Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OTl3hq3+0zWHShs220/MdLEsZwdIG2RmaxZxAhTRypg=
Subject key identifier: 9C:4A:57:CE:A8:4B:E4:BF:4E:9C:A1:2D:1D:F8:74:74:0E:22:E8:D0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7DF5EC7FA70A0F6BB520D5B63F4F54467B1F1927
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:47 +0000
ROA not before: Mon 26 Sep 2022 10:55:47 +0000
ROA not after: Mon 25 Sep 2023 11:00:47 +0000
asID: 59282
IP address blocks: 2400:d680:35a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f5:ec:7f:a7:0a:0f:6b:b5:20:d5:b6:3f:4f:54:46:7b:1f:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:47 2022 GMT
Not After : Sep 25 11:00:47 2023 GMT
Subject: CN=9C4A57CEA84BE4BF4E9CA12D1DF874740E22E8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:09:02:94:fa:a1:e6:62:b1:9d:78:ba:e6:
26:f2:9d:a1:9c:e4:65:30:15:dd:57:97:d3:ae:4c:
79:5f:ea:cd:bc:6f:82:ef:7c:22:24:21:5b:bb:33:
0c:52:94:61:3c:43:55:b4:81:7a:ac:b0:2c:39:c9:
38:fa:a6:93:74:9a:6d:7a:a0:a0:83:67:c6:e3:68:
aa:dd:07:82:12:09:22:0f:42:a1:26:69:fc:27:39:
44:63:40:87:6c:01:dd:df:1b:6d:69:c7:63:7e:72:
06:e8:eb:7a:31:da:c8:d7:8b:bd:8e:dd:6c:bb:77:
de:68:22:bc:c8:f0:d4:85:82:2a:64:a5:ed:53:26:
87:2d:b4:5c:bd:d5:5e:ea:4b:13:a7:5e:ca:57:7d:
cf:b9:5a:d8:9f:41:f3:10:9e:62:ab:80:8e:cf:e9:
f8:c3:f2:dd:f7:aa:46:b2:49:07:8a:29:3e:a0:9b:
eb:a0:7f:dc:7a:a7:1d:e9:fb:68:b1:02:c7:54:32:
a3:80:89:86:04:a0:b7:61:5c:b5:d3:8d:4a:a8:f4:
46:d3:20:76:e9:a6:14:ba:e2:7a:d1:a6:e1:7d:5f:
05:c2:c5:78:b9:2d:84:3d:ff:fa:9e:90:5c:e1:d7:
9b:01:fe:9a:8b:b5:44:89:07:c3:a4:02:11:a0:63:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:57:CE:A8:4B:E4:BF:4E:9C:A1:2D:1D:F8:74:74:0E:22:E8:D0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:35a::/48
Signature Algorithm: sha256WithRSAEncryption
7d:c2:c9:a9:1b:bb:10:f2:2e:aa:60:8e:82:cc:62:83:a7:8f:
e3:27:84:c3:26:a8:1f:01:2e:15:46:6e:23:42:44:97:ed:3f:
4d:df:7c:bb:26:a2:74:2e:4e:4d:e8:d5:54:d7:fe:82:57:b8:
9d:bb:39:ea:d6:d1:05:d9:e9:37:a5:9d:d2:82:f0:13:22:30:
0e:38:d0:60:7a:07:66:c9:b7:84:2a:4c:bb:4c:73:dc:c4:9e:
c6:25:ea:c1:f6:1a:84:6b:0b:75:30:5e:c7:67:7f:34:df:6f:
87:4a:21:b8:b2:3c:0c:c1:56:a7:35:b6:57:fb:0d:97:9e:27:
6b:6f:d2:6b:e8:41:33:17:a4:fe:1b:73:0d:0d:95:50:78:32:
90:d4:41:62:2e:d3:79:1a:3e:cb:e3:ae:d4:5a:33:83:bf:ff:
26:79:6e:f9:10:57:f6:f1:7b:34:09:1d:67:0b:76:03:32:0b:
d8:af:19:42:a6:90:f9:ff:af:f7:a2:44:94:c5:9d:5a:67:27:
f6:c7:99:45:ab:92:48:d0:16:35:eb:63:12:b9:87:57:60:0d:
9e:fb:6b:52:a7:03:d4:cc:7c:92:75:f1:7a:86:38:fc:cc:8a:
03:37:8d:33:ba:c9:68:21:32:f9:9b:bd:29:5d:25:cf:6e:dd:
d0:6e:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org