Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3365323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: o7qofwJdDq/fFa67/8Qn76ay46sHXC31i0IR2DALies=
Subject key identifier: 20:95:BD:40:18:FE:A9:53:0C:FF:C9:CF:A5:FB:99:DB:18:5E:1F:D8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78D8BC43FA7167D2D58EA095CF421C5B9A8E0EE3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:49 +0000
ROA not before: Mon 26 Sep 2022 10:55:49 +0000
ROA not after: Mon 25 Sep 2023 11:00:49 +0000
asID: 59282
IP address blocks: 2400:d680:3e2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d8:bc:43:fa:71:67:d2:d5:8e:a0:95:cf:42:1c:5b:9a:8e:0e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:49 2022 GMT
Not After : Sep 25 11:00:49 2023 GMT
Subject: CN=2095BD4018FEA9530CFFC9CFA5FB99DB185E1FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:e7:b5:7c:a7:7a:8f:a3:87:24:c4:e2:47:
a8:a9:e2:93:20:d3:81:4b:9e:83:43:5d:d9:7a:33:
df:4b:2c:b6:5a:89:34:59:db:d6:3f:cb:0b:be:6c:
7f:d9:f3:7e:53:88:44:df:ed:00:53:25:7a:8c:4e:
e1:a5:06:93:3b:60:01:dd:dd:2e:d6:3b:fd:50:8c:
4b:5f:a2:da:3f:74:96:45:52:55:31:26:48:62:bd:
ac:99:0c:40:e8:c5:77:0f:00:72:f7:b7:a8:7d:98:
cd:dc:16:c9:b1:5b:e5:01:dc:f0:51:e6:d1:f9:88:
43:2b:70:7d:56:68:1e:7e:0f:7f:d3:da:5e:9f:96:
5e:1b:d0:14:22:8a:60:5c:12:4a:ce:c6:fb:c9:5f:
ae:9c:2c:9f:58:55:14:6b:d5:77:36:7f:fd:a2:d2:
8b:c7:f6:89:0d:80:3a:d5:52:92:a7:3d:70:e4:73:
82:6b:58:e2:e3:19:4d:77:a0:c3:dc:d9:bf:65:41:
74:96:f6:dd:e3:6f:e5:9d:f7:74:1e:28:73:b7:5a:
8c:c5:bd:f4:c0:cd:3c:d9:36:38:75:17:68:18:88:
56:86:25:e1:8e:56:38:97:d5:61:3f:dc:44:25:91:
5b:64:ee:37:53:05:4a:da:55:4a:7a:0a:00:ca:df:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:BD:40:18:FE:A9:53:0C:FF:C9:CF:A5:FB:99:DB:18:5E:1F:D8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3e2::/48
Signature Algorithm: sha256WithRSAEncryption
88:82:16:21:89:a4:52:0d:f1:d7:99:b0:31:44:da:73:47:35:
81:e9:17:3e:85:76:18:b0:b6:1f:d9:96:f3:ab:69:12:4c:d1:
ab:dc:c5:63:bb:b5:7b:3c:ca:8f:8a:c2:9c:9f:80:bd:91:89:
91:c7:d5:08:1b:b2:41:71:4a:b3:62:d8:e3:9a:f0:0b:6b:fe:
c8:7c:2a:72:5d:83:bc:40:4f:d2:d4:ee:9b:9c:51:c1:38:b0:
8b:36:73:4c:d4:72:24:93:b6:d5:c0:68:f1:71:e3:80:11:61:
47:a1:f3:ac:bf:ca:f5:91:d2:8c:d8:94:fb:67:23:ec:78:f6:
3f:53:51:ef:4f:5b:68:25:ac:fa:11:3b:6a:e0:78:4f:3e:e5:
bb:78:db:4d:0f:08:6e:cd:ca:8c:22:99:68:9f:ef:8f:bc:3c:
07:21:cc:62:3f:da:03:bd:5a:94:6b:40:89:f1:d1:ae:5c:e3:
23:41:93:6b:be:45:4e:a4:7e:91:00:0a:46:7e:b2:eb:69:eb:
cf:e5:f7:40:c3:9f:84:bb:99:3b:7f:72:38:26:20:a1:6a:24:
0d:0d:71:ea:79:c0:16:a8:28:fe:25:df:fa:7d:c4:66:46:ab:
8b:d4:64:c1:74:a5:28:2c:f7:c9:17:68:3a:46:f5:75:a7:4b:
2d:cc:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org