Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: AHOtHrDHK05u4xSuCPOKtBQPT/0M7jfEENkdtF3bElk=
Subject key identifier: 96:96:CB:EF:71:9E:30:34:F5:14:6C:86:8B:4D:36:E9:9D:82:58:31
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 30558F25E3C93E181DF522B1DA1ABC3915C5EFE7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:39 +0000
ROA not before: Mon 26 Sep 2022 10:55:39 +0000
ROA not after: Mon 25 Sep 2023 11:00:39 +0000
asID: 59282
IP address blocks: 2400:d680:361::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:55:8f:25:e3:c9:3e:18:1d:f5:22:b1:da:1a:bc:39:15:c5:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:39 2022 GMT
Not After : Sep 25 11:00:39 2023 GMT
Subject: CN=9696CBEF719E3034F5146C868B4D36E99D825831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:32:75:5d:d1:ee:5a:00:b2:11:5b:ff:78:
f4:56:11:bf:f9:05:e8:c5:91:54:ae:dc:6f:e6:8b:
4e:7f:f8:d4:c9:1a:4d:91:3c:85:36:b9:f2:2d:c4:
b6:80:4c:67:8e:46:4f:2b:a3:1f:2f:0b:af:62:5e:
01:05:df:b4:b7:2a:f7:fe:6f:31:4d:ac:77:db:71:
e3:63:de:7a:4c:f7:e0:c6:74:4a:8b:68:e0:da:69:
45:63:53:60:2d:15:8f:45:69:21:4a:b0:8e:01:d9:
85:d4:b4:54:79:4a:8f:38:84:27:2c:19:40:58:e0:
7b:42:eb:17:59:c2:4c:cd:eb:49:60:32:19:92:86:
e6:34:c8:32:58:00:5c:33:d4:58:76:d0:4b:f0:23:
92:3d:9a:2e:0f:3a:b3:fa:9d:e5:fa:b6:51:c0:4d:
4a:1f:52:4b:8e:45:d3:4a:54:a7:81:7d:56:31:46:
85:70:16:83:a2:ef:2a:24:02:28:bd:50:41:b8:54:
df:1e:10:d9:36:e1:87:45:aa:c9:d3:8e:ef:5a:32:
44:05:ae:e4:fd:3b:39:28:25:80:d4:c1:59:48:f4:
b2:d3:e6:a4:92:de:5e:7c:0b:5a:83:bb:e2:9d:88:
d6:b0:85:2d:88:32:a7:b6:ae:e9:6e:59:91:b3:f7:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:96:CB:EF:71:9E:30:34:F5:14:6C:86:8B:4D:36:E9:9D:82:58:31
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:361::/48
Signature Algorithm: sha256WithRSAEncryption
2d:41:6e:4f:44:d3:28:9a:cf:cd:ba:63:f5:8c:36:f4:ca:1e:
43:71:4f:c6:32:59:d8:b0:57:59:9a:22:13:68:ee:dd:33:be:
b3:91:27:57:1a:72:d1:2e:c9:39:45:03:e6:1f:b7:b7:d5:cf:
cb:e6:06:96:b3:cf:4b:f4:3f:df:f8:b5:00:7b:ba:4b:a8:c8:
8a:38:c5:64:13:a9:84:bc:bd:15:bf:05:48:bc:33:05:8e:e8:
2d:85:3a:f5:f3:d5:a4:28:ef:88:32:93:8d:4c:6a:c7:6a:d6:
d3:af:90:eb:e0:dd:80:14:63:35:7a:fc:44:23:1a:24:f9:99:
41:9e:78:5f:59:e5:22:e2:ed:48:fa:42:03:78:cc:de:46:c6:
45:3c:2a:ba:3c:29:88:d4:01:c8:9c:4f:ea:2d:2c:6f:68:06:
3d:20:92:36:9b:9e:23:0d:1a:97:1b:2b:77:2f:63:14:3a:ef:
13:aa:89:d6:42:14:86:0e:14:2f:2a:29:fc:cf:1c:e4:f9:e6:
d8:7a:ad:d8:69:ba:cc:87:ab:00:94:9c:09:a2:71:d4:df:be:
f2:cb:30:b7:72:83:13:69:fa:34:1f:56:f0:b1:b5:2f:de:7f:
c2:30:2e:6a:c9:87:37:6d:33:12:19:88:44:d1:ba:d1:c9:bb:
18:69:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org