Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3366363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: yNm/8L3mg306h8C+nSVirf4TwK/nvluJmjwDMoYv7Wk=
Subject key identifier: 75:6D:F7:34:76:E4:CE:66:8D:E6:8C:C8:92:84:BE:F7:AC:B4:2D:E8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5E5303D952C7F564FFA19F45C5C55ABC493CDDA2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:50 +0000
ROA not before: Mon 26 Sep 2022 10:55:50 +0000
ROA not after: Mon 25 Sep 2023 11:00:50 +0000
asID: 59282
IP address blocks: 2400:d680:3f6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:53:03:d9:52:c7:f5:64:ff:a1:9f:45:c5:c5:5a:bc:49:3c:dd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:50 2022 GMT
Not After : Sep 25 11:00:50 2023 GMT
Subject: CN=756DF73476E4CE668DE68CC89284BEF7ACB42DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:9a:7f:c9:e7:c3:e0:d3:93:a8:46:b9:6c:
a1:59:14:54:74:3f:f1:92:a2:ac:f1:c2:e6:1d:66:
aa:a4:bf:38:af:0a:75:47:74:57:99:85:8a:ba:08:
06:c6:12:92:60:17:31:10:e3:77:ac:c1:e8:14:82:
1d:90:79:e3:43:e0:f4:43:70:e3:84:9c:3f:20:5b:
0c:7c:b6:a7:77:84:b4:04:ad:c6:36:2c:26:1c:f4:
a3:82:85:27:2f:8a:f5:3c:a3:44:3b:58:56:40:60:
7f:68:4e:30:85:22:b5:18:a8:4f:8c:e9:10:4e:1d:
b8:29:29:05:12:4f:d7:00:af:89:9f:df:60:69:42:
40:7f:ce:25:09:da:ab:ea:15:de:6d:c7:9d:68:5b:
29:01:c9:d1:4f:f0:bb:32:b2:bc:e9:21:55:3b:30:
89:c5:d0:0d:3c:05:59:6c:5a:25:9f:7b:3c:d0:94:
5d:79:a3:f8:ea:c2:da:17:08:67:53:ea:2a:98:35:
63:a0:20:6e:d3:15:9f:62:04:97:65:16:17:3e:0b:
b5:1d:25:b0:b6:35:bc:9e:8b:ea:06:5d:16:19:ad:
57:44:ec:b3:27:62:20:a2:77:34:e4:c6:51:91:d0:
40:3a:ff:92:a7:6a:87:7e:34:23:7a:5f:96:3f:42:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:F7:34:76:E4:CE:66:8D:E6:8C:C8:92:84:BE:F7:AC:B4:2D:E8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3366363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3f6::/48
Signature Algorithm: sha256WithRSAEncryption
92:d9:28:a4:15:db:e3:28:24:3b:68:5a:43:0e:8e:db:d8:ee:
df:71:37:b2:06:77:2e:eb:83:8a:69:d4:12:0c:6a:92:ed:51:
8b:8e:5d:2e:d9:21:51:5a:3d:65:79:bd:26:77:d3:fc:46:b1:
86:68:5a:e9:c8:49:3a:d7:c1:c6:7e:97:42:1b:76:1d:df:c2:
87:70:a1:9b:1d:e8:5a:60:76:ec:1a:ab:83:c6:93:1f:8e:b9:
8b:1d:4d:c9:75:42:e8:cc:05:b0:cb:ab:7a:b3:33:b8:22:b1:
28:0a:cb:af:50:7c:5e:a2:35:5f:af:ca:82:98:4c:cd:62:3d:
8f:b4:28:61:12:a4:d9:57:2d:33:cf:72:50:62:f2:6f:d7:20:
37:7a:b3:c5:ff:85:d3:00:72:c4:25:37:bc:a3:f6:0a:1f:e6:
ff:97:c8:b4:0c:d0:df:33:3a:63:74:5d:6e:9d:92:2d:5a:5e:
3a:cb:f2:24:e3:82:24:a6:11:1c:b9:b3:37:32:6c:b3:0e:1f:
96:74:01:3a:ff:eb:12:89:0c:0e:23:54:b1:1c:72:b6:be:e7:
d6:3c:f7:f7:42:e8:90:c9:1f:90:f0:36:53:b8:34:df:74:45:
6e:56:51:43:db:87:05:91:60:98:fe:be:cd:b0:e4:1b:9c:53:
e9:b9:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org