Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: IYzeGjsZbYL1Mf6QrMurLx5g8k6V0gmv+BSpcb4sFAs=
Subject key identifier: 98:3C:E4:A8:D4:96:6E:33:B8:0D:C7:4F:09:02:18:EE:0D:80:DF:17
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5815FDDDF3227D17994749E818EC58795B2E36B4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:49 +0000
ROA not before: Mon 26 Sep 2022 10:55:49 +0000
ROA not after: Mon 25 Sep 2023 11:00:49 +0000
asID: 59282
IP address blocks: 2400:d680:37f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:15:fd:dd:f3:22:7d:17:99:47:49:e8:18:ec:58:79:5b:2e:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:49 2022 GMT
Not After : Sep 25 11:00:49 2023 GMT
Subject: CN=983CE4A8D4966E33B80DC74F090218EE0D80DF17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:97:b7:cb:3a:da:fc:af:b2:03:66:3b:66:
95:34:0c:4a:4e:b1:de:5e:65:a4:52:35:80:8c:80:
0f:79:1e:c7:46:ef:b1:73:83:2b:00:6a:98:23:44:
d4:f2:93:47:f0:a3:85:15:eb:55:52:f3:2b:e5:31:
23:57:46:25:c1:b0:b7:30:2c:30:1a:13:c4:93:d7:
7e:62:13:f4:e0:16:49:0a:57:16:b6:76:c4:5c:b8:
db:10:09:1f:c9:d4:e2:b9:87:01:ab:8d:7d:7f:ac:
fd:c0:a9:ea:c5:df:a6:6d:6b:53:0c:4c:06:ab:e1:
a6:6a:ad:61:53:9b:74:6a:59:ae:a3:65:f2:92:26:
9f:41:78:92:0a:a3:ac:4f:c9:97:82:54:d8:b2:6d:
d7:0c:0f:2c:e1:66:d1:92:0e:2d:e9:a3:1a:78:05:
dc:df:48:24:91:95:7e:02:fa:78:99:35:43:ef:65:
2d:9d:44:25:85:7f:a4:16:c5:cc:11:6b:b6:f5:fe:
d4:a6:7c:88:e0:7e:a7:28:cb:01:e5:f9:ae:ff:95:
25:aa:5e:56:1a:1c:85:df:c4:e3:06:a6:80:0e:53:
42:01:a2:e6:85:d2:af:05:7c:3b:b1:93:db:a9:6d:
9d:c1:b9:d3:6a:c2:ab:ea:dc:8e:28:92:8a:13:6a:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:E4:A8:D4:96:6E:33:B8:0D:C7:4F:09:02:18:EE:0D:80:DF:17
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:37f::/48
Signature Algorithm: sha256WithRSAEncryption
3f:bb:05:1d:c9:79:6d:0a:97:d0:5b:88:08:cf:44:a2:6e:d2:
0b:53:88:fe:2d:3a:fa:ce:cd:c2:2e:7e:43:68:c1:05:cc:6a:
fe:a0:f8:d2:e8:5f:19:e6:90:f8:c4:cd:c6:92:7b:9d:52:9f:
11:d0:79:cb:24:3f:f7:8c:d9:f5:8b:15:67:bd:1f:7b:30:95:
fe:4c:de:42:b7:0c:87:4d:4f:7d:de:40:4f:e3:d8:6f:e3:fb:
a1:d3:97:8c:4e:dd:58:03:93:b9:60:2a:c7:55:cd:8b:a6:49:
0c:bc:8a:d9:c3:86:8c:65:72:8c:75:c0:7a:b2:ea:36:5c:f9:
34:41:7a:29:df:0e:29:49:5b:9b:ba:24:78:4d:3a:ad:79:6d:
9e:5e:0a:38:df:2f:01:f8:41:e5:62:d8:84:fd:6b:59:da:6f:
c5:d5:15:75:f1:00:d3:c7:63:1f:54:ab:b9:06:9b:b0:c2:9d:
0e:ab:de:f0:a0:6e:80:f5:b5:e4:54:b4:c2:11:23:65:72:d3:
92:7f:e9:dd:0e:a2:47:e6:03:a7:77:82:aa:0c:e4:5f:c8:20:
8c:88:b6:de:3b:97:c8:de:95:16:9f:1a:34:eb:0b:07:68:87:
81:e3:aa:61:62:8a:c4:7e:39:f2:ba:14:f2:b9:32:70:3f:3f:
1d:7d:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org