Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: TqKRxpgad/VUeMIPCDoYf1zHa+X+UH0NvZqsr0ibthE=
Subject key identifier: 2C:A4:DB:69:2B:E2:77:1E:FD:35:E3:82:E3:D8:97:07:3E:0D:D4:3E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 07CC1CF7425E83A42ED8A5BD8D188B071E5DDC00
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:22 +0000
ROA not before: Mon 26 Sep 2022 10:55:22 +0000
ROA not after: Mon 25 Sep 2023 11:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:383::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cc:1c:f7:42:5e:83:a4:2e:d8:a5:bd:8d:18:8b:07:1e:5d:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:22 2022 GMT
Not After : Sep 25 11:00:22 2023 GMT
Subject: CN=2CA4DB692BE2771EFD35E382E3D897073E0DD43E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:18:ba:d3:ea:a9:e6:61:e0:b4:11:4e:c0:
ff:03:b5:2e:bf:4c:63:9b:c5:21:63:3c:69:c0:bd:
eb:f1:21:64:97:68:58:8a:c9:3e:b5:cd:ae:f0:3d:
08:34:02:90:cf:86:85:71:5c:81:2a:38:2a:6f:dd:
46:53:27:3c:50:40:8c:5d:02:69:8d:15:ff:c0:ad:
91:54:99:8e:ea:17:98:ca:ce:ce:0c:23:39:4a:09:
4d:cd:98:14:86:62:a3:bd:ba:83:e6:31:18:22:e5:
49:35:62:7a:c7:52:e8:e4:b5:a1:70:ef:55:1d:22:
57:49:d8:27:dd:b4:9f:f2:10:0d:04:b3:86:54:65:
c8:18:ce:37:da:e3:ee:e4:01:94:6a:ce:12:ab:e1:
96:82:65:67:6a:7a:9f:6b:6d:1c:81:47:d5:bd:2f:
d1:11:d9:e2:cc:4f:85:81:6c:19:ed:64:e6:dc:e3:
d9:e5:bf:b5:e4:ad:8a:7a:f3:b2:b5:b8:c4:7d:11:
b4:95:17:00:dc:89:ee:39:19:b7:b9:ed:dd:60:c4:
78:db:89:2e:eb:31:12:6b:54:84:35:93:75:7d:e7:
4b:f1:49:9c:31:71:12:ad:84:da:64:ad:99:7d:fb:
6b:c5:aa:aa:84:45:b6:69:5a:f8:7d:e4:0a:1f:78:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:DB:69:2B:E2:77:1E:FD:35:E3:82:E3:D8:97:07:3E:0D:D4:3E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:383::/48
Signature Algorithm: sha256WithRSAEncryption
b3:54:9f:be:35:0f:23:6b:08:7d:8d:6b:79:0a:54:8b:a9:5c:
56:66:53:dc:9b:1f:20:43:5f:03:a3:c3:2f:6d:ca:1d:04:11:
d1:45:2a:0f:50:aa:37:35:39:7c:55:36:f2:4d:a2:09:44:cb:
26:76:41:66:de:45:22:6e:f7:ad:3d:c5:b8:26:cf:cc:b5:9b:
18:67:4e:0f:8c:45:cc:1c:ab:29:5c:70:a9:98:1b:15:ef:e5:
e3:6d:7f:a3:fe:1f:a0:cd:22:21:08:d9:8e:80:66:87:07:38:
fe:31:88:0c:4e:e6:4a:16:9c:3d:3f:d8:16:05:06:95:aa:7f:
e0:89:5f:77:d3:b3:94:cf:56:4b:fd:0b:9c:04:c0:38:7f:1c:
69:44:4c:ac:2c:4c:75:dc:6c:80:61:88:ad:a9:e1:6c:1e:ab:
5f:84:ee:01:fc:4c:68:00:1d:fc:8e:5c:5f:70:a6:ee:60:d6:
84:b3:23:84:f4:d1:ad:02:9f:0c:9e:10:fe:d8:c9:cd:27:71:
cc:d1:55:88:c4:e0:46:13:85:1f:b3:68:ce:58:d9:17:0c:86:
81:f9:dd:61:c7:78:e1:5c:28:c6:fa:c2:6f:d7:3f:b5:e2:62:
71:c6:42:f8:db:8b:51:26:a2:44:bc:ae:58:d8:a6:1b:e5:81:
b8:a4:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org