Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a33383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Gq/LV60JVI1G/UrJfuh94ex5ud+aVBzeTuCrcLPfFXk=
Subject key identifier: 32:39:5B:95:A5:D6:13:6D:19:92:1F:07:55:DB:9A:38:13:FF:D7:C6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 35D884A0C52ACE8D26BCCF8CCECCA6030A287195
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:23 +0000
ROA not before: Mon 26 Sep 2022 07:56:23 +0000
ROA not after: Mon 25 Sep 2023 08:01:23 +0000
asID: 59282
IP address blocks: 2400:d680:38::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:84:a0:c5:2a:ce:8d:26:bc:cf:8c:ce:cc:a6:03:0a:28:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:23 2022 GMT
Not After : Sep 25 08:01:23 2023 GMT
Subject: CN=32395B95A5D6136D19921F0755DB9A3813FFD7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:82:72:39:63:60:f6:50:88:d5:3d:18:e5:
a6:c6:99:5c:d2:4a:1d:bd:99:55:22:57:dc:61:4c:
3e:91:e3:52:ec:8b:75:41:a7:1e:57:12:2e:aa:c7:
22:83:1c:27:b6:2c:73:d6:48:06:f2:09:5f:b6:e6:
b8:81:0e:e7:5d:cf:a5:b7:43:44:95:67:ac:0e:ae:
6a:4e:44:a9:3b:4c:c3:37:f0:a1:62:68:c5:c5:6d:
48:0e:1f:33:48:ce:cd:24:10:43:01:50:d8:c6:ec:
2b:f6:18:66:af:34:a0:6e:71:59:70:42:4d:84:cd:
ea:56:05:3f:1a:98:ae:09:d7:a3:c9:d7:c7:2e:7b:
ca:e9:4d:9d:3c:1b:e8:14:5d:7d:0e:dd:2d:f6:e0:
e8:70:fb:81:07:89:9b:c8:1e:e1:b4:47:d5:05:ca:
91:ff:d6:7f:e9:c8:19:66:98:14:26:4a:2f:8d:8e:
cc:0b:8b:4d:1f:eb:ac:ef:74:f8:42:7f:a7:31:7d:
bf:8a:83:4e:73:70:4a:05:03:2b:2b:ec:a1:43:7e:
f2:41:c6:89:3c:df:74:da:8d:fa:87:f9:93:79:5a:
94:19:d2:d2:b8:7b:dd:21:6f:7d:a9:4b:7a:1a:6e:
2f:68:2a:e4:a3:83:82:f8:47:88:87:25:ee:ee:99:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:39:5B:95:A5:D6:13:6D:19:92:1F:07:55:DB:9A:38:13:FF:D7:C6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:38::/48
Signature Algorithm: sha256WithRSAEncryption
2b:89:8f:3c:a8:42:6f:7a:97:1e:79:61:61:9c:a2:4c:4f:1d:
f1:fd:d5:c6:3a:ba:d1:74:cd:f2:47:85:e6:58:4f:ae:12:7e:
89:16:47:9a:d2:aa:54:9f:2e:c6:5d:37:54:19:b4:42:10:fd:
00:90:f1:24:56:97:ed:13:87:08:e7:6f:69:d2:a1:42:2c:92:
8d:a1:9c:e5:66:7d:a7:27:1b:b3:db:f7:19:0b:06:d1:78:b8:
98:a4:40:71:b0:41:f8:35:8c:42:21:7f:d7:61:04:09:46:a4:
5f:e3:cd:12:ac:cc:10:17:c8:4c:f9:22:fd:eb:89:d3:93:77:
fa:fd:4c:0b:03:e4:f8:67:9e:ad:51:62:65:4b:8b:14:81:c0:
9b:bd:56:3b:04:a3:31:97:f0:79:94:5f:d4:56:d8:95:21:19:
d4:26:d9:5f:3a:11:4b:46:87:61:36:2e:90:8e:f3:96:a7:84:
b9:68:db:98:44:0e:4c:52:1a:54:0f:2c:32:74:d6:1c:20:9b:
a6:65:99:02:4f:7d:80:8e:5a:8d:cb:62:e5:f3:4b:ca:7c:18:
57:10:c5:34:fd:7a:24:25:cb:2f:75:1d:fb:59:34:b2:0b:e7:
bb:d9:72:0d:0b:42:aa:24:b4:7e:fd:7a:9d:d5:e4:02:1a:48:
c9:1f:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org