Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3365303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 9GDAAXgxyMisbtYJHpzCCvR1hUploIFqFdCeyWaWg2A=
Subject key identifier: AE:BD:95:01:58:61:04:71:61:CF:11:16:5B:1B:40:2C:47:CA:19:0D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BD0DE35E7C350F2117D6E0F95C20C7294F9E670
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:28 +0000
ROA not before: Mon 26 Sep 2022 10:55:28 +0000
ROA not after: Mon 25 Sep 2023 11:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:3e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d0:de:35:e7:c3:50:f2:11:7d:6e:0f:95:c2:0c:72:94:f9:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:28 2022 GMT
Not After : Sep 25 11:00:28 2023 GMT
Subject: CN=AEBD95015861047161CF11165B1B402C47CA190D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:be:fa:9a:d0:36:f6:eb:2d:d3:f3:be:28:
83:9a:d0:5f:c0:95:af:c1:ac:e6:f7:50:2d:cf:5f:
51:8a:5e:97:7e:31:aa:4e:0c:e6:38:82:0b:a7:f7:
0b:70:95:cb:7f:31:d1:9a:52:57:a7:c9:5f:bf:17:
cd:84:e1:47:ee:e6:9b:23:19:72:ab:53:5c:5a:83:
d7:2b:8b:09:04:9b:01:ca:db:01:3a:47:97:a3:31:
05:56:14:00:25:50:c8:91:54:3f:85:ba:7f:09:01:
e3:98:56:2c:ec:02:f7:ed:31:76:f0:44:af:4b:57:
19:80:09:2b:44:e6:a7:50:9d:ae:4f:6a:04:97:8b:
ba:66:e1:11:31:e9:da:58:4f:97:a6:63:e3:29:09:
4c:d0:0e:b5:7c:e8:1e:74:99:46:32:62:2c:44:f6:
5d:f6:dd:d6:9f:eb:f2:5f:b0:85:56:a0:06:2c:dd:
7c:73:ec:d9:d5:c6:2d:4b:21:64:3e:73:4a:77:77:
cf:10:df:58:a7:ce:fc:71:08:1c:b1:35:07:7a:97:
72:a2:da:29:dc:ac:31:82:67:09:9f:68:60:7a:69:
07:1c:2b:ec:95:02:1e:39:95:e3:d0:9a:b1:2b:7e:
89:88:87:60:d2:65:45:45:22:3d:5c:c8:92:58:88:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:95:01:58:61:04:71:61:CF:11:16:5B:1B:40:2C:47:CA:19:0D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
03:2c:44:e0:14:96:2e:78:db:81:0e:e3:ed:0a:be:58:39:4f:
e0:16:56:2e:e8:68:ef:cb:6f:36:95:c2:fd:a4:4e:f3:a1:72:
39:12:a2:23:bf:aa:f2:1f:3c:cd:e5:06:cf:89:42:ff:a9:24:
33:2e:b1:bf:af:63:b2:d9:0e:eb:53:d6:f0:ea:38:94:18:de:
ab:db:ba:36:92:61:67:38:d5:c3:5e:4c:5b:1a:1c:fa:dd:7e:
f4:71:1c:5e:8e:98:24:a3:02:a3:27:21:c0:25:54:6d:22:f3:
6b:75:ca:89:83:f7:57:8a:27:62:ee:1f:c7:f1:9f:5f:ec:a1:
95:0d:2b:05:e4:71:7f:6a:ee:e2:1b:52:7c:9d:29:0c:23:85:
f7:d6:45:69:2c:11:4f:90:1d:94:bc:c2:07:25:f2:77:29:1d:
cf:c8:76:f4:0b:07:60:5b:f7:4c:29:5d:e3:02:a6:c3:b7:6d:
1f:60:3a:5a:24:68:88:be:13:f2:71:27:78:ec:aa:f2:ee:d0:
43:46:39:af:11:16:b9:39:aa:7c:35:e6:7f:cb:8b:e3:b4:c2:
13:7b:ab:0f:49:a1:b1:6d:ed:73:f9:29:c1:37:fd:8d:d0:11:
7e:f6:48:12:72:fe:f6:35:66:5d:1d:7a:bb:5e:00:eb:51:2c:
03:c1:ea:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org