Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: NAkvGYw85AefdnMrciWxgx+VJvS3AKhqqaaRfoJtwhY=
Subject key identifier: FB:FB:4C:50:9C:1C:C4:35:E5:A5:1B:B9:F7:1C:E8:8E:A8:35:81:17
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2F2AC7BEE3E3B583346C57212419288037D72473
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:00 +0000
ROA not before: Mon 26 Sep 2022 06:55:00 +0000
ROA not after: Mon 25 Sep 2023 07:00:00 +0000
asID: 59282
IP address blocks: 2400:d680:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2a:c7:be:e3:e3:b5:83:34:6c:57:21:24:19:28:80:37:d7:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:00 2022 GMT
Not After : Sep 25 07:00:00 2023 GMT
Subject: CN=FBFB4C509C1CC435E5A51BB9F71CE88EA8358117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:3a:e3:96:db:92:61:b6:c2:b1:81:68:fc:
cd:a0:15:95:1c:c8:30:d6:fa:65:d6:a6:9c:af:6f:
ca:f8:57:d0:b2:7e:c0:75:65:d2:77:0a:4d:0f:d0:
51:0f:b9:d9:52:41:34:db:b6:13:4e:08:34:b5:e3:
67:08:69:05:3d:92:a8:38:11:0e:3c:e1:03:27:38:
38:48:18:23:5e:f1:f1:c9:7c:93:70:9f:92:9e:64:
a6:6c:c6:d7:aa:a1:86:af:20:ca:46:82:5d:f4:0a:
71:85:f1:ff:eb:55:12:3f:f3:00:fd:a8:ca:30:47:
25:72:d5:73:59:df:a4:c3:1a:4f:98:05:96:f4:1b:
27:43:58:d5:b6:19:fd:92:fd:fd:bf:8d:57:bd:5f:
d6:61:18:6f:2e:c4:d5:e3:5e:a8:cb:86:0b:ff:6a:
aa:20:83:d2:6b:1a:e3:de:36:05:ff:01:13:93:ad:
32:e4:cf:ee:9c:67:cd:ab:61:90:fe:37:01:1d:ea:
07:57:8e:be:4c:fb:6a:99:43:d3:ef:e9:8b:73:e5:
3b:ab:b8:39:b3:a3:b3:3c:8f:e9:79:95:92:0a:89:
ba:d0:57:64:a3:e9:84:c9:cd:8d:d8:5c:31:0a:5f:
7d:c6:e4:a0:b1:9b:ce:20:48:b3:63:53:35:28:e6:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:4C:50:9C:1C:C4:35:E5:A5:1B:B9:F7:1C:E8:8E:A8:35:81:17
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3::/48
Signature Algorithm: sha256WithRSAEncryption
ba:63:15:a5:d7:8f:7f:7e:eb:73:4d:b6:cc:64:8c:35:ab:15:
c2:05:a5:b3:4b:f2:e0:e8:40:1c:e5:7b:17:ef:54:77:87:dc:
1c:86:f9:ac:18:6a:ea:30:7c:7a:47:e1:6a:46:85:e2:dd:ac:
1b:54:0b:a0:6c:cb:72:8a:9c:e1:b5:e7:ef:23:8c:3c:7b:9c:
f0:12:1b:5d:ea:9c:6d:91:e7:8b:e8:f3:33:d4:ee:6b:25:d3:
be:99:75:3b:a0:eb:20:82:d0:10:1b:ee:40:e4:6f:e7:ec:ba:
b9:2e:18:c0:2e:54:16:54:ce:22:0b:60:8c:39:f3:0b:37:cf:
99:90:b9:d4:11:d7:36:fd:dd:9f:fd:a4:11:52:d6:eb:59:8b:
c6:1c:fd:2a:06:27:ee:b4:89:e6:47:93:8d:4c:62:3c:1a:a7:
8d:ed:6f:c0:02:39:72:65:a1:01:1f:1b:17:d0:59:b3:26:c4:
96:1f:43:96:ec:4c:e6:28:b9:4b:3f:32:6e:75:9e:92:c9:1c:
dd:91:ff:ae:01:27:49:90:8b:ab:63:0d:8e:4e:c9:ae:cb:05:
76:05:51:0a:a7:29:18:ae:02:29:48:d1:c9:22:46:b8:f4:f6:
61:97:a1:2e:87:19:be:5d:41:bb:0d:40:11:1c:37:7b:77:df:
32:91:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org