fa:6e:bf:c8:46:f3:3b:21:ef:c0:
e2:2a:45:27:f6:61:96:52:fd:4a:28:00:ff:65:77:59:5b:92:
84:f6:b3:83:04:55:65:3f:0e:94:5c:2c:1a:cd:33:8b:00:e4:
dc:90:b9:c0:bf:ca:3a:d6:05:4e:d3:73:d9:4b:f1:33:5f:76:
18:3e:d7:0d:26:2c:8f:d9:09:cc:61:6b:ec:75:39:15:29:b9:
b5:75:7a:26:16:d0:05:02:ca:16:e8:6a:83:30:34:1e:4f:68:
fe:7f:f7:3f:79:24:29:d5:4d:2a:57:6f:fa:6e:db:e9:18:93:
06:03:39:bc:30:74:aa:b6:b5:b6:e4:13:41:6c:2f:53:39:45:
e5:72:1e:ee:d6:aa:91:65:87:6e:ac:a6:51:24:87:43:f2:e5:
be:6f:8a:c0:04:c3:c1:61:2e:b2:1e:cf:65:68:59:3d:87:8f:
74:14:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org