Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3365663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: W1+5uQ0DeEDh6TazyA3LcsSiJkZ+bLXsEGc3UnetjIU=
Subject key identifier: 0F:0C:20:93:39:A1:68:C5:45:73:F8:32:4B:1D:71:2A:16:72:81:EF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 08D787A3DD7DEC2FE57C84E35B7DA30F5AF5ED1A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:38 +0000
ROA not before: Mon 26 Sep 2022 10:55:38 +0000
ROA not after: Mon 25 Sep 2023 11:00:38 +0000
asID: 59282
IP address blocks: 2400:d680:3ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d7:87:a3:dd:7d:ec:2f:e5:7c:84:e3:5b:7d:a3:0f:5a:f5:ed:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:38 2022 GMT
Not After : Sep 25 11:00:38 2023 GMT
Subject: CN=0F0C209339A168C54573F8324B1D712A167281EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:0d:5c:e8:a5:8e:b0:f1:42:fe:31:c7:ac:
41:bf:5e:3a:26:9f:00:76:e8:76:13:54:ca:a6:04:
ac:d5:65:ec:0e:de:7e:64:bb:f6:5b:06:98:20:49:
95:ec:ab:a4:59:44:7e:09:70:88:59:38:f6:2c:81:
b6:c3:43:48:fc:7b:de:fd:99:db:95:ee:c1:1a:e2:
81:ee:0f:e5:15:62:a1:dd:f0:a4:4a:49:4e:9d:48:
a5:b6:bb:de:24:47:3c:07:50:c9:1d:68:36:6a:15:
a7:17:9e:48:3c:43:54:4e:d9:10:c6:95:bd:00:55:
3e:12:e4:2a:92:e3:b5:2e:8f:ba:b8:f8:e1:85:3e:
77:5c:f7:c1:ae:d3:6b:69:2b:01:6d:7b:f6:9b:f0:
0d:c2:5c:8f:62:97:af:b6:86:c9:02:d6:da:ea:a7:
26:45:99:65:f4:a6:19:22:65:d8:89:99:89:9c:e6:
22:e3:b3:f8:9d:5a:66:e7:94:8c:8d:02:31:6d:ca:
0b:84:f4:a6:ef:8f:bc:8c:0e:4a:dc:87:c6:a6:ee:
be:b2:2a:23:cc:a6:8a:da:5a:b3:8e:78:af:90:93:
25:9c:ed:6b:8f:bd:73:76:8f:af:b2:31:31:80:d4:
cf:8c:a0:08:81:b4:fb:54:90:1c:f3:b4:8f:d5:19:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:20:93:39:A1:68:C5:45:73:F8:32:4B:1D:71:2A:16:72:81:EF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3365663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ef::/48
Signature Algorithm: sha256WithRSAEncryption
37:b5:57:6d:04:61:40:5a:e0:72:cd:3f:46:8c:10:cf:cb:fa:
d4:15:e5:a0:4e:3a:e4:f3:15:f0:db:f3:67:c6:b4:98:d1:98:
7e:82:40:e7:55:0d:55:6b:ec:f6:4b:85:a2:9f:86:90:ad:b4:
ca:e6:b9:61:c3:35:76:89:97:81:fd:50:f0:9d:23:06:b1:2c:
f6:dc:89:c3:95:e6:6b:fa:2c:18:53:74:f7:ee:dc:6f:12:20:
23:9c:24:b6:00:4b:e0:c1:f9:36:ba:0e:d6:fa:ce:51:c6:e1:
75:7f:e8:e9:f8:e9:e9:b0:1a:57:12:36:ba:b5:0b:84:e0:65:
5d:ec:8b:28:b2:89:9a:ca:20:5a:50:b1:d2:ef:d1:27:15:45:
8a:58:15:75:41:08:ce:47:af:89:60:ab:f4:6f:22:4b:5e:a8:
bb:4e:b7:6e:5c:41:9a:69:c6:8a:69:1e:ef:62:81:87:21:03:
17:de:e2:18:43:83:38:35:98:2a:0b:6b:0b:0e:f2:93:de:1c:
90:31:a4:e6:0c:7a:b0:a9:46:b9:a8:2b:49:c7:08:01:38:b9:
05:be:a6:d2:7a:fb:70:20:fc:fa:9e:af:bf:a8:0c:5f:1a:38:
dd:cc:20:4d:3d:1e:24:7f:b0:10:71:ab:09:b3:7d:9e:c9:50:
89:99:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org