Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 2TMaPV6ZCCmfMELCf9DRX4Rq58B/e+nEjqMX0RMMg4A=
Subject key identifier: A9:5D:FC:79:71:C8:49:9A:8E:5C:AD:10:45:05:B6:E3:2F:57:30:47
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5B22C00C85B11215A99901B02039BF69286FFC59
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:35 +0000
ROA not before: Mon 26 Sep 2022 10:55:35 +0000
ROA not after: Mon 25 Sep 2023 11:00:35 +0000
asID: 59282
IP address blocks: 2400:d680:358::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:22:c0:0c:85:b1:12:15:a9:99:01:b0:20:39:bf:69:28:6f:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:35 2022 GMT
Not After : Sep 25 11:00:35 2023 GMT
Subject: CN=A95DFC7971C8499A8E5CAD104505B6E32F573047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:68:9a:b2:a4:95:89:20:f7:46:ee:f6:91:
0d:67:fa:54:a9:b4:38:9f:d4:e6:9b:e4:ea:4f:b0:
3b:2a:a5:44:bc:93:77:16:de:e1:d6:db:f4:da:ba:
c3:8f:60:f2:ef:e8:72:3d:64:1f:7d:00:54:92:9c:
b7:a4:de:06:c0:ed:fd:a2:3b:dc:fb:8f:3e:8c:33:
3c:78:a2:1c:96:de:c8:45:9f:99:49:05:28:61:ac:
50:f8:bd:9c:80:e0:48:8c:1d:bc:6b:0d:09:08:d5:
2d:af:3b:a5:48:74:55:1b:12:bf:16:81:1f:71:02:
32:8a:8f:97:ea:c3:eb:ee:08:82:08:c2:27:d5:21:
c2:38:b5:f3:0b:08:a4:e8:d4:00:f5:0b:8a:17:ef:
c6:ae:52:e7:d9:63:dd:a4:71:7b:70:08:60:01:6c:
12:d8:f1:42:ce:d9:68:15:b5:3c:a3:3a:5b:7a:1a:
6b:87:4d:d5:29:1e:5e:35:a0:d3:5c:06:f1:00:f9:
fa:ee:8e:e5:4a:35:15:cd:87:24:dd:5a:8a:90:9b:
2d:ab:6d:f0:bb:c5:7f:f9:e2:23:91:18:79:04:0d:
9e:58:6c:c9:73:86:af:8e:c9:09:dc:32:22:65:18:
55:1b:55:28:e5:08:43:ad:33:e3:c8:ff:bb:cb:85:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:FC:79:71:C8:49:9A:8E:5C:AD:10:45:05:B6:E3:2F:57:30:47
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:358::/48
Signature Algorithm: sha256WithRSAEncryption
81:6b:d7:00:af:cd:ae:53:11:29:96:5c:52:35:52:6d:36:0c:
f2:d3:cc:20:cc:60:9c:2d:39:f5:4f:a3:88:db:04:ce:62:fc:
55:45:2c:66:bd:85:74:d3:27:a1:f2:1e:16:69:18:33:8b:22:
82:3c:f1:82:cd:0e:20:95:db:a7:c5:6a:e3:ba:0c:06:de:79:
6c:2b:a5:0f:b0:76:21:c8:71:08:2d:9d:7b:a4:2a:46:54:2e:
73:00:74:87:e7:2a:8c:55:c2:dc:59:04:0e:30:44:68:2f:62:
3c:8c:2a:cf:23:51:b7:1f:7d:12:5c:73:83:3b:bf:e3:4f:ee:
57:4a:50:bc:c0:6a:1f:cf:f2:7a:69:4a:d7:56:36:ba:1b:c6:
f8:cf:02:e6:ae:3b:cc:fe:a9:7c:4a:7f:59:a3:a5:20:6d:8a:
9b:26:3a:3d:f3:ae:42:06:24:0c:81:9e:27:9b:72:16:11:60:
68:23:d5:cd:b2:87:64:87:76:25:d1:3c:3c:48:61:64:95:20:
e1:a7:bc:d9:1c:93:3a:a2:b6:c9:fc:2c:52:64:30:56:1d:c2:
7a:94:38:7e:2e:0f:8e:63:0a:3a:86:9b:23:f8:33:f4:cf:1c:
00:6d:55:fe:1e:bc:00:cf:f3:78:93:7e:ec:96:91:9d:8a:a2:
34:d1:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org