Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3364313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OjEgT2du7ObEv0xjkMhUL1ZxS+XJ56CmGpPIiZtCQGs=
Subject key identifier: 6C:39:72:C5:6E:8A:42:12:D4:E3:D9:18:B9:C5:24:CB:B6:2C:1C:74
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 181EB978D293B08B8ACDB21341CC2DDC2C9009E6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:31 +0000
ROA not before: Mon 26 Sep 2022 10:55:31 +0000
ROA not after: Mon 25 Sep 2023 11:00:31 +0000
asID: 59282
IP address blocks: 2400:d680:3d1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1e:b9:78:d2:93:b0:8b:8a:cd:b2:13:41:cc:2d:dc:2c:90:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:31 2022 GMT
Not After : Sep 25 11:00:31 2023 GMT
Subject: CN=6C3972C56E8A4212D4E3D918B9C524CBB62C1C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:97:93:62:79:dc:eb:4a:82:eb:b0:92:8d:
c0:92:94:85:ab:15:d9:f3:b8:00:a4:42:b1:50:bf:
48:5c:0a:61:4a:7f:f2:64:07:ae:30:c6:b4:24:7b:
b1:f8:3c:e7:b8:ef:74:fd:52:1e:fc:0b:ca:c8:e8:
16:ac:58:13:c6:6a:55:88:f0:49:8c:18:1b:43:20:
ba:22:02:df:29:06:a1:9e:aa:54:f1:63:0e:5e:dd:
3b:d7:d2:d1:a0:a2:a5:34:c5:c5:cf:94:b6:a9:d5:
6b:00:65:1d:45:42:2c:cf:5b:c6:6d:b8:24:72:6a:
39:65:42:bb:c7:8d:8a:b8:6b:b9:87:d9:dc:af:83:
09:79:21:ee:40:96:6b:49:50:12:a9:de:5c:fd:47:
40:cf:7d:f2:2a:2d:17:36:13:78:d4:88:a4:04:7b:
ee:2f:88:17:0b:b3:69:55:d5:6b:48:fc:a6:e1:b6:
0d:c5:d5:27:68:e2:b0:24:cd:59:cf:95:10:3c:20:
74:6f:80:17:81:69:1e:4f:d6:31:94:2b:06:21:ae:
c1:85:fb:19:68:4e:67:87:b5:0a:e8:4c:d7:99:2c:
e5:2a:97:58:4f:46:b5:fb:d5:8a:7c:69:53:b4:6e:
5f:1b:ea:a0:98:39:61:2e:5a:57:aa:b0:94:b1:0c:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:72:C5:6E:8A:42:12:D4:E3:D9:18:B9:C5:24:CB:B6:2C:1C:74
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3d1::/48
Signature Algorithm: sha256WithRSAEncryption
50:b0:70:ba:8a:4b:e7:7e:22:b4:5c:74:0a:3d:10:48:4f:90:
d3:25:74:f7:7d:ca:6d:ca:dc:29:21:77:84:16:e7:dc:d2:86:
f9:81:67:5a:8b:0e:30:c3:16:86:c8:05:49:a8:d4:07:0e:2b:
93:d4:8e:85:cb:7e:c1:a5:7c:57:0a:b2:61:b3:cf:3f:43:d8:
78:9b:49:e8:3b:58:0f:e8:2a:43:5f:e8:b7:0d:08:e9:b8:80:
b1:41:89:73:af:54:bf:b7:bc:cf:db:25:38:f0:ee:6c:70:f8:
e5:93:bc:5f:ac:cd:09:65:c0:8c:a6:82:27:b1:fc:20:4d:51:
61:65:8a:0c:7d:45:60:36:70:9c:ea:b9:61:ed:e3:ef:7a:90:
fa:26:8a:15:66:49:54:94:f9:82:14:87:41:3d:4b:ae:ee:cd:
9b:aa:fa:2f:46:1e:51:8c:56:c2:ea:56:cf:f8:32:aa:51:8e:
06:b8:a3:a5:8f:ab:48:c1:c4:c4:03:6e:cb:5a:d1:69:d5:e5:
3f:36:c4:da:b8:da:b2:7f:0e:89:02:1a:f5:b4:93:2c:90:13:
a4:b1:3a:c7:69:5b:5c:39:c3:ed:05:de:99:0c:2b:10:61:a8:
93:44:f7:40:50:f7:0d:15:85:62:31:29:f5:2b:94:75:1f:23:
ea:04:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org