Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3365653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 44LYjy5y5dXBEKdTI4w1cXVUG6JWGWbfhdXhh3/bXUI=
Subject key identifier: 96:16:AC:AA:51:3D:A6:4B:77:02:D0:CE:91:FA:53:9E:23:32:84:51
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 305F4CC6F3A2FD070C9CE2B46516FDB837FA9972
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 14:00:00 +0000
ROA not before: Mon 26 Sep 2022 13:55:00 +0000
ROA not after: Mon 25 Sep 2023 14:00:00 +0000
asID: 59282
IP address blocks: 2400:d680:3ee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5f:4c:c6:f3:a2:fd:07:0c:9c:e2:b4:65:16:fd:b8:37:fa:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 13:55:00 2022 GMT
Not After : Sep 25 14:00:00 2023 GMT
Subject: CN=9616ACAA513DA64B7702D0CE91FA539E23328451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:7b:10:14:41:d1:2b:a3:1c:4e:f9:fd:07:
a7:db:b8:d5:5b:07:b5:bc:ae:51:24:5c:3c:aa:77:
c6:05:79:b8:7b:a9:01:a5:8d:48:f5:e4:f7:d4:98:
1a:03:b3:73:fe:a9:5b:0d:63:81:77:9d:43:83:47:
a8:3c:38:4d:d1:9b:5e:b3:a3:08:b6:c6:08:1f:c8:
d3:e1:c0:b2:3b:c1:86:a7:01:27:0f:bb:26:01:e5:
3e:0d:57:25:4b:d2:4d:6e:05:d8:4e:80:79:1e:e9:
9f:8e:3e:82:52:6d:61:35:9b:c9:e0:3f:7c:f6:5c:
5a:ad:6e:f5:ba:b8:5f:1f:f3:46:94:7e:9d:3e:f8:
6a:3d:ed:48:76:c0:45:8b:cb:89:2b:fb:7b:bc:76:
d9:40:65:dc:ed:82:6d:a6:8e:17:8f:e1:25:5d:64:
1a:15:fc:40:a2:86:e4:a0:6f:8c:f8:71:92:f5:2b:
79:14:93:b2:d5:ea:94:1d:74:4e:a1:26:59:d8:4c:
8a:7a:b5:17:f8:76:be:f1:16:29:9b:00:56:e3:2a:
71:e4:b4:0b:85:19:55:04:43:1a:36:97:ef:e8:8c:
82:96:9c:56:23:1a:e9:6d:ce:7f:9b:d5:d4:dd:31:
f1:54:3b:27:52:2a:95:1b:bf:2e:a1:ed:d1:26:b6:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:AC:AA:51:3D:A6:4B:77:02:D0:CE:91:FA:53:9E:23:32:84:51
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ee::/48
Signature Algorithm: sha256WithRSAEncryption
84:93:75:bc:7c:8a:5f:6c:5d:8f:4f:94:94:e2:24:1e:77:f5:
16:44:fc:d4:01:b4:f1:5d:19:1a:9a:31:e1:aa:4b:8f:c6:f1:
50:1a:be:e8:5d:44:0b:4a:dc:f3:c9:30:93:2d:c5:c3:08:ca:
b1:c9:6a:43:f6:63:ca:78:ab:3f:10:51:1a:58:8d:44:20:93:
a5:2b:4e:8c:58:dd:20:44:2d:16:c7:1b:f2:bf:15:e0:32:7d:
63:fe:f7:54:54:72:c1:f6:5a:fc:89:a5:00:61:22:08:b6:d0:
3c:c1:7c:3d:69:8d:f4:7b:2c:25:b4:38:4c:b5:d0:25:c5:7f:
77:a3:75:c0:54:e7:47:39:45:36:97:95:95:26:00:62:01:f7:
b7:cb:f5:fe:f4:8a:8d:fc:a8:cc:3a:02:71:f4:ac:c3:62:16:
62:22:7b:14:00:42:80:6f:9f:3b:2e:55:06:d3:65:ba:f0:1c:
ba:a2:0c:ab:31:87:f4:cf:2b:5c:93:0a:ae:de:4c:96:f5:05:
b1:4a:83:7c:49:5a:06:1c:dc:4c:21:bb:b6:c9:31:3b:bd:c2:
ca:e2:31:73:0a:62:54:00:13:fe:ac:89:60:f9:8d:83:92:d7:
4b:40:c9:3a:a1:f0:1c:1e:4e:d7:57:9c:4b:4d:44:6d:e4:c7:
e3:c7:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org