Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: hSFNvDfc7RC5XwBRqjNeSz55zIxLm4/qzq2LzxKKCWA=
Subject key identifier: 92:9E:2F:53:F4:49:9A:00:CC:37:6A:0C:C5:DE:DB:D8:73:A7:C4:C4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7A34FD1E6405C2FC65C21CD5ACD388CF5BDC7CE1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:23 +0000
ROA not before: Mon 26 Sep 2022 10:55:23 +0000
ROA not after: Mon 25 Sep 2023 11:00:23 +0000
asID: 59282
IP address blocks: 2400:d680:3c8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:34:fd:1e:64:05:c2:fc:65:c2:1c:d5:ac:d3:88:cf:5b:dc:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:23 2022 GMT
Not After : Sep 25 11:00:23 2023 GMT
Subject: CN=929E2F53F4499A00CC376A0CC5DEDBD873A7C4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:c0:77:d0:fd:c8:9d:cd:8f:10:53:2e:04:
c5:19:b8:6d:bc:6a:2a:e1:99:67:d7:6f:fa:97:f8:
79:8c:23:45:ae:34:f1:ca:d1:f5:42:50:dc:58:2c:
67:a1:2a:00:dc:f5:27:85:99:49:0f:4a:05:45:e9:
04:24:38:52:04:4a:6f:7e:49:b5:6e:69:37:0d:96:
42:f6:21:b2:75:00:d4:0f:0c:1a:d3:9c:96:73:b1:
9c:b8:75:22:73:7b:e6:76:f6:9e:28:5b:0d:44:a2:
8e:5e:11:a4:b6:01:44:89:41:75:b0:b5:1d:fb:fc:
c6:8c:ec:a6:09:83:83:8a:d0:69:b4:39:c6:b6:fd:
88:aa:ee:70:f8:11:c4:35:51:19:1c:3d:ce:ce:5b:
44:56:62:8c:2a:27:c0:c3:52:03:90:61:90:c8:13:
93:81:14:2a:42:e3:29:41:4a:59:94:86:8d:d9:8a:
db:f3:11:ee:0a:65:ee:8d:61:06:bf:0c:22:65:45:
20:d9:34:44:d9:92:2c:d9:7a:26:a0:e8:aa:9e:b7:
4d:6f:8e:72:04:56:c3:14:c1:56:af:e5:1d:d0:b2:
e6:8a:c6:33:59:00:0f:6b:79:b7:df:e2:95:dc:01:
66:9a:72:50:46:32:31:37:59:c9:65:a7:9b:96:c9:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:2F:53:F4:49:9A:00:CC:37:6A:0C:C5:DE:DB:D8:73:A7:C4:C4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c8::/48
Signature Algorithm: sha256WithRSAEncryption
55:4e:b1:e1:7f:f9:b6:ac:7b:5f:ec:ee:67:10:34:6a:e7:8d:
4e:8e:ee:d5:fc:94:f5:c6:f6:5d:6e:4d:bc:c8:4c:f9:7d:c8:
22:f4:ca:f6:d5:6b:a4:a4:fd:ea:0c:cd:b5:ef:d4:fb:b0:83:
21:a9:fb:43:6b:cc:b7:5f:84:0d:99:20:48:9f:2c:5c:e0:7e:
26:ae:06:ef:36:60:fa:71:2f:12:c8:20:89:e0:df:e1:d4:48:
c1:6d:c5:37:88:83:5b:9a:71:23:77:43:ca:7e:f8:e6:e2:61:
b0:13:cc:43:7d:11:42:90:7e:4b:3c:10:7a:7b:45:bc:4d:0d:
61:af:0b:cf:1d:ea:98:38:a4:b5:9d:cc:0a:aa:94:e0:05:57:
ef:57:04:aa:57:6b:57:e4:17:9a:8b:8c:b1:74:40:bb:46:f5:
36:83:b4:36:30:05:74:8a:66:cc:b4:19:5a:f2:41:91:c7:d0:
6e:ea:5b:9e:b9:b3:16:fd:d3:df:e7:21:9b:f9:c6:d6:0f:b6:
4b:74:21:62:ea:a1:28:97:52:22:d2:60:be:5f:af:87:04:c5:
90:57:3f:58:c2:7d:5b:25:7c:a2:77:a9:39:88:d2:ca:42:f8:
a3:f3:8d:96:d5:f1:53:f7:41:08:63:fc:4a:35:e8:9d:4b:9c:
59:9b:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org