Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3364383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: PE7AD4ot4os/aUcxJQYsakeWWuZ9wj939vrIBqglbgM=
Subject key identifier: 62:DE:81:6D:C7:0A:86:69:C2:2E:D9:48:93:7F:3B:63:7A:00:C0:DD
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 72FCE1BFD90DB7469F7A56C70A0766C4B7D17BE6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:45 +0000
ROA not before: Mon 26 Sep 2022 10:55:45 +0000
ROA not after: Mon 25 Sep 2023 11:00:45 +0000
asID: 59282
IP address blocks: 2400:d680:3d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fc:e1:bf:d9:0d:b7:46:9f:7a:56:c7:0a:07:66:c4:b7:d1:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:45 2022 GMT
Not After : Sep 25 11:00:45 2023 GMT
Subject: CN=62DE816DC70A8669C22ED948937F3B637A00C0DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:3e:e2:0e:af:e2:4f:c7:4e:05:82:df:69:
85:99:e0:1a:61:3e:a9:a0:21:2c:dd:f3:85:ab:d4:
1f:53:96:a2:bd:44:f2:c9:e6:52:53:13:dd:69:77:
9d:32:f0:2e:1f:86:de:12:d6:03:b8:13:2a:4a:17:
4d:50:52:af:f3:d4:1e:00:7b:e7:b2:b0:5a:10:2e:
f7:91:bc:df:dc:8d:b7:cc:71:39:0f:5b:ce:65:cb:
36:30:4d:f7:5a:84:4e:48:b1:a0:b8:a3:fe:22:0f:
00:5f:33:30:53:3e:cd:fc:be:c6:9d:2b:cc:27:a5:
d7:4f:70:14:62:83:ed:9b:dd:6c:82:00:09:ba:80:
0b:19:3b:3b:63:71:d5:47:c2:96:df:2b:e2:d7:b3:
fe:6f:8f:c4:31:42:4f:ea:61:43:cf:cd:86:78:19:
58:8f:45:d1:94:6d:e5:bc:21:71:c1:25:1f:65:74:
71:9a:63:a8:91:53:a5:83:15:b4:5b:f3:79:43:92:
6e:b5:29:b3:36:72:74:99:f7:13:62:47:67:5b:7a:
71:bb:bc:ae:2d:6f:f9:45:43:02:74:90:53:43:fa:
e2:79:ba:8b:bc:bd:9f:f7:bb:13:19:f3:1b:b4:06:
98:75:1c:74:38:1d:ec:87:91:75:8b:8a:01:36:b7:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:81:6D:C7:0A:86:69:C2:2E:D9:48:93:7F:3B:63:7A:00:C0:DD
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3d8::/48
Signature Algorithm: sha256WithRSAEncryption
4a:29:d9:1b:3d:2b:f2:09:ff:5d:b5:a6:d6:0f:62:35:11:e0:
7f:1f:92:f9:7a:d0:a4:18:4b:23:ee:87:87:3b:63:23:49:20:
e1:80:bc:58:18:4b:aa:09:9e:71:a5:71:d1:af:ce:ce:d5:d0:
a4:21:f9:66:f4:c2:5d:3f:9b:4e:dd:ee:70:36:60:a7:08:cf:
88:71:6e:95:cf:a6:d6:c4:88:80:d9:fe:66:f6:96:61:5f:f8:
b7:bd:01:44:f7:73:b1:4f:0d:87:20:ce:6b:a8:82:78:07:c1:
4d:ba:64:6e:c8:b3:ad:e1:b6:63:a5:9c:c6:a0:71:86:00:19:
e5:e0:a5:83:52:08:b8:6c:05:3e:3a:e7:97:bf:64:91:b7:23:
cf:86:f8:e3:94:c6:8c:a1:4c:23:f2:f7:94:32:96:3e:ab:c1:
14:f1:34:5e:3c:89:47:4e:e8:3c:90:2e:fe:73:3c:26:30:e8:
36:76:b4:aa:b4:a9:df:9c:b0:a1:82:26:50:77:d6:00:ac:bb:
05:76:f6:ce:d7:e8:2a:31:d0:0b:5e:78:3c:7b:0e:0c:32:07:
15:bc:27:68:e7:63:fb:0e:4a:c3:80:7e:04:f1:5f:5c:de:f8:
85:a7:0b:d7:ad:9d:3a:f6:c8:af:19:9c:b1:1a:d6:97:42:1c:
79:9b:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org