Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a33613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FEWxtG5XBPoUQdffJBHWhaAHgvzRfz7NNK0DroTJPN0=
Subject key identifier: 31:00:76:61:CC:AC:D9:76:DC:1A:A8:85:BA:9D:52:A2:C7:60:30:22
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1A37D6595A59527BC824BA2E1EEBFC0B52D18BB6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:06 +0000
ROA not before: Mon 26 Sep 2022 07:57:06 +0000
ROA not after: Mon 25 Sep 2023 08:02:06 +0000
asID: 59282
IP address blocks: 2400:d680:3a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:37:d6:59:5a:59:52:7b:c8:24:ba:2e:1e:eb:fc:0b:52:d1:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:06 2022 GMT
Not After : Sep 25 08:02:06 2023 GMT
Subject: CN=31007661CCACD976DC1AA885BA9D52A2C7603022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:ab:0c:31:71:f8:38:d9:20:74:01:8e:75:
ec:16:42:e4:7b:f8:48:6a:87:c7:b4:0a:74:b4:d3:
05:2a:06:20:ae:fe:87:44:6b:46:aa:5e:c9:c1:e5:
e2:00:01:de:bf:30:06:4e:7a:8b:57:74:00:6d:a7:
57:1b:ea:c2:7f:4d:aa:a5:50:9d:06:80:f4:b5:6e:
6d:4c:90:89:6b:e0:3e:71:f4:09:82:bd:a2:9d:b7:
3e:3e:f4:6f:23:06:94:64:cc:e1:37:7c:9b:12:a7:
18:28:9f:ab:5a:0b:e9:24:ff:b8:2e:d4:93:60:c7:
01:04:ab:21:04:32:a7:31:ba:70:2e:81:2e:73:e3:
78:0c:13:7c:0f:b7:c7:be:6d:fe:58:e8:8e:06:06:
81:ff:d2:a8:02:71:6b:de:16:ff:44:96:a3:bc:aa:
45:eb:cf:52:12:04:94:bf:ea:93:c5:6f:10:a6:d7:
e5:70:53:30:c9:ee:05:9e:27:69:84:1e:22:25:b0:
49:07:96:a6:59:9d:46:83:bd:a5:fe:66:49:d8:a0:
ef:13:d8:00:0a:6c:4f:26:8a:a6:16:a3:b8:e5:a7:
68:a7:22:d2:c9:3f:1d:bb:97:2b:f8:77:97:3a:4d:
71:73:d9:f1:6e:32:bf:8a:c6:bc:a2:db:9e:29:0e:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:76:61:CC:AC:D9:76:DC:1A:A8:85:BA:9D:52:A2:C7:60:30:22
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3a::/48
Signature Algorithm: sha256WithRSAEncryption
1d:7e:61:d8:f0:e0:0c:12:21:02:0b:2f:cf:20:2f:36:60:33:
55:d7:eb:bb:0a:c5:54:ca:1a:c1:59:64:36:cc:55:5c:6f:65:
1e:4e:61:2b:23:ff:96:57:dd:d8:ad:8c:c7:f2:e8:56:28:66:
15:5f:8b:89:36:c4:0e:3b:a4:b0:20:4c:64:ab:d5:3f:df:52:
62:44:d0:f5:5e:67:d0:fa:2a:77:8f:a4:bb:7b:49:e9:07:a9:
f7:33:c8:38:26:4d:a9:78:99:80:25:30:d6:28:84:fa:4d:d8:
c4:c5:fa:fd:83:b9:b6:11:38:5a:08:5e:4d:af:9e:c7:2a:f8:
46:f0:35:13:58:a7:03:13:00:6c:6b:cc:cd:6a:5f:1b:c3:62:
ed:98:bc:b1:d6:bb:f5:df:13:d8:87:67:69:0c:35:52:f5:b5:
91:57:9b:37:7d:3d:c5:af:47:8f:f7:e6:59:08:12:c5:ef:d4:
c7:00:e9:28:99:3c:7c:00:e4:74:01:75:74:df:51:93:d3:ce:
11:28:08:09:de:1b:58:64:74:c1:b8:a5:27:bc:37:af:79:81:
68:b0:bc:43:78:42:ba:8f:4c:a8:c7:94:b1:58:5d:01:47:26:
6f:1a:4f:d1:33:9d:dd:ad:69:15:cb:94:50:5c:e6:36:33:21:
90:7b:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org