Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3362303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YXz0cD6jSe4A71i8jIX8ILSOtqHv+593H/M5rc1E7xE=
Subject key identifier: 3E:56:80:0C:0F:FC:8D:A1:75:16:8A:00:02:09:60:20:F9:0F:F6:A1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6514421199407ED6A8B2C50424F66EA3B328D2AC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:41 +0000
ROA not before: Mon 26 Sep 2022 10:55:41 +0000
ROA not after: Mon 25 Sep 2023 11:00:41 +0000
asID: 59282
IP address blocks: 2400:d680:3b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:14:42:11:99:40:7e:d6:a8:b2:c5:04:24:f6:6e:a3:b3:28:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:41 2022 GMT
Not After : Sep 25 11:00:41 2023 GMT
Subject: CN=3E56800C0FFC8DA175168A0002096020F90FF6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:30:c0:cf:5a:94:57:ff:79:e0:cc:9e:63:
41:dc:f9:d1:d7:db:95:f5:9a:b7:d7:35:99:56:dd:
3a:68:78:e1:21:f7:a3:6a:f5:3d:ea:6f:40:81:3c:
ba:2e:b0:fd:f4:cb:b6:a6:bc:9e:50:e9:d7:88:1f:
b2:08:13:a0:ba:d8:18:91:25:fd:35:27:33:d0:68:
3a:45:6f:0f:e9:17:e8:f0:dc:e1:db:6f:d0:96:57:
e7:58:e8:35:31:22:24:7b:af:19:ac:ca:ac:c7:3b:
3f:42:82:64:26:d7:1f:75:42:54:e7:cb:d4:95:34:
c3:fd:98:cd:59:8e:65:dc:93:6f:58:0c:ad:d3:bb:
a0:78:ee:44:6a:21:8a:a3:e9:63:36:46:21:fd:3f:
25:3f:bb:da:fa:3f:cc:13:f0:7c:e7:85:9e:8f:5b:
c4:8a:d4:3c:b0:1a:5f:ee:ca:3e:71:f6:92:32:fa:
c5:77:68:21:9a:2c:41:8f:d0:57:38:3e:d8:b2:43:
04:f0:6a:3b:dc:0e:c5:b4:96:90:ee:3d:6b:fe:05:
7a:df:3a:49:eb:39:b5:71:52:d8:d3:bd:76:3c:55:
90:df:23:3c:48:49:fd:f0:87:1b:57:3a:9a:cf:b6:
bc:3a:d3:b0:02:04:df:95:79:9b:58:b4:39:09:3d:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:80:0C:0F:FC:8D:A1:75:16:8A:00:02:09:60:20:F9:0F:F6:A1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c3:91:05:09:30:fb:55:47:7b:d6:e2:9e:84:41:7b:c8:7a:
b2:c5:ac:75:8d:2f:ad:b8:d6:85:90:0e:c2:ce:5a:16:c7:5a:
66:f9:8b:47:35:d1:a5:ac:a2:aa:a6:03:7f:3e:6d:ab:59:9b:
91:3e:85:4d:51:8b:4e:8b:4f:96:d6:c0:f3:c2:84:51:93:ee:
00:1b:c2:51:f2:92:28:b4:fd:7a:fc:b8:db:69:97:5b:c4:5c:
4f:3f:1f:dc:b4:b3:af:19:a8:20:30:cd:35:29:e4:87:5b:d8:
3b:af:d5:22:d9:38:44:da:b4:48:5a:56:a2:7f:23:a7:a8:33:
3f:74:32:11:bd:6e:4f:d8:f9:5a:fb:f9:1e:87:be:b9:b1:bb:
70:8c:d6:bf:e0:fb:11:c6:92:6f:ef:de:81:1d:ee:65:e2:37:
ba:07:99:47:2c:ab:7b:6a:e9:12:65:de:be:51:c6:d8:2d:ad:
bc:e2:84:f2:3f:bb:5d:2f:67:ff:e5:3e:00:5b:f3:37:5d:38:
5f:8f:72:fe:a7:94:57:bb:d9:47:dc:cb:b5:9a:78:e8:d9:d3:
d2:01:97:ad:dd:71:4f:e5:e1:32:c9:64:40:06:3f:40:6b:c2:
84:66:3c:b7:18:ef:2e:e2:3c:8f:ea:7e:46:c8:e4:b4:23:fd:
5d:b8:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org