Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3362353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: w/ALDlfQFCSUVnqptKWEHtrwKX46RVtBNVwotOP8BGg=
Subject key identifier: C2:CB:E8:D1:55:C7:94:47:42:8F:7C:F8:BE:71:30:41:6F:65:8C:8C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 01956FF2E6A4ECC4DAD084B444E583C8AD5BE1CE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:44 +0000
ROA not before: Mon 26 Sep 2022 10:55:44 +0000
ROA not after: Mon 25 Sep 2023 11:00:44 +0000
asID: 59282
IP address blocks: 2400:d680:3b5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:f2:e6:a4:ec:c4:da:d0:84:b4:44:e5:83:c8:ad:5b:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:44 2022 GMT
Not After : Sep 25 11:00:44 2023 GMT
Subject: CN=C2CBE8D155C79447428F7CF8BE7130416F658C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:54:ba:dc:96:06:92:41:04:5b:8c:02:06:
c1:b2:2c:e4:52:4a:d4:28:74:b1:5f:ac:f5:46:6e:
64:4a:d9:bc:db:30:3e:d6:19:93:88:79:4e:5c:a7:
cb:0d:91:ef:15:03:b4:48:df:53:dc:1a:15:e0:1a:
03:fc:89:ab:88:dd:2c:ca:ed:88:bd:8b:2e:bf:d5:
c4:99:36:5f:3a:b3:12:e2:c2:0f:7f:f3:e3:ca:90:
cc:d4:27:76:21:eb:b2:4c:81:64:32:fb:d0:d8:cb:
70:ff:d4:e3:54:88:27:ca:76:62:63:13:d2:41:bb:
58:f0:e5:22:e0:6b:cc:c4:bc:c4:ce:b4:d1:ce:9f:
d2:34:ea:63:24:3f:50:02:c4:e7:e8:f4:b3:00:4d:
69:ba:53:31:34:9f:fa:49:a4:04:e5:a2:0b:70:63:
88:1a:a3:20:32:b8:fa:7f:b4:e5:9d:53:47:dc:73:
aa:e6:ff:22:5e:44:05:74:de:8a:7a:bc:44:a5:9a:
73:ff:b7:33:2c:a0:3e:a0:64:e4:b2:7f:ec:b8:38:
bc:95:89:1b:b0:0f:1c:9c:4b:76:90:0a:26:a0:9e:
16:1b:dd:4c:86:67:e9:d0:f1:15:fb:e9:9b:f8:25:
25:bb:82:03:14:3f:90:16:c1:dd:27:ed:9b:1c:ed:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:E8:D1:55:C7:94:47:42:8F:7C:F8:BE:71:30:41:6F:65:8C:8C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3b5::/48
Signature Algorithm: sha256WithRSAEncryption
3d:51:84:0d:5c:be:10:10:10:49:da:da:3c:65:75:34:ca:b1:
99:df:0e:2f:ca:03:6d:9e:b1:25:07:4e:9b:91:b3:79:be:94:
e6:68:9d:05:1f:9b:3c:89:7f:dc:b1:0b:10:e7:dd:38:e0:55:
f1:76:f1:ff:76:8d:53:55:8b:da:99:5a:15:19:b6:e4:ef:7d:
96:73:5d:b4:b1:2a:ab:6d:2c:3d:d4:20:4d:eb:40:bb:85:4a:
08:4e:4b:90:9d:6c:28:42:e0:06:46:b4:4f:94:46:94:38:28:
35:8f:e7:20:a2:08:9d:59:54:31:6c:84:cf:2c:a4:49:61:b5:
4e:16:d8:2e:7d:ed:3a:ab:41:54:3c:c2:e7:4b:2d:21:dd:3b:
9e:9e:2c:9e:25:4c:0f:81:4d:a2:dc:26:72:58:ec:6a:0d:db:
a6:72:79:74:84:1c:03:5f:eb:54:bb:1e:e8:9d:18:26:2b:b5:
0b:34:1f:f4:98:6b:ea:a5:f8:29:17:3d:68:b4:7e:da:f2:46:
6e:47:89:25:17:7b:f6:08:07:34:a0:14:d7:63:71:47:62:b8:
5d:74:8e:08:47:ef:90:66:36:91:7c:42:2b:a1:75:ca:47:74:
27:01:a2:a8:20:72:e6:c9:63:9b:3d:f8:18:0c:c5:30:8d:17:
c5:cb:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org