Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: RvrryeoDqZA52X/u92WZrhf29LEM1Lzvr4Cp1F1f/6M=
Subject key identifier: 25:7C:46:54:CC:59:7D:C0:B2:FA:A4:30:88:4A:24:63:A2:9F:A6:66
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 60D8870DAC3F24754D2A12EC8A5C6FC4BA2815F6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:26 +0000
ROA not before: Mon 26 Sep 2022 10:55:26 +0000
ROA not after: Mon 25 Sep 2023 11:00:26 +0000
asID: 59282
IP address blocks: 2400:d680:355::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d8:87:0d:ac:3f:24:75:4d:2a:12:ec:8a:5c:6f:c4:ba:28:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:26 2022 GMT
Not After : Sep 25 11:00:26 2023 GMT
Subject: CN=257C4654CC597DC0B2FAA430884A2463A29FA666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:74:b2:b0:60:42:67:ca:b6:f5:d6:62:30:
92:47:ec:af:31:cb:61:6a:56:67:0a:b0:93:81:e5:
2b:c4:99:80:6e:df:50:78:6c:f7:4c:60:a7:f4:8c:
50:90:a3:2a:61:3d:c1:5a:1d:1c:c0:f1:75:b7:f4:
13:7d:12:eb:9f:d8:82:b0:a9:a5:cb:f4:2a:c1:74:
8a:31:ee:be:cf:b1:2e:06:e7:b1:3b:54:bb:48:11:
97:de:bc:8b:3b:53:5a:51:58:45:c0:4a:cb:37:54:
4f:be:bb:0c:9a:d0:0c:36:96:c7:2a:16:52:e6:d6:
dd:37:ef:3a:b1:e4:24:21:57:e0:4a:76:01:a0:8f:
f6:ec:6f:8f:18:c1:08:3b:da:7f:ae:82:2c:ae:5d:
2e:fd:6c:0d:d1:b2:b4:52:cc:d8:ff:5b:ff:b8:be:
89:46:e0:56:7b:9d:b3:c7:5f:0c:87:38:aa:3d:58:
59:e9:6f:b2:97:c3:23:a3:e1:3e:9d:3f:91:f5:2b:
3b:38:af:3f:20:bc:ef:cc:92:34:19:4d:24:a3:0f:
d3:da:43:9a:d0:7d:79:9c:85:47:4d:e8:d9:7d:50:
67:ee:00:5e:d4:25:c1:8b:e0:0c:84:07:1d:33:5c:
72:16:f2:67:67:a6:6d:ef:26:62:1f:95:dd:97:fc:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:46:54:CC:59:7D:C0:B2:FA:A4:30:88:4A:24:63:A2:9F:A6:66
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:355::/48
Signature Algorithm: sha256WithRSAEncryption
19:ec:a0:2d:df:55:24:bf:94:f3:a8:ab:33:d1:c0:1a:27:74:
4d:e8:c3:fa:67:92:e4:9b:b6:af:dd:f5:a7:5e:d6:8a:c7:80:
94:c5:4c:d3:5b:dd:78:fa:a7:9c:67:1a:11:3b:9e:ba:f9:88:
35:ec:9b:af:81:57:cc:0f:bd:a6:97:86:50:7d:a9:26:97:fe:
b7:6d:0e:57:09:b8:08:0c:6b:1d:13:c2:df:38:c2:de:bf:dd:
18:0c:1a:7d:7f:a6:8d:3c:1a:d0:cd:a3:08:83:f6:2b:af:d1:
e0:c7:2d:d1:75:92:2b:9d:c7:33:af:db:91:73:a2:d4:4f:15:
1b:ae:da:63:1b:9b:e8:52:5b:d0:d4:b8:31:9b:44:66:51:cf:
68:91:5b:f9:8e:97:ff:34:a4:57:8c:d1:a9:6d:ec:d3:01:bf:
de:65:06:50:70:2f:d1:7f:72:4c:84:f3:68:5b:96:a5:93:aa:
e9:40:f4:66:0f:d5:32:77:82:43:4a:77:97:a6:c3:e9:19:a1:
a8:b7:de:ce:01:1a:95:8f:cc:0c:60:2a:d1:4d:01:f0:4a:d1:
55:a1:70:1d:62:e8:85:20:41:7f:af:35:af:f6:0e:25:73:ef:
40:22:1b:fe:21:5d:e0:e7:e5:a0:97:41:8d:e2:fe:6f:7c:2b:
3d:82:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org