Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: mT60Gt1QjtYFrjBKXC2+uYqJtDlovwqzUkxssxtLAW8=
Subject key identifier: 6F:53:2A:20:B9:75:24:B9:39:FB:9A:84:1C:31:0C:27:FD:62:63:11
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5ABA7428FF75A071F4FCEA441B35BD388E4F8E78
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:25 +0000
ROA not before: Mon 26 Sep 2022 10:55:25 +0000
ROA not after: Mon 25 Sep 2023 11:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:366::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ba:74:28:ff:75:a0:71:f4:fc:ea:44:1b:35:bd:38:8e:4f:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:25 2022 GMT
Not After : Sep 25 11:00:25 2023 GMT
Subject: CN=6F532A20B97524B939FB9A841C310C27FD626311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:c0:10:0e:dc:b8:80:6f:69:42:ca:96:a0:
79:8a:3a:4a:4d:00:2d:1c:95:ea:7f:bd:16:f6:ed:
1d:0f:af:4f:b1:6c:70:95:ca:d5:54:95:79:e8:16:
dc:49:89:f2:e1:b3:d4:5a:c0:fe:8b:e0:5f:ff:76:
e8:02:8a:33:6e:ab:21:1e:00:dc:0d:06:78:25:cd:
1b:50:45:1a:20:45:ce:06:cb:6c:95:67:0d:3e:97:
44:23:de:a0:6c:02:6e:f8:fa:0a:6f:98:b3:16:71:
2a:44:a9:35:1d:86:a2:c3:7b:01:2c:4f:55:1f:b9:
30:a7:06:70:6e:fc:95:d7:00:f7:5b:e3:e3:53:ad:
c3:77:6f:fb:79:fc:22:7a:f6:67:89:5e:78:fb:89:
66:64:51:0c:14:e4:65:1d:4d:48:aa:6a:26:f3:9d:
d8:68:67:ca:4e:8e:fd:f5:f9:4c:25:b4:99:43:74:
70:27:ff:d4:b8:e4:55:66:9c:8a:f2:c5:93:9d:b4:
51:71:1f:f5:f5:20:c2:4a:3a:82:29:26:93:a1:e2:
bb:ae:a9:b7:a2:6b:20:ae:14:ea:70:81:73:90:60:
ea:4d:86:0d:28:02:ac:b9:ed:1d:b9:eb:4c:c6:19:
a3:aa:b6:8e:d7:98:f4:b6:89:81:ef:4c:8b:74:ef:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:2A:20:B9:75:24:B9:39:FB:9A:84:1C:31:0C:27:FD:62:63:11
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:366::/48
Signature Algorithm: sha256WithRSAEncryption
27:d2:9c:5e:79:91:65:9f:68:e0:31:be:14:43:7a:ea:4d:13:
32:6b:d4:58:ca:1f:8a:be:e9:b8:fe:98:ef:d2:7d:59:23:c3:
98:2f:81:25:71:b9:81:43:65:cc:9e:75:d7:03:75:fb:3a:06:
74:61:58:9b:84:60:62:36:ec:36:17:e3:54:59:a7:bb:26:76:
55:19:84:68:56:af:0c:21:cb:3a:62:09:0f:8a:6d:bf:45:d3:
66:31:b7:04:4f:68:39:d8:9e:b2:01:67:f0:c9:25:e1:fa:68:
a7:19:65:b4:81:73:48:8e:c2:ff:d3:42:f2:a6:c0:e2:f2:68:
85:eb:a0:c5:8f:39:7f:79:32:58:2d:93:d7:9d:d3:71:50:bf:
84:38:57:31:48:9a:33:75:b4:bc:d4:a0:48:ed:e4:b3:26:e0:
64:07:fb:c4:53:f9:3d:a2:e0:4c:7b:b8:78:97:d1:41:9e:85:
60:26:44:6a:5d:8f:94:a9:50:48:59:f7:b6:29:ee:8e:61:ed:
f8:16:8e:74:30:87:34:be:3f:0a:89:02:12:66:da:07:fa:54:
55:34:98:77:7a:13:9b:b0:7b:de:be:39:37:c5:84:bc:ad:89:
8f:b1:d8:9b:93:bb:9e:b6:64:2c:a3:b0:0e:1d:52:0a:5e:8e:
64:25:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org