Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 3Ay0oGvv8kyLPapw7gqiRhpITy6aTWDINRL+FKO61gw=
Subject key identifier: 56:03:ED:C2:28:94:7F:72:AC:05:4D:3A:B5:99:5B:72:F8:8C:DC:CE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 72D13A7F03A8528342E4820695C498273EA9F869
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:23 +0000
ROA not before: Mon 26 Sep 2022 10:55:23 +0000
ROA not after: Mon 25 Sep 2023 11:00:23 +0000
asID: 59282
IP address blocks: 2400:d680:369::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d1:3a:7f:03:a8:52:83:42:e4:82:06:95:c4:98:27:3e:a9:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:23 2022 GMT
Not After : Sep 25 11:00:23 2023 GMT
Subject: CN=5603EDC228947F72AC054D3AB5995B72F88CDCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:12:9b:f0:a9:0e:80:cf:21:78:4d:31:bc:
99:1b:91:9e:e0:e5:6d:bd:55:35:60:36:c6:ed:4b:
e5:d5:cf:7c:b5:91:a5:70:03:68:6e:1c:9c:93:23:
c4:1d:dc:01:74:ab:43:1f:59:9e:82:a9:d5:c1:00:
f9:67:ae:19:95:9b:41:1e:82:25:49:8b:cc:f2:c5:
e0:ae:4e:39:97:41:96:42:3e:c8:d4:9f:4a:4c:51:
b4:ff:fd:25:ff:a3:f1:47:58:23:d2:bc:d2:0b:a1:
bf:dc:40:3c:14:4e:9f:9e:bc:47:20:75:3d:06:3d:
f6:f3:74:6f:36:91:9c:66:cb:d3:b3:96:e5:0e:72:
b1:d2:d0:68:bb:47:6b:10:e3:8f:a6:61:91:57:54:
87:c9:0f:5d:6c:9d:01:3b:70:d3:d0:cb:ad:23:16:
e6:29:0c:78:c1:6c:23:28:c8:1b:4c:ea:e9:c1:df:
2f:99:6e:fb:94:09:03:9f:87:7f:2f:43:07:80:3f:
f3:a0:0b:ec:1f:c4:24:2d:f3:6e:e5:a7:5d:84:55:
2f:9e:ee:8d:82:e3:99:42:e8:d5:71:cd:0c:8c:15:
92:68:98:32:34:c7:82:a8:fe:9e:e6:af:01:47:74:
27:51:a4:77:d1:d1:3e:91:39:32:ca:f9:27:0a:0b:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:ED:C2:28:94:7F:72:AC:05:4D:3A:B5:99:5B:72:F8:8C:DC:CE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:369::/48
Signature Algorithm: sha256WithRSAEncryption
3f:dd:e5:0f:3c:bb:d6:b8:7f:f4:08:68:b2:73:de:00:00:1f:
c5:5b:f1:53:4d:1f:e6:ab:e8:b9:d2:3e:ac:51:8c:38:94:2f:
9c:c8:3e:28:93:4a:80:ad:fa:b2:63:27:51:dc:34:41:55:b9:
79:02:c1:66:da:b6:ce:46:f3:a0:e9:64:9e:9d:d3:58:8a:cc:
50:d8:39:d9:e5:c7:0f:ef:a0:af:da:08:a4:7e:a7:07:c8:fa:
f1:82:60:c1:6e:b8:bc:29:f9:f2:80:d2:3d:20:d3:cf:35:a7:
48:1f:f5:a9:27:26:89:1b:ed:12:69:98:cb:92:aa:50:9a:57:
20:5d:f4:a6:d6:20:82:91:87:ca:76:9e:c4:dd:49:ef:1b:c3:
dd:90:90:41:89:6d:30:96:4d:f9:27:54:e7:aa:93:49:21:f3:
91:ef:10:66:99:b7:b9:9a:5b:5b:c3:99:ab:7f:5b:09:18:4e:
d6:88:bc:ee:cf:7c:e0:a8:36:46:67:37:73:da:49:5b:cc:3d:
3b:e5:ff:83:e4:43:77:80:e5:7a:05:64:4f:8a:07:55:54:7a:
79:e3:8f:d5:91:4b:0e:ef:e2:9f:01:c5:80:52:66:52:f1:53:
ac:66:70:7a:5b:42:56:5f:16:32:08:5a:d1:1d:82:28:21:4c:
d5:9e:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org