Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3339313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: fxPJJVj1Orxpio9YN/Epi9ggoUfDTTUdF9x2l27Hvgs=
Subject key identifier: 4F:C9:5B:37:5F:BD:B1:E5:D3:1E:E5:C0:33:75:5D:CA:C8:0F:8C:21
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 53623B700932372346729F327297E0B9F93027F4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:22 +0000
ROA not before: Mon 26 Sep 2022 10:55:22 +0000
ROA not after: Mon 25 Sep 2023 11:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:391::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:62:3b:70:09:32:37:23:46:72:9f:32:72:97:e0:b9:f9:30:27:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:22 2022 GMT
Not After : Sep 25 11:00:22 2023 GMT
Subject: CN=4FC95B375FBDB1E5D31EE5C033755DCAC80F8C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:ad:50:24:aa:e0:54:4d:30:ad:9f:18:2d:
36:c9:03:8f:1c:ce:92:ce:6f:09:e6:95:6a:ca:15:
a7:0b:92:f3:36:05:13:a6:8e:fc:13:7f:b7:18:60:
4f:18:68:b0:b2:70:70:8b:68:4f:97:21:24:0a:b2:
47:b0:41:8a:ed:4f:8f:21:29:78:b5:25:80:74:a1:
25:d8:f4:6f:fd:b9:87:3b:7b:75:cd:c0:e4:56:a4:
88:2d:a1:02:8e:59:21:38:0c:6c:bd:2c:e7:a4:7f:
ac:93:48:67:21:d3:ac:aa:28:68:d0:1b:1f:53:ab:
8c:25:e0:87:44:67:a5:c7:70:cc:ea:49:ed:4e:45:
6b:43:f9:34:d5:b6:83:f4:ed:86:4d:f7:e2:34:89:
5f:7e:1d:ef:90:da:97:9c:2a:d2:19:6d:be:1c:f0:
00:6c:57:5f:ba:56:e2:bd:e5:f4:a5:25:2e:ad:d5:
07:64:6d:99:96:c2:a0:9b:62:8e:53:14:b4:46:08:
55:be:1b:43:af:a3:66:1e:bf:64:65:db:e1:f9:9e:
a2:13:e8:94:3b:c4:64:d0:44:40:74:99:86:cb:9a:
eb:12:92:0d:ef:06:56:76:c2:88:ba:ac:65:8c:1b:
cf:8a:6c:d2:6c:b0:10:7b:ec:1e:d4:8c:ab:4c:df:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:5B:37:5F:BD:B1:E5:D3:1E:E5:C0:33:75:5D:CA:C8:0F:8C:21
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:391::/48
Signature Algorithm: sha256WithRSAEncryption
a4:49:8a:b4:b4:c1:22:91:66:6e:3d:09:15:a3:0d:22:16:62:
ee:75:b6:d2:11:14:09:97:bc:03:b5:70:ee:2e:0d:44:b3:91:
c3:6b:ef:0b:a3:84:c6:e0:41:86:4b:5d:c3:ee:f8:95:e1:bb:
e7:e1:61:56:b6:61:d2:ab:e9:15:c8:52:a1:40:57:66:2f:63:
92:54:8b:49:16:ed:7c:d3:61:9c:3e:db:b9:70:0b:1b:7c:68:
0e:c1:c8:eb:50:1a:c5:64:c6:b0:e2:32:ae:33:18:15:bf:b7:
bf:58:87:95:4a:90:8d:5b:42:b9:27:00:9f:2c:95:b1:bc:23:
0f:05:96:14:d4:e6:2e:3f:38:df:98:59:54:3b:ba:f7:25:4f:
93:bc:5f:41:29:b2:ba:ce:ea:31:04:0f:89:4f:d2:30:a5:01:
78:11:3a:e4:35:9f:4f:03:bc:26:1c:f3:81:50:2e:a5:76:15:
28:59:20:9d:a5:77:9f:69:75:db:c4:f3:d9:06:ad:5f:98:7e:
4a:66:41:69:b9:f8:cb:9c:96:94:6b:97:ed:bb:6b:f1:a7:b0:
6b:77:10:0d:f3:83:9c:ac:9e:48:b3:68:39:7e:4e:c9:bc:26:
91:39:0b:a9:e5:a2:58:5f:fa:2f:a1:e8:fa:b3:db:55:1b:7b:
c3:f2:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org