Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: zSMkE2HSfZRQagw3CS2pg52nKlCtjSgNxAI+ETGfLaA=
Subject key identifier: 54:22:86:2C:C6:83:90:04:37:56:88:37:0E:BA:01:00:08:79:9E:ED
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1512D710661F7244668A015980D8679ABFA85BD6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:45 +0000
ROA not before: Mon 26 Sep 2022 10:55:45 +0000
ROA not after: Mon 25 Sep 2023 11:00:45 +0000
asID: 59282
IP address blocks: 2400:d680:37c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:12:d7:10:66:1f:72:44:66:8a:01:59:80:d8:67:9a:bf:a8:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:45 2022 GMT
Not After : Sep 25 11:00:45 2023 GMT
Subject: CN=5422862CC6839004375688370EBA010008799EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:e4:f8:d4:ca:66:fc:89:05:6d:03:2d:8b:
ba:cb:59:3c:b6:c3:16:6f:1f:7f:5a:36:6a:31:09:
17:5a:7d:f0:d1:08:1e:68:32:97:6c:68:35:fd:07:
b3:af:60:72:14:26:6f:4a:f5:bf:7a:e6:33:23:84:
a5:d9:1a:56:86:d7:e6:cb:8b:da:74:d2:ec:9f:3e:
99:9d:64:22:59:6a:ae:f4:80:c4:72:27:ba:a1:49:
a0:08:d2:e8:26:66:8f:f1:f9:74:0a:2e:3c:3e:a4:
99:2d:10:53:80:ca:51:02:c5:0d:0b:69:4a:7a:4e:
34:5c:50:75:3d:9c:23:ad:b6:72:fe:f8:94:9e:9f:
b7:6d:bd:e8:bc:7e:2f:9d:34:13:b4:81:4e:ed:a8:
1e:c0:da:aa:3a:9d:da:16:1b:a7:57:62:ba:95:ff:
d2:d7:56:72:9c:d6:08:72:e8:2b:4b:28:e3:d4:12:
e5:fc:f8:1f:39:72:71:d4:c8:05:f2:bc:b4:19:e6:
80:bc:d4:42:2a:00:60:d7:4b:07:57:53:29:4b:7b:
c7:0a:bd:e7:ee:10:fc:3e:c8:f6:04:33:45:df:7f:
15:47:99:73:bd:02:2c:89:33:80:a2:e0:3f:cd:46:
ee:18:db:99:41:26:8f:3e:54:99:c5:f0:74:28:8b:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:86:2C:C6:83:90:04:37:56:88:37:0E:BA:01:00:08:79:9E:ED
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:37c::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b8:61:4a:66:7c:d4:8b:a6:87:d6:77:2a:74:77:48:d9:2b:
2f:95:4e:89:a3:13:cb:09:a4:32:f3:2b:a5:3e:21:16:71:81:
44:70:50:e8:ef:09:24:38:3c:34:b2:0f:18:3b:c3:3d:32:7f:
4c:f9:86:71:be:3e:74:60:04:4f:d9:09:e7:76:0f:55:65:ae:
b2:56:c5:97:bc:50:de:b3:96:4d:0e:8d:43:e0:57:99:23:10:
5c:71:62:f3:a8:1e:e5:c9:9f:16:bc:2d:6f:ec:25:e3:29:97:
97:2e:d3:3d:2a:db:60:c6:b4:82:7c:7c:26:f3:8d:38:54:eb:
4b:e2:4a:c8:f8:c9:a5:75:1d:e1:4e:14:77:93:2f:86:48:e3:
53:28:bb:fc:f7:33:d9:fd:dd:4e:df:28:db:2e:f4:23:5c:25:
ce:64:11:1a:f8:d3:c0:a3:75:38:ac:44:43:ba:ae:70:ca:b9:
89:ef:2c:8f:a4:df:c5:3f:7b:56:e1:1f:2d:09:5a:11:74:58:
08:35:8d:74:51:2f:3c:92:7b:be:c1:e6:e7:13:a3:25:6d:34:
bc:86:fb:55:0e:7d:d8:d7:9d:a3:f9:59:42:54:bb:c1:6d:38:
06:27:02:32:30:bf:0a:e8:7a:79:75:53:94:e1:d0:bd:39:41:
ec:e9:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org