Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3361633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +Pz8+JDtWoqUZk6Cme9y/TPDxMTbNXA8j6R2sLFtUZ4=
Subject key identifier: 0D:3A:A3:03:C2:7E:02:CA:42:14:46:96:13:66:81:E5:8B:60:6A:73
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0F309D48393480AA45E92FBCB78BE94B428F26DD
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:32 +0000
ROA not before: Mon 26 Sep 2022 10:55:32 +0000
ROA not after: Mon 25 Sep 2023 11:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:3ac::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:30:9d:48:39:34:80:aa:45:e9:2f:bc:b7:8b:e9:4b:42:8f:26:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:32 2022 GMT
Not After : Sep 25 11:00:32 2023 GMT
Subject: CN=0D3AA303C27E02CA42144696136681E58B606A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:01:2a:68:4e:30:02:a4:7e:19:42:6e:61:
67:81:1d:8b:56:d0:af:2b:5a:cc:8a:b8:a1:04:02:
2d:4e:84:2c:be:72:ac:68:21:9e:17:7e:97:98:79:
cf:68:13:5c:04:a5:3a:31:dc:86:40:7c:95:d7:db:
6c:60:9b:b5:00:9c:09:e6:d2:a4:90:95:11:fd:ba:
11:71:2d:e5:f9:9a:d5:19:b7:6d:db:44:7a:3e:e6:
05:64:86:a0:e2:62:d5:7b:cd:33:de:d4:2e:63:9f:
f3:cb:7e:66:a3:3e:c1:2a:54:50:f8:4f:94:d2:6b:
ed:b6:9a:24:87:c4:11:bd:90:5a:ce:e4:3e:bf:10:
84:07:42:4c:7d:f3:be:85:9b:9a:31:35:8b:01:02:
c2:c8:4c:73:85:18:e8:c0:c0:e2:30:ab:39:4f:23:
a6:ba:9e:5f:18:89:77:ef:5c:be:af:3f:01:23:42:
70:a6:71:4e:7f:c3:a9:84:0d:85:79:96:b9:08:9e:
fe:8f:da:e7:f1:29:af:6b:a4:2a:28:7a:88:ca:f1:
5a:ff:97:9b:ad:a3:c3:4a:b9:4c:c5:1a:04:62:17:
76:6b:19:d7:e9:0d:de:60:19:ef:09:04:eb:47:15:
bc:a6:7a:04:5a:9f:2c:0c:d4:9c:65:9c:46:53:a0:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:A3:03:C2:7E:02:CA:42:14:46:96:13:66:81:E5:8B:60:6A:73
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ac::/48
Signature Algorithm: sha256WithRSAEncryption
9d:22:4d:5e:5b:89:e6:c6:8b:92:bf:85:f4:ca:6a:81:aa:1c:
f3:e0:67:42:a9:4b:f6:a4:8b:40:33:f8:78:01:52:8b:11:45:
79:ea:1e:c0:3f:9a:46:25:db:c0:d7:94:49:5a:c1:22:ac:3a:
4f:58:5f:34:69:8c:70:46:0d:a9:3f:45:d3:3e:78:78:56:86:
13:e0:b8:80:b3:d5:a2:d3:f5:69:25:03:8d:96:04:d5:79:7a:
b4:bf:c2:06:c6:0c:0b:c2:e8:73:31:09:9e:fd:d3:dd:4c:36:
f0:26:c7:38:5b:ff:8e:2f:f8:10:94:ac:e9:8a:e9:f5:a5:e2:
22:fe:9d:ab:f9:cb:91:98:b7:b6:2d:41:4c:b0:26:05:2b:a6:
26:d8:47:b0:06:15:88:16:1c:32:bf:cc:48:01:02:40:6d:2e:
5b:72:a7:e1:c4:66:37:46:de:fb:43:30:90:31:e7:4f:93:27:
90:ec:e4:e7:9b:63:02:89:0c:b9:cc:40:25:75:38:a8:e3:7f:
51:3d:6f:7e:23:a8:e7:1d:a5:59:50:18:5d:65:65:29:30:df:
97:81:6c:81:2e:d6:64:7a:12:f5:f9:99:93:ce:55:9d:be:75:
eb:f4:c4:fc:b2:3e:dd:a7:c5:41:d3:37:da:99:8a:c0:da:f3:
93:92:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org