Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3365613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 4xmp/NMxQwU8NRHX01Hr3Us/JdyasIWzS7yPeyWEax8=
Subject key identifier: 09:75:84:B3:D6:BF:61:D3:7B:FA:3D:39:8B:FE:88:8C:23:94:F9:AA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 73D51C038163888866CEBFBD2C7AE67888068254
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:47 +0000
ROA not before: Mon 26 Sep 2022 10:55:47 +0000
ROA not after: Mon 25 Sep 2023 11:00:47 +0000
asID: 59282
IP address blocks: 2400:d680:3ea::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d5:1c:03:81:63:88:88:66:ce:bf:bd:2c:7a:e6:78:88:06:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:47 2022 GMT
Not After : Sep 25 11:00:47 2023 GMT
Subject: CN=097584B3D6BF61D37BFA3D398BFE888C2394F9AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:a6:df:8c:e4:60:34:ce:9d:c5:e7:47:f5:
3f:b6:3a:c2:34:36:25:86:81:05:50:12:06:63:6a:
6f:ae:e4:f8:c6:74:2b:7f:b3:24:ed:0b:60:02:2a:
d4:54:59:53:43:d4:69:9e:f6:6b:45:48:e7:be:f7:
a8:14:d3:a8:94:d7:62:3c:1b:cd:74:a1:b5:1d:29:
af:c8:07:e1:c8:48:57:1f:b9:21:a6:56:c1:53:3b:
83:9b:b5:2a:fe:07:e2:0e:29:a9:22:9d:fa:a5:0a:
97:5c:0e:fb:89:06:0a:13:c4:01:74:38:eb:eb:e0:
aa:e7:12:14:8e:33:7d:0e:99:39:c2:ce:c4:d1:b4:
35:2a:a9:e9:af:02:7a:20:a4:19:73:38:76:85:d4:
7e:0d:86:c3:df:d5:4b:a0:61:20:72:0d:78:03:b5:
6b:05:51:e8:5f:72:56:74:03:c9:33:d0:35:ab:77:
b0:45:f7:f8:d4:f1:95:eb:41:25:97:34:2c:4a:09:
4e:47:a6:4a:84:d0:46:16:20:42:01:c9:54:92:89:
90:46:f9:56:0d:11:e9:3b:19:24:c1:23:5e:f7:ba:
19:fb:8e:85:c8:ff:76:7b:55:bc:01:af:74:a3:d9:
90:68:6d:95:e1:dc:6d:7a:49:7a:2c:b3:0e:b3:c4:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:84:B3:D6:BF:61:D3:7B:FA:3D:39:8B:FE:88:8C:23:94:F9:AA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ea::/48
Signature Algorithm: sha256WithRSAEncryption
2a:cf:db:ee:fd:2c:f7:4f:85:07:5c:e1:d2:ab:7b:8d:83:6a:
e2:46:8b:fb:4c:ad:98:0c:88:ee:b0:06:0b:a6:8a:45:a1:ad:
c1:2f:33:0e:36:0b:92:81:4a:58:0d:49:ec:ca:b7:e6:af:5f:
1c:a0:52:1c:12:0a:c7:c4:dd:b1:46:4e:33:81:d5:ef:4d:d1:
eb:7a:b4:da:a2:aa:c4:8e:75:23:92:5b:6a:6d:44:26:bc:26:
bc:58:7d:4d:81:e3:ba:51:77:20:80:4b:75:54:c0:f8:74:f8:
44:b2:da:6f:0f:6c:20:09:74:e5:ad:40:f2:54:1e:ba:60:d2:
d5:63:66:cb:7b:63:d0:49:4b:19:76:fb:29:13:bb:8f:87:ca:
fe:e8:cf:e6:fa:b0:d6:6d:e2:ea:b8:fb:cd:66:dc:ad:d8:79:
14:49:40:f4:53:c1:4b:78:d7:8d:ff:5c:e8:14:ac:f3:9f:29:
77:45:c6:f3:21:3a:85:87:c3:dc:bf:e6:c0:5b:aa:93:8a:7b:
5d:d1:11:f2:bc:20:98:7f:6d:ed:46:1c:46:d8:cc:25:1a:e6:
7a:af:bc:b2:0f:d5:35:3b:09:b3:98:3b:ab:fe:26:b9:1e:82:
2a:1b:5e:43:b7:30:87:87:e6:ba:f4:e3:d8:ce:30:c3:8f:17:
e5:32:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org