Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: IZrg7/4H4Q2tHqbgEWXe+BZ4vGfXkXupjL6KYfS0tdY=
Subject key identifier: 0C:47:F2:4F:9F:99:19:24:F4:E2:3B:EA:4B:F7:65:D7:CF:86:93:FD
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3BEB74EFFF7E93FB68BE96F445FB1EC95791D48F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:30 +0000
ROA not before: Mon 26 Sep 2022 10:55:30 +0000
ROA not after: Mon 25 Sep 2023 11:00:30 +0000
asID: 59282
IP address blocks: 2400:d680:3c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:eb:74:ef:ff:7e:93:fb:68:be:96:f4:45:fb:1e:c9:57:91:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:30 2022 GMT
Not After : Sep 25 11:00:30 2023 GMT
Subject: CN=0C47F24F9F991924F4E23BEA4BF765D7CF8693FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:95:76:8e:9c:0e:31:78:64:91:54:ab:6d:
97:0e:5c:20:42:c7:44:64:26:bb:fa:f8:7b:99:d8:
e9:61:14:4f:d5:61:90:e0:c5:cc:73:37:c2:ef:4d:
53:dc:67:69:39:41:72:14:2e:b9:49:62:ff:ac:19:
1c:cb:28:16:df:a2:5d:98:41:79:cc:7a:6d:1f:ee:
c9:bd:e5:f0:e4:d2:d0:c6:61:56:af:b1:b1:db:61:
d4:25:af:89:20:dc:98:57:35:fe:09:69:d4:50:f6:
63:84:95:3a:94:be:27:bb:31:1f:c6:18:0f:b4:5b:
1d:28:4c:21:97:8c:20:a8:ac:99:31:de:25:19:50:
e5:43:27:5c:b7:ed:59:4e:33:52:fb:59:1e:e2:c2:
79:1f:f0:7e:d6:dd:ef:bd:9c:3d:3b:6b:d5:2c:26:
57:3b:b8:01:27:52:53:55:79:a8:d3:64:7b:d5:f0:
f5:51:cd:0b:c5:2a:af:d8:89:f9:26:0a:f9:2a:ce:
56:fd:20:85:81:42:a4:55:a3:2c:34:9b:fa:84:53:
a7:0f:f1:c0:13:13:80:30:50:9c:9b:eb:8e:0d:2e:
ec:cd:c7:17:28:be:36:e7:61:c2:f8:9c:f7:a2:5c:
bc:4f:1f:c4:0f:4c:97:00:99:14:96:22:c3:fb:c1:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:F2:4F:9F:99:19:24:F4:E2:3B:EA:4B:F7:65:D7:CF:86:93:FD
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c2::/48
Signature Algorithm: sha256WithRSAEncryption
d4:80:96:40:9c:e6:92:af:c9:42:55:54:dc:2b:57:e0:8a:e9:
0b:fd:9f:81:e9:2d:95:cb:95:50:a3:ae:e5:7b:e4:4a:3d:d0:
99:cf:ff:80:44:4c:fe:2e:d4:46:b3:b0:d7:bd:75:58:be:ac:
cb:fc:ef:6e:f7:73:43:bc:2d:d7:63:1a:07:c6:47:77:7a:01:
6e:89:a2:3b:20:fa:09:b7:a8:7d:22:0f:66:2b:df:44:46:ea:
e9:ef:30:00:09:92:6a:0f:4e:22:54:fb:02:b6:56:44:4d:c5:
50:5c:19:ec:e5:41:e8:67:88:d4:01:9e:e2:7d:b1:79:c7:e4:
18:18:35:36:b0:f6:df:6b:f7:8e:8d:2c:f1:86:f1:ae:43:e3:
fa:51:bc:99:b1:69:2c:11:86:09:72:74:3d:90:68:b8:c7:51:
a3:b4:a6:eb:6a:2a:a7:d0:f7:b8:3d:fa:05:a8:d7:4d:33:e7:
23:07:51:8c:a9:18:ab:5b:34:62:04:41:a9:50:18:75:cf:50:
4d:cd:53:64:cd:6c:8d:33:b0:24:c1:14:5a:de:4b:b0:99:c2:
27:b0:99:e5:ca:02:43:05:40:46:b3:32:3a:5f:cc:be:e2:c4:
63:47:33:7e:e8:02:66:da:a7:64:61:9b:41:9e:46:b0:36:00:
6c:bd:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org