Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3366333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: qLwO/SQyBSV0MH46uBjV8HqQosp1J4JC5OK2mNNlxRk=
Subject key identifier: 90:2D:D4:D1:D1:66:4E:11:4F:EA:79:99:4D:80:95:39:28:04:02:0D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 57AD3B5D34AAD3171B2CC125BC4D7F0DFCFF8670
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:48 +0000
ROA not before: Mon 26 Sep 2022 10:55:48 +0000
ROA not after: Mon 25 Sep 2023 11:00:48 +0000
asID: 59282
IP address blocks: 2400:d680:3f3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ad:3b:5d:34:aa:d3:17:1b:2c:c1:25:bc:4d:7f:0d:fc:ff:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:48 2022 GMT
Not After : Sep 25 11:00:48 2023 GMT
Subject: CN=902DD4D1D1664E114FEA79994D8095392804020D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:e5:b3:43:68:26:8b:64:72:d5:3b:6c:8c:
75:d6:18:3b:2d:b1:46:8f:8c:de:39:9c:56:dd:f7:
f2:2e:6c:9d:84:8c:b3:f4:d7:fb:04:9a:42:55:72:
b1:b3:a2:60:05:35:42:43:66:5b:d5:d8:ec:a7:33:
dd:46:4d:20:e1:cf:87:ad:b6:71:82:06:38:f2:15:
14:a5:d1:7c:d2:04:88:ed:56:c9:3a:06:1c:f6:03:
6c:cb:d9:bd:5f:c8:9a:03:57:b7:bc:de:75:f4:74:
14:25:24:15:76:e2:b0:2d:f8:5e:2a:77:c1:82:00:
ef:52:49:fc:70:f2:01:4d:f6:1f:b6:f6:1c:f4:f9:
31:0f:53:1a:48:ee:12:98:d8:43:ff:ec:39:a4:63:
5b:0a:ce:ca:67:c9:7c:79:e0:53:c3:6f:63:4a:ca:
77:d7:0c:3b:85:38:67:65:9f:6c:a1:66:21:7e:34:
cf:b0:80:a8:8b:cf:4e:9a:6c:72:3d:d6:1f:71:d6:
f8:6d:38:32:3d:2c:ae:ed:90:c3:5d:90:7e:99:f1:
61:d1:35:ae:57:5b:f3:98:2c:94:af:ce:15:ad:0b:
68:0c:c0:7d:12:21:2d:d0:a9:47:75:59:d1:00:e5:
29:84:e4:9b:3d:24:2d:79:a9:bd:97:6f:a2:de:2f:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:D4:D1:D1:66:4E:11:4F:EA:79:99:4D:80:95:39:28:04:02:0D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3f3::/48
Signature Algorithm: sha256WithRSAEncryption
0c:bd:f2:2e:f7:2e:59:29:b8:01:c4:f2:96:8e:6b:eb:64:77:
94:0b:3f:7e:55:f4:87:d2:b3:d9:6d:1e:7a:1c:f6:da:b6:df:
d2:36:7a:a6:ed:ee:08:5d:db:1d:35:9f:63:3d:e5:f4:63:7d:
e1:0d:8c:31:dd:65:2c:a7:1f:3b:ac:ea:aa:36:6f:c7:26:5f:
23:dd:32:7e:fb:52:db:45:be:01:44:f3:21:c2:9b:36:1d:7d:
21:7b:db:d3:e5:00:f9:c0:40:77:27:a1:b9:a4:45:52:70:9d:
49:67:a3:b5:ed:34:ac:f1:33:11:95:02:20:c9:87:ee:c7:d0:
26:cb:06:cd:79:d6:53:12:84:15:3c:d5:5e:d5:f4:26:c2:97:
69:dd:88:47:a2:8d:7a:54:da:07:04:39:9d:66:a3:56:1a:a3:
dd:58:98:bd:c7:e8:09:9d:4c:68:61:cc:67:fd:92:cb:58:cb:
be:dd:50:8e:db:8e:e3:a3:d3:c6:9f:ca:29:e2:b7:42:a8:38:
f9:b4:d7:70:7a:d1:a3:e6:6d:05:44:f1:9c:12:81:96:e1:25:
26:0b:c4:9a:9d:33:9f:c3:e7:d1:81:7a:34:a4:34:d4:7d:7b:
68:b2:7b:69:4f:f0:74:80:9d:38:ea:d0:3f:60:03:6b:f7:3f:
4e:8a:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org