Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3339653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0WYJWZDMWm0SztJR35W61f57a5Z+13LgTO0GU5iAvLg=
Subject key identifier: 58:FB:22:12:6A:A0:72:76:B2:FC:A8:32:4A:32:1C:45:31:C5:BB:6E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BEB7FCD2F947DC4C4F2DEFE7550FB6A1488DEC5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:37 +0000
ROA not before: Mon 26 Sep 2022 10:55:37 +0000
ROA not after: Mon 25 Sep 2023 11:00:37 +0000
asID: 59282
IP address blocks: 2400:d680:39e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:eb:7f:cd:2f:94:7d:c4:c4:f2:de:fe:75:50:fb:6a:14:88:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:37 2022 GMT
Not After : Sep 25 11:00:37 2023 GMT
Subject: CN=58FB22126AA07276B2FCA8324A321C4531C5BB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:69:a5:a2:c0:e1:58:d0:0d:1e:bc:07:75:
56:e1:06:fc:bf:01:3e:d5:2f:3f:33:f6:90:13:ae:
13:bd:5f:0b:6c:ff:82:a1:90:05:6b:92:ec:eb:1d:
5d:84:85:0b:de:ac:d6:5f:90:dc:33:0c:5a:79:62:
6c:24:08:b6:b3:97:00:9d:27:92:e3:2d:4f:f1:6f:
99:15:48:32:7f:dc:f9:4a:b7:91:46:13:ba:93:06:
aa:60:c5:35:06:dd:86:f6:fd:83:3c:03:92:f3:a3:
8d:16:0b:6d:54:94:bd:a9:51:a3:72:0c:af:b2:57:
e4:69:ce:03:8a:13:a0:1c:79:19:e6:9e:2c:4d:84:
9c:89:b0:0d:f6:c9:7a:3d:e5:18:dd:a5:19:0f:4f:
e7:91:89:01:56:1a:46:ea:93:2f:1e:cb:dd:6b:ba:
9f:8b:0d:77:54:90:0e:39:4a:48:68:e8:ac:da:66:
b0:3f:25:36:40:04:3d:43:7d:23:1b:1b:e0:a3:a5:
7c:56:98:e2:7f:de:2a:a5:e5:45:2a:8c:14:6d:69:
0a:e9:e6:ed:6b:a1:44:28:ef:b1:6f:5b:9d:63:7c:
3e:db:ac:a3:1a:c0:0d:f6:0a:7f:f3:79:54:53:e9:
00:9a:c6:3f:94:df:f0:c9:6d:36:0a:3e:96:4f:14:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:22:12:6A:A0:72:76:B2:FC:A8:32:4A:32:1C:45:31:C5:BB:6E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3339653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:39e::/48
Signature Algorithm: sha256WithRSAEncryption
c2:b7:46:df:26:84:21:89:52:2b:1b:cf:4d:48:37:4a:3d:01:
42:73:79:5c:7a:61:b3:bf:b8:1e:ba:47:ed:21:e5:d0:e6:a7:
aa:55:3b:bd:2b:34:4d:cb:a9:c7:ea:52:7e:66:af:af:c4:14:
0e:ae:3d:90:f1:75:67:07:ef:b8:2c:a5:69:8c:5d:42:c8:14:
89:26:52:23:6a:84:31:25:60:7c:dd:8f:53:12:81:8d:b9:4a:
10:b0:3c:aa:bc:30:46:a3:fe:ea:65:83:52:ed:a7:c1:e1:b7:
de:15:34:25:a9:dd:5b:ec:37:a9:66:7f:f7:48:14:19:35:91:
ee:87:b0:16:a5:d1:8b:02:62:c2:0e:d4:f4:db:9a:ff:19:e9:
7a:6a:a1:45:c3:e7:4f:ff:a9:7c:6c:6b:67:1e:04:c1:11:6a:
d6:5f:e4:f6:2f:34:ea:1d:e6:2c:8b:da:d4:d4:d6:1c:2e:dd:
77:0f:16:51:df:80:04:f9:15:47:e8:60:68:ed:34:d7:ed:13:
d6:12:09:78:72:ac:21:37:d0:a3:33:01:08:e7:09:63:ad:f7:
48:56:00:09:87:f5:be:83:20:ce:80:02:cf:50:5b:1a:0e:f9:
11:04:aa:d4:c2:9d:ec:7e:7b:b1:bc:71:fb:a4:37:63:27:ea:
9d:ec:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org