Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 2q6o8OQWcK8OOX0P2sL6zEdZvyg0i60srEvpmuJfIrw=
Subject key identifier: E1:C9:08:FA:56:C9:EF:56:EE:7B:55:7C:27:B0:23:3D:B1:AA:76:E5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 642A545CACCBBCE2693459B777D809CF23CD8E64
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:37 +0000
ROA not before: Mon 26 Sep 2022 10:55:37 +0000
ROA not after: Mon 25 Sep 2023 11:00:37 +0000
asID: 59282
IP address blocks: 2400:d680:38a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2a:54:5c:ac:cb:bc:e2:69:34:59:b7:77:d8:09:cf:23:cd:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:37 2022 GMT
Not After : Sep 25 11:00:37 2023 GMT
Subject: CN=E1C908FA56C9EF56EE7B557C27B0233DB1AA76E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ab:96:45:a9:4f:cf:56:e4:2b:ad:53:ce:f9:
42:14:5a:1b:64:b6:84:84:f4:fa:17:31:0f:54:a4:
5e:68:1f:5c:e3:e8:be:3f:83:d2:33:0a:24:df:6c:
5c:6d:1f:d0:43:fc:38:77:a5:ff:f1:00:95:d9:c2:
43:3d:6d:14:a5:d1:bb:89:21:65:fc:7b:bc:77:64:
e9:21:f5:10:ba:cf:ae:ea:c3:46:d8:64:ae:da:e5:
52:2a:5e:6e:59:c2:23:10:71:f5:c1:8b:99:2b:02:
e1:f2:f8:97:0d:02:dc:1f:38:43:7c:d4:ac:ec:2a:
25:dd:7f:a7:4e:2f:71:96:b2:89:33:b1:a9:75:ca:
04:c8:31:d4:6b:1d:1c:3c:49:19:97:c8:24:1e:93:
52:e8:72:23:a0:74:64:9a:33:cd:0d:0e:e9:49:ed:
37:63:1e:48:7c:63:bc:a3:77:07:52:89:6b:b4:ae:
80:a9:bc:db:3a:74:fb:d8:72:df:3a:66:60:f3:0f:
be:2f:bf:1f:d5:6b:57:07:6c:ba:9e:a2:9a:cb:c4:
35:d8:ff:e8:61:38:d2:d2:d7:4c:30:37:65:5b:f2:
76:e1:9f:af:3a:92:5e:22:fe:b0:f2:70:da:6f:69:
b0:56:92:a6:99:bb:58:fd:ff:7f:39:5a:80:cc:08:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:08:FA:56:C9:EF:56:EE:7B:55:7C:27:B0:23:3D:B1:AA:76:E5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:38a::/48
Signature Algorithm: sha256WithRSAEncryption
86:23:c6:51:aa:a1:fd:8c:8c:ae:23:f3:88:2e:21:22:d0:04:
bb:53:da:90:bd:7d:c0:0d:a8:b5:b5:e3:b3:c1:1b:18:d7:83:
ae:63:67:b8:f2:de:d7:47:ef:63:fc:db:34:1f:f1:11:6f:70:
06:41:ed:cf:fb:c0:e1:f5:7e:e4:62:49:99:3e:c0:16:e3:51:
c2:22:77:df:51:5b:8e:bd:00:5a:6c:c7:44:0e:65:63:27:1a:
bc:72:3d:d6:71:31:f2:86:7b:ce:b5:32:3f:ad:9e:d1:55:ae:
7d:34:5e:e4:6f:24:cd:9e:01:12:bb:83:9b:20:ad:ec:0b:5f:
59:fc:24:6e:c7:1e:de:a6:49:95:ee:89:24:fb:8c:f8:92:aa:
8c:8e:84:a1:85:39:42:dc:a2:05:e9:ba:05:da:a0:e8:80:a7:
f9:08:c0:4b:7e:bd:d5:74:14:45:bb:e1:c5:9e:07:d5:2e:99:
d8:b7:40:39:63:91:9e:18:4e:4a:5f:ea:e2:4f:29:63:0c:d2:
1c:f8:7a:d6:96:c8:71:73:b9:17:8e:58:a5:99:0b:b1:19:dc:
f6:9f:63:47:74:39:45:24:7b:48:b8:c7:3d:eb:db:ed:4e:9d:
06:1c:93:d5:d6:5a:c5:6b:d4:cc:6d:95:d0:2c:ec:a4:26:84:
66:c5:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org