Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3361653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: PsJv+42FZITcd7FU3eukrjOM7n0UHL3lmCS/eJFcib0=
Subject key identifier: C3:A4:54:AC:91:2D:14:46:70:0D:28:5D:4C:41:98:2C:64:68:8B:32
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6F4483FE2B437443472E0EE8A54EAD0937642A14
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:39 +0000
ROA not before: Mon 26 Sep 2022 10:55:39 +0000
ROA not after: Mon 25 Sep 2023 11:00:39 +0000
asID: 59282
IP address blocks: 2400:d680:3ae::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:44:83:fe:2b:43:74:43:47:2e:0e:e8:a5:4e:ad:09:37:64:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:39 2022 GMT
Not After : Sep 25 11:00:39 2023 GMT
Subject: CN=C3A454AC912D1446700D285D4C41982C64688B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:be:fb:6f:c5:b6:a7:07:e1:29:98:97:f7:
66:71:0f:c2:e5:12:c3:97:22:38:98:66:ec:16:4c:
8c:d0:eb:e3:9a:96:ae:2b:7a:f6:9e:49:cb:56:dd:
e3:16:47:8b:78:0e:d0:e0:cd:c8:27:3b:39:9d:02:
e5:69:60:d1:8c:05:eb:a4:dd:d0:76:6c:bd:8d:29:
84:fc:af:c0:cf:6f:5e:2e:8d:6b:b7:29:db:b9:92:
64:64:fe:ac:a9:42:e9:29:ad:5a:c1:4f:8c:c7:49:
9e:39:71:22:bc:c2:b5:c8:d4:53:35:ff:28:9c:9e:
7f:77:ce:b2:66:65:0d:a3:9b:4a:bf:b7:90:8c:df:
9d:03:76:da:ff:e3:0c:f9:da:76:66:61:e2:5d:4d:
a1:2d:af:f3:b3:92:49:25:5e:fd:11:e9:13:b1:fe:
04:fa:cc:20:ff:79:30:83:8a:45:36:12:d5:ec:e7:
ce:a0:31:b1:38:09:5c:e8:c6:95:2c:05:68:12:ae:
16:c0:de:e3:9a:23:46:6b:1b:86:3a:6b:9a:a3:0f:
f6:74:fa:86:d2:26:aa:74:4a:45:f0:50:36:9f:3f:
8e:9a:2e:3f:93:a3:41:c1:ca:73:46:2d:90:af:9e:
be:a6:d8:fa:c5:04:02:b3:68:6a:e0:07:14:3b:bf:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:54:AC:91:2D:14:46:70:0D:28:5D:4C:41:98:2C:64:68:8B:32
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ae::/48
Signature Algorithm: sha256WithRSAEncryption
50:e3:dd:87:02:ad:52:e9:f2:f0:bc:8c:a4:76:2b:66:d3:04:
50:17:3c:b4:da:f2:51:38:5e:c7:8c:13:4f:1d:07:07:49:d2:
b1:5f:ea:66:14:2f:af:0a:de:24:01:0f:ec:55:f0:64:e7:cc:
f6:1c:49:d0:7e:8c:75:39:ea:da:d1:e5:37:a0:c2:11:71:ea:
2d:84:32:6e:40:cd:1f:3b:1e:3b:a1:25:79:b7:e9:d8:bf:49:
bd:1b:33:25:ef:a3:66:b2:e4:dc:7b:52:c6:d1:db:2d:e6:f5:
dc:5a:88:90:f9:17:f3:d7:42:2a:7f:9f:bf:4d:e8:d5:fb:88:
47:be:2f:1f:09:1e:a1:c9:df:e9:a5:5b:7e:ab:dd:36:a1:ae:
e0:18:af:e2:cc:b0:6d:80:b2:dd:13:fd:19:b7:d0:0c:12:25:
f8:ee:1c:54:45:3a:fd:da:88:05:82:c4:0c:40:33:46:a0:cb:
e9:f0:8c:a8:3d:d4:b2:21:8d:fc:cc:3f:6d:dc:45:a7:44:80:
29:31:d5:df:14:33:af:a4:e9:4e:bc:3b:06:70:7e:04:34:e2:
97:96:70:96:29:31:e2:ee:51:f2:a3:f3:33:64:a3:93:34:8c:
eb:0f:3e:af:7f:3e:ea:e2:d1:70:a8:59:54:7a:56:fb:75:b7:
70:57:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org