Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a33643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /nw5n87ew5ijCrZVZmDux00Amsmg1lt1nvXFJ5M1o9E=
Subject key identifier: 9C:58:99:FB:FE:1F:41:AA:91:CD:27:8E:4D:7B:25:25:0C:FF:F5:37
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6F2B41DD8DAA5B161759D6881D3F5937F8FBF6C9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:31 +0000
ROA not before: Mon 26 Sep 2022 07:56:31 +0000
ROA not after: Mon 25 Sep 2023 08:01:31 +0000
asID: 59282
IP address blocks: 2400:d680:3d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2b:41:dd:8d:aa:5b:16:17:59:d6:88:1d:3f:59:37:f8:fb:f6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:31 2022 GMT
Not After : Sep 25 08:01:31 2023 GMT
Subject: CN=9C5899FBFE1F41AA91CD278E4D7B25250CFFF537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:87:09:a3:7d:f6:dc:2d:aa:c0:83:db:01:
ef:d6:af:bc:16:66:4b:1a:f1:20:ac:95:21:f1:0b:
00:49:dc:51:3c:af:7c:ab:13:df:a1:e5:66:67:3b:
40:19:e2:00:b4:d2:fa:eb:f9:0a:dc:70:4e:af:e8:
85:fd:a3:a1:7f:7a:bc:2c:17:07:39:be:d0:ba:64:
6a:ee:ce:85:88:5c:0b:fa:7f:bd:aa:67:03:5e:12:
54:5b:98:9d:46:58:09:f9:9f:3f:e0:35:6a:de:b7:
ef:20:73:6f:b0:f1:77:d5:19:b0:5f:59:b3:72:e1:
48:4f:66:f6:66:c0:ed:2b:ce:d2:80:6a:2a:ce:02:
d5:70:2d:8c:01:19:8e:e4:c1:57:d9:de:ab:76:29:
e2:aa:b8:03:d9:32:75:e1:c1:3b:e2:d1:53:58:6d:
64:cf:ca:71:12:40:ff:0d:e4:e0:d8:85:02:1d:3b:
29:5c:f4:7d:26:fa:cc:ca:5e:16:88:ad:65:9c:b8:
f5:d6:cb:d9:48:7f:f5:8e:de:24:4b:1c:a3:11:22:
07:37:37:53:dc:24:cb:7c:a1:4c:54:69:13:f5:c5:
5b:2e:ac:7c:5b:c7:b5:0e:d2:c8:04:4e:5e:31:15:
f6:28:0c:b8:5e:9a:f1:e1:7f:5e:5e:c1:4e:dd:ac:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:99:FB:FE:1F:41:AA:91:CD:27:8E:4D:7B:25:25:0C:FF:F5:37
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3d::/48
Signature Algorithm: sha256WithRSAEncryption
22:6e:d2:63:ea:28:d7:78:18:57:92:75:60:4c:53:d5:6a:83:
a4:e5:6f:70:e9:ce:25:d8:09:52:2f:2c:8e:6e:a4:e7:1e:b1:
94:ca:af:96:89:7e:41:c1:60:b5:87:17:3e:b6:cf:4f:92:68:
89:52:47:c7:86:98:60:3f:16:91:40:ba:0b:c9:2c:d9:38:a3:
01:3d:d0:46:c7:84:71:e3:07:31:c2:b2:bd:f4:bd:a4:3d:13:
88:16:47:41:1e:8c:c1:b9:14:9f:6d:dd:66:1d:71:68:5f:1b:
3a:9c:e7:39:6b:46:08:2a:6b:c3:41:12:0a:6a:40:a7:19:fd:
f4:17:d1:cd:fe:7b:6f:56:f9:47:6a:c2:b3:9f:4b:0e:c9:5d:
66:c2:ff:35:6e:52:32:d4:1c:59:ab:60:47:09:71:34:80:46:
12:41:5b:b4:09:27:b9:92:77:35:26:89:8e:c1:bb:bf:45:12:
a5:23:6d:e1:1e:b0:0e:02:93:ee:49:5f:d0:f3:fe:38:7c:97:
7d:f8:8c:03:24:6b:83:aa:4d:bd:f6:b2:0a:75:da:8a:92:1d:
44:b1:d6:43:cb:b0:6c:bf:b3:9c:a7:36:0c:80:a2:a9:ad:3c:
6a:cc:91:e2:ee:4b:6c:5e:1e:26:b3:6a:8d:36:61:63:30:ed:
35:5e:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org