Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: QYBsibZD+G2gf3gZ9N9+58UzAUnx1CzWLbSCRIn7k9Q=
Subject key identifier: 47:43:D8:6F:17:B3:D1:16:16:3C:10:A9:8A:F0:6A:1E:DB:2A:B2:E9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3616F3F0E983299D33F03662E7F1B0DBF1E78D5E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:48 +0000
ROA not before: Mon 26 Sep 2022 10:55:48 +0000
ROA not after: Mon 25 Sep 2023 11:00:48 +0000
asID: 59282
IP address blocks: 2400:d680:357::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:16:f3:f0:e9:83:29:9d:33:f0:36:62:e7:f1:b0:db:f1:e7:8d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:48 2022 GMT
Not After : Sep 25 11:00:48 2023 GMT
Subject: CN=4743D86F17B3D116163C10A98AF06A1EDB2AB2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:5b:ef:fd:d9:18:ab:0a:af:c1:85:9f:bb:
35:14:28:6a:c1:79:83:4a:25:5f:05:27:75:89:4b:
e4:27:e6:c1:d5:9e:c2:c1:84:e6:a2:b6:6a:12:9a:
32:e1:69:ee:99:d1:58:5e:b1:86:6c:89:0e:96:91:
d1:b7:f3:ff:69:19:2f:fe:cb:b8:b0:5b:17:f4:53:
66:64:35:f8:d2:b7:5b:59:7a:e0:90:2d:d0:b6:50:
2b:5f:0a:fa:1c:a2:b0:38:02:b5:bc:1c:2c:8d:43:
bf:1e:4c:04:99:b3:5c:aa:62:5a:a9:d8:8b:55:58:
5e:16:cd:f6:14:36:dd:54:4a:2d:c1:be:39:cc:e7:
c4:93:b7:f7:90:55:02:1a:42:7f:51:80:3f:16:e9:
b0:cb:be:99:22:97:8f:98:87:83:6d:b9:7e:25:9f:
0e:d0:10:d5:bd:28:c3:52:16:db:2e:a5:52:00:4f:
ac:9e:50:6c:ee:f7:0b:dc:4a:f9:9b:ee:10:7e:70:
a9:c2:6a:ff:74:88:32:85:cd:77:47:35:c8:5c:44:
72:fb:d8:c9:ae:7f:02:e1:0f:f1:27:57:76:97:b5:
f2:5b:53:3a:70:a5:96:d2:3a:75:21:86:41:5f:a6:
ae:f9:4d:1a:99:c9:e7:c0:c1:50:1b:15:f6:6a:a3:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:D8:6F:17:B3:D1:16:16:3C:10:A9:8A:F0:6A:1E:DB:2A:B2:E9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:357::/48
Signature Algorithm: sha256WithRSAEncryption
8e:21:fe:fb:91:4d:5a:4b:dc:e0:18:32:3a:26:64:94:a5:6a:
ed:8d:3e:9b:c6:fa:b3:52:53:7e:5e:7e:6f:fa:67:cc:9b:51:
d9:3e:fe:8b:f5:2c:47:3e:d7:f2:a5:7a:72:e4:94:24:b1:85:
87:cb:d0:59:c4:9e:e0:a6:ee:93:fc:c6:a9:cb:c2:07:8d:4d:
a3:a1:ec:73:7b:17:03:2a:ce:9d:5c:71:cc:ca:a5:e2:34:b2:
23:cb:d6:9f:2b:c9:fc:14:fc:5c:72:29:a5:22:2c:d8:46:48:
b8:74:e8:03:17:f6:d4:e8:af:8e:41:6f:69:77:8e:f7:7b:b3:
d2:b0:3e:e3:34:a5:e0:ae:48:5e:bf:c0:27:ba:b0:94:36:28:
1c:c8:01:4a:d0:54:3e:05:88:16:76:a9:e7:83:73:13:16:e6:
58:c0:d2:ee:a3:57:70:fc:b0:35:27:0f:cb:33:1f:0f:fd:6e:
a4:e1:b1:1c:ad:9f:2e:88:56:c1:c8:83:21:19:51:a6:71:7a:
f7:11:08:4c:6c:b2:72:93:18:0c:f6:9b:a3:24:24:e4:59:c8:
f2:8a:f1:0b:c5:0d:8a:e8:af:db:1b:25:67:45:61:70:e8:ce:
5e:55:6f:24:24:b4:5e:b2:83:32:51:9c:5a:ab:82:b8:26:e6:
11:8a:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org