Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: xB/2wmefQXMVVF+H6MKRUqWQyTwJf4ha2FF55tkrkpo=
Subject key identifier: 40:B0:09:1F:01:2E:B9:70:13:28:8D:50:C6:37:ED:27:11:73:AE:23
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 332089263649AA701913FEF1FAED6981A0DFC9F8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:37 +0000
ROA not before: Mon 26 Sep 2022 10:55:37 +0000
ROA not after: Mon 25 Sep 2023 11:00:37 +0000
asID: 59282
IP address blocks: 2400:d680:371::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:20:89:26:36:49:aa:70:19:13:fe:f1:fa:ed:69:81:a0:df:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:37 2022 GMT
Not After : Sep 25 11:00:37 2023 GMT
Subject: CN=40B0091F012EB97013288D50C637ED271173AE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:2d:b4:97:2f:c6:c8:03:23:7f:db:d6:47:
b7:de:78:25:e0:d1:cc:18:f1:df:61:d3:cd:b2:0f:
4a:69:a4:b9:13:44:02:4b:98:55:44:05:7e:fa:a5:
b9:f6:f8:eb:9f:b9:fc:48:fb:3e:61:29:b1:8d:83:
83:7d:e7:97:d9:c0:65:05:be:d9:10:48:ff:de:88:
b1:23:65:08:b4:c0:dc:84:0a:53:73:18:6d:57:70:
06:83:a9:66:10:2c:f9:3b:2e:5f:7e:b0:3d:97:a9:
ec:8f:8d:9b:ef:7f:32:c6:94:6e:5f:94:ba:12:c7:
e2:ec:01:68:33:04:ba:56:fb:99:89:a9:00:ab:1d:
33:5d:2e:e8:30:c6:4a:c8:38:e2:ae:72:39:98:c9:
eb:12:8b:93:6f:b6:b9:08:51:e0:a5:21:74:57:09:
fa:0b:44:d4:1f:8a:f8:93:d1:b5:09:d9:0d:2b:3f:
cd:fe:d9:9e:96:6c:78:97:6d:e1:db:0f:dd:00:6a:
cc:6a:87:f0:41:6d:69:a4:ad:31:19:9d:d2:04:f2:
c2:b6:2a:cf:51:2d:1e:a9:cf:d4:96:dd:53:4c:de:
32:d6:f8:05:f4:2a:3b:61:5e:c2:7c:f4:8d:e4:c8:
47:f2:99:a7:04:c2:2d:bb:4b:f7:cf:20:e6:13:32:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:09:1F:01:2E:B9:70:13:28:8D:50:C6:37:ED:27:11:73:AE:23
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:371::/48
Signature Algorithm: sha256WithRSAEncryption
2c:93:04:d3:c3:b2:a0:5c:a7:9d:96:60:db:c3:a8:4c:b4:46:
8b:13:43:a9:12:30:86:7f:8f:fe:36:5f:b7:e5:90:b2:cf:a4:
8c:1d:41:74:c8:73:8a:e3:a9:dc:19:19:bb:53:da:b1:53:77:
16:ab:17:a2:69:bd:2d:8d:ef:57:ae:fb:3b:40:a5:35:96:9c:
82:3e:9a:b0:2c:5c:14:15:7b:84:0d:b6:c7:80:68:f7:06:9e:
9e:6c:91:f8:90:bf:a8:28:3f:d1:15:7a:eb:ba:1f:58:ec:15:
ed:9d:96:75:b0:00:91:60:73:c7:bf:d6:bd:f0:68:e5:46:f8:
7c:fb:be:24:aa:b3:a0:96:f6:a3:2d:1c:d6:23:a5:ff:78:a9:
ba:ce:c5:19:e4:ba:b4:28:03:0f:91:0a:07:9d:7a:da:ba:f7:
dd:e3:40:45:1e:2e:86:b6:22:e9:6a:38:10:b8:20:19:b5:3f:
ed:c3:06:42:c8:8c:f5:1e:b5:f2:03:24:82:f7:01:38:07:87:
32:c7:36:e3:b2:fb:f0:85:18:9d:8a:6d:1e:33:e2:6a:30:41:
0f:5a:35:61:fe:98:14:b6:32:7b:43:cd:0a:9f:ea:3d:bf:a7:
dc:b5:c8:d8:62:7d:f5:ce:67:0a:a3:2d:22:00:a2:af:42:ca:
49:84:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org