Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: jH69NcVJlVopUQPM+MSs80K831q0txEuo5ixL0hMKCc=
Subject key identifier: 79:24:0E:F6:B5:A9:4E:DC:6E:1C:D4:35:22:FB:A0:34:F9:3A:D5:1F
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 18265D61F3893CD908FCFAF29672E67BAA843261
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:37 +0000
ROA not before: Mon 26 Sep 2022 10:55:37 +0000
ROA not after: Mon 25 Sep 2023 11:00:37 +0000
asID: 59282
IP address blocks: 2400:d680:35d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:26:5d:61:f3:89:3c:d9:08:fc:fa:f2:96:72:e6:7b:aa:84:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:37 2022 GMT
Not After : Sep 25 11:00:37 2023 GMT
Subject: CN=79240EF6B5A94EDC6E1CD43522FBA034F93AD51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:32:48:50:ae:9a:fb:39:3e:f8:b5:21:3a:
fe:80:9e:c5:7c:84:d7:9d:1b:7a:45:a4:e4:16:fa:
09:89:5b:b9:65:ca:aa:bf:49:7f:b0:4d:b6:f3:74:
69:e4:77:67:83:76:7e:ba:1f:33:e3:77:10:e2:5a:
89:44:90:9d:28:57:7e:79:7d:ee:42:df:7a:c4:e2:
1a:50:78:06:99:59:c6:6c:70:55:91:e1:3e:83:da:
f7:b5:89:d7:42:ec:a7:04:4d:dd:6a:2d:c8:1e:59:
10:ca:9c:71:f9:e5:e7:27:35:62:11:a1:3a:33:43:
0a:38:f9:07:6e:c5:4f:36:0f:10:f5:b1:8a:80:07:
9d:ee:d2:f9:06:95:51:ca:c5:9a:68:09:50:cf:4c:
24:00:e8:b0:09:7e:6e:aa:40:c7:ad:9e:21:8b:6c:
e2:6f:0e:dd:6b:0f:3e:63:fc:76:d6:1b:d6:c8:e3:
fe:25:6a:8b:70:22:f4:5b:73:e4:86:ae:e9:b9:ab:
d4:d2:34:29:c2:ff:75:4b:6b:5f:49:a3:b6:7f:c5:
07:2f:34:7e:4f:f2:42:69:8d:df:e6:30:11:a1:1d:
85:92:10:56:b3:46:33:ee:65:98:3c:15:95:21:ba:
33:5e:86:cd:8f:7b:b7:81:ca:d0:ff:b1:9f:dc:b9:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:0E:F6:B5:A9:4E:DC:6E:1C:D4:35:22:FB:A0:34:F9:3A:D5:1F
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:35d::/48
Signature Algorithm: sha256WithRSAEncryption
3c:c2:f7:0f:55:8f:3c:53:4c:51:c5:ba:b5:20:ed:31:07:db:
f6:79:61:d4:dc:59:71:26:dc:87:1d:dd:12:79:89:13:df:79:
c1:89:81:2e:18:cb:80:8b:22:e4:23:a4:af:9e:cf:0d:11:26:
6f:54:f4:a0:9e:83:30:5b:3b:96:4b:2b:66:9c:55:f5:56:bd:
44:07:e8:28:7a:67:ee:2f:07:78:24:cf:ef:d1:3b:4c:16:36:
92:39:7a:8f:2a:7e:81:4b:8d:85:e4:e2:53:f5:cd:af:bd:09:
5e:e1:e4:06:e4:21:70:c5:58:1e:f7:e9:61:2b:04:32:7b:39:
df:34:f5:26:49:5d:2d:cc:f2:a5:53:84:f3:65:09:cf:d5:77:
5b:15:6e:fd:67:83:2a:d5:d4:17:93:ef:73:f4:a5:f4:83:12:
49:68:19:64:ff:7a:02:f3:8c:53:23:fe:ec:fd:5b:2a:2c:a9:
b6:c3:08:63:24:ff:0c:98:27:fa:44:06:8c:a2:33:54:c1:86:
be:d5:94:ae:64:7d:b1:e5:65:a4:96:cb:6b:d7:fd:85:4e:8d:
5d:47:49:e5:28:fc:38:9b:06:0d:70:18:1b:56:08:8e:b2:47:
75:b4:3b:8b:30:cb:8d:69:80:10:e4:4a:ee:30:5d:ec:d0:cd:
b7:fd:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org