Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FxTTkNMPd8BNfchnzR2MEmQR+ZDLat3kKCAzI4S5OQM=
Subject key identifier: 55:03:5C:29:1E:99:D6:C4:68:9B:2F:BA:BB:88:E1:CB:7C:F0:11:3B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4724A447F775004A5A421F8BE1B856A55F4C1464
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:40 +0000
ROA not before: Mon 26 Sep 2022 10:55:40 +0000
ROA not after: Mon 25 Sep 2023 11:00:40 +0000
asID: 59282
IP address blocks: 2400:d680:3c7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:24:a4:47:f7:75:00:4a:5a:42:1f:8b:e1:b8:56:a5:5f:4c:14:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:40 2022 GMT
Not After : Sep 25 11:00:40 2023 GMT
Subject: CN=55035C291E99D6C4689B2FBABB88E1CB7CF0113B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:d0:4d:a1:30:a3:2f:c2:75:98:a7:c3:c2:
87:17:78:d8:07:c0:7a:f6:d9:ad:94:5f:96:c4:5f:
d9:33:09:32:4f:29:d1:73:b6:4f:6e:12:ba:6e:0d:
cf:16:6a:66:70:38:43:c5:c3:56:38:e6:4a:e2:d3:
d9:ac:89:93:b6:f7:3d:58:a5:b8:fc:46:2e:fc:59:
31:bf:95:da:87:fa:7a:12:2c:bb:b2:39:0c:66:3b:
eb:bb:20:f6:5a:64:c9:d1:92:38:4b:67:63:57:fd:
62:bd:ea:ce:33:b1:63:44:0a:57:ba:8a:36:83:62:
f9:97:da:13:06:50:c2:61:bb:7c:5f:7d:9d:5b:7b:
ca:34:f9:85:e1:ea:6a:16:76:bb:fa:d2:f8:41:6e:
96:89:ea:f0:1b:69:55:ce:63:7b:3d:56:69:cf:db:
9d:bf:0e:ec:cd:97:e9:27:a2:fe:e2:4b:de:3f:c5:
cf:56:a6:d5:7a:bb:45:a7:19:a9:e5:51:ce:3a:8f:
04:1a:b8:50:53:1c:40:a6:a5:05:f4:e3:06:5a:9d:
e5:12:f0:78:62:5f:c8:3a:75:ff:ed:f4:10:0a:b5:
fd:6f:61:56:e4:70:02:4e:49:bc:c1:03:ec:df:51:
a3:01:bc:e2:79:b2:b4:96:19:02:c1:01:30:5c:47:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:5C:29:1E:99:D6:C4:68:9B:2F:BA:BB:88:E1:CB:7C:F0:11:3B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c7::/48
Signature Algorithm: sha256WithRSAEncryption
52:b4:a8:3c:e2:ec:66:89:cc:05:fb:48:31:6b:58:04:13:c9:
2a:40:98:f2:8a:4c:a0:4f:c0:48:61:16:41:f1:3e:27:9a:aa:
41:9a:36:b6:74:e5:56:ce:cf:d8:33:27:4e:99:93:18:cb:25:
4b:9e:97:28:33:a9:fd:67:a4:53:63:2b:28:f9:57:b1:81:3c:
d1:80:7f:26:a1:64:00:36:eb:e6:87:b0:79:d5:5d:c8:da:9c:
17:58:ef:9e:23:ff:29:c7:a4:08:4e:11:7f:eb:f8:12:3d:8a:
c5:46:23:15:c7:c3:83:b8:09:0c:1b:90:78:7d:cf:ef:a8:b9:
8f:f1:11:39:20:ef:b5:4c:f5:90:ac:2c:66:0c:6d:dc:f9:1d:
ba:72:dc:f8:36:bb:4f:4a:7b:4d:8d:41:7f:2e:ef:ab:c0:70:
4c:44:78:bf:d8:c1:7e:0a:9c:86:ef:b7:54:bd:85:a4:bb:0e:
e0:02:7a:7a:a1:f3:06:c9:59:93:26:18:5a:10:00:97:c8:86:
53:0d:a7:18:ba:f3:52:92:d0:18:ea:fa:52:6c:db:c4:00:d3:
ff:75:16:6b:22:a2:dc:e6:2c:42:cf:ac:98:71:09:23:8c:bc:
78:b1:2e:8b:d3:af:6f:a5:fe:cf:e0:57:4d:d3:67:17:5e:e2:
ac:b8:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org