Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: LVmgooyBy9wsM9chOxItlI74MtyKmCN9e7S1d64nnP0=
Subject key identifier: AD:3E:BD:31:ED:A0:61:5D:A2:AE:7A:F1:36:7B:D4:92:E9:F2:92:11
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2D575F16157C815F0AA3C353400640CE42B65861
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:48 +0000
ROA not before: Mon 26 Sep 2022 10:55:48 +0000
ROA not after: Mon 25 Sep 2023 11:00:48 +0000
asID: 59282
IP address blocks: 2400:d680:388::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:57:5f:16:15:7c:81:5f:0a:a3:c3:53:40:06:40:ce:42:b6:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:48 2022 GMT
Not After : Sep 25 11:00:48 2023 GMT
Subject: CN=AD3EBD31EDA0615DA2AE7AF1367BD492E9F29211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:d4:45:60:6e:72:1b:18:e4:4a:59:b6:69:
a5:f6:99:03:38:0d:19:70:1e:d2:3a:ea:3e:17:8f:
d7:cb:c5:57:63:64:00:5f:3a:52:5f:69:1e:a0:06:
d5:88:1c:a3:3b:44:b3:8f:0a:54:ed:ae:c0:7f:70:
cf:c8:02:49:3d:9b:1a:5d:0f:0d:78:4a:bb:0a:ce:
04:44:0b:e0:01:6b:fe:6e:d5:43:18:ee:1b:10:5b:
2b:72:57:81:b6:17:02:d4:77:d6:d9:80:1e:89:f6:
df:03:08:1b:0d:59:90:0a:2d:7f:8b:d9:44:84:10:
3d:0d:ca:96:25:2f:28:a5:cd:af:b1:61:04:ce:35:
9b:4d:ae:b5:af:0a:11:11:7b:ba:90:75:b9:bc:31:
cc:41:c1:4e:17:eb:f6:22:a0:25:d3:7c:43:7c:8f:
8a:b5:98:a4:90:07:e1:e4:77:e4:c5:ac:e7:2a:00:
ad:c2:93:86:74:56:ac:52:5a:6d:a7:08:19:e1:58:
5b:fc:19:ef:e7:1d:68:c1:5c:1c:9f:af:d9:89:b7:
8d:b6:6e:13:1d:35:bd:60:d2:8e:91:4c:8c:c4:46:
41:7b:e3:31:ad:95:d4:4a:77:53:1b:43:47:0a:62:
97:79:35:f1:74:17:9a:74:f7:c7:ad:50:30:31:30:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:BD:31:ED:A0:61:5D:A2:AE:7A:F1:36:7B:D4:92:E9:F2:92:11
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:388::/48
Signature Algorithm: sha256WithRSAEncryption
b2:82:fc:d2:8c:e7:55:ae:c9:a0:e6:fc:07:c5:b7:a3:09:38:
ab:53:3c:8d:88:85:3f:26:69:95:9f:48:81:d5:28:85:cc:e5:
4d:1c:8c:2c:c8:2a:41:8f:0f:e5:42:22:34:67:53:b3:0d:33:
2a:a6:94:13:a0:85:17:58:11:c4:ee:2f:d2:4a:e3:0b:29:58:
c6:db:03:cf:48:5a:b2:71:41:25:24:49:61:1a:cd:ca:db:f4:
74:b2:e4:e1:ea:0e:10:0c:3b:c6:22:01:d2:fb:71:ef:6d:0f:
e9:26:61:f0:9f:0f:fe:ff:4c:c8:de:c1:11:56:ae:5d:1f:f9:
52:56:aa:0c:09:8f:0e:5f:3a:7d:ff:f2:fa:3a:42:8c:56:6e:
b7:3a:50:ed:fc:16:df:43:a0:fe:2a:84:a8:0a:b4:d5:29:2f:
f7:b7:83:e3:87:f0:1f:4e:34:d3:c3:52:a1:bd:ef:23:1f:b4:
73:18:4b:93:13:0e:f7:54:ef:87:c2:f3:0a:c9:ee:05:10:2d:
b9:84:20:26:13:c3:a3:5d:9e:21:5d:77:b4:a6:60:1b:75:ca:
c3:df:7e:b1:37:37:2f:ae:f0:25:f9:a3:3c:4e:5f:a3:fe:6a:
63:44:93:87:ed:14:4e:20:a2:11:8c:ec:59:9d:9a:97:eb:73:
e6:49:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org