Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3339613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 331iXv/dDDuGHeUXUtS4zPUWY887ctjkcSDaom0++B0=
Subject key identifier: 12:00:47:CD:9B:19:B7:A4:A0:44:29:9B:6E:AF:A8:C7:84:88:14:F1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4E8A2A0C3F7977297E802CA07ABBB9F95703A5F8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:26 +0000
ROA not before: Mon 26 Sep 2022 10:55:26 +0000
ROA not after: Mon 25 Sep 2023 11:00:26 +0000
asID: 59282
IP address blocks: 2400:d680:39a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8a:2a:0c:3f:79:77:29:7e:80:2c:a0:7a:bb:b9:f9:57:03:a5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:26 2022 GMT
Not After : Sep 25 11:00:26 2023 GMT
Subject: CN=120047CD9B19B7A4A044299B6EAFA8C7848814F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:64:66:9b:5d:5c:5e:af:56:b2:82:f8:bb:
7d:0f:68:82:ea:a5:05:05:da:ff:7a:e0:8e:fa:f7:
44:d8:9e:6a:52:1c:27:96:55:ee:8c:be:7d:46:d9:
9a:5c:f6:fe:1e:b8:01:02:8e:f4:3f:26:d4:d8:d1:
91:77:d5:92:47:f1:02:6e:3a:d6:96:7b:b6:57:8e:
40:b1:f5:13:f0:43:fc:bf:70:6e:33:cb:64:28:2b:
90:c0:15:7b:fb:68:d7:69:ac:6e:dc:d9:52:4a:f4:
ad:67:e8:b9:8f:21:ae:71:8f:96:a8:6b:4c:df:b1:
8c:57:32:4c:2e:0f:e4:c8:ca:c5:e9:09:14:cd:7c:
70:07:40:12:c3:fd:ed:4a:ce:d4:18:3d:5d:f8:ec:
78:b5:8a:42:be:94:bb:43:b0:cf:01:19:07:2b:ab:
cf:1e:7a:c3:5a:5b:8f:f1:5a:45:66:f3:ff:2c:f1:
1a:e3:28:e7:59:1b:46:b9:d4:bf:a5:a0:12:53:8f:
0e:04:47:fe:ae:4c:95:53:d1:26:d5:6d:a4:af:80:
a0:5d:d1:05:25:2e:b2:b4:ff:bb:22:5c:29:3a:be:
79:78:77:8d:0b:60:52:87:e0:8c:6d:10:20:14:a6:
c8:c0:1c:8d:29:b4:97:62:61:57:26:fd:c2:28:4d:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:47:CD:9B:19:B7:A4:A0:44:29:9B:6E:AF:A8:C7:84:88:14:F1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:39a::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a5:ca:8d:27:b0:25:11:d4:4f:31:0d:d2:6c:07:37:8f:18:
74:07:bd:b4:97:6f:80:7e:51:6d:06:d9:36:cf:5f:1f:33:e3:
0b:bc:cc:0c:15:1a:bc:d7:24:12:c0:8a:03:10:81:ac:b3:54:
82:98:f5:c7:65:74:a0:50:ed:69:30:75:e8:85:70:17:20:11:
fd:37:3d:74:ed:ac:a2:42:3a:0b:74:16:1c:ce:a1:1b:87:7a:
4d:24:ad:fe:78:54:07:0b:ed:ae:0e:fb:2e:10:4b:4e:be:3c:
af:a3:52:05:3f:2d:ec:41:5d:61:42:4b:a3:03:a2:22:5f:20:
d2:89:b7:0e:13:87:28:35:1d:2b:b9:f7:af:f4:b7:7d:e4:4e:
a0:d0:88:d7:1f:50:6b:76:b4:d1:58:b9:e6:5d:3b:12:ab:fd:
11:1e:1a:c7:32:35:64:17:8f:69:73:fa:8f:e6:f7:4c:c8:c5:
31:8d:8a:9a:1d:da:42:5b:27:58:7a:c5:8d:06:07:68:ba:a7:
64:82:db:3d:ff:4b:79:01:fe:09:61:26:e0:23:80:a3:6f:b5:
4b:2f:19:9e:25:87:b5:b3:d9:69:b0:f8:2b:a3:22:89:3a:8a:
7f:e7:71:f2:2c:f0:48:8c:e5:a1:88:36:d1:7a:62:82:ae:fe:
8b:2d:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org