Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: eRb7194xuM5gEe6xiLcGk42XAC7LdpQJmgUoIu1SG9M=
Subject key identifier: BA:23:5F:3D:F1:6D:A3:13:C2:29:58:81:B3:36:AB:09:CA:DA:5A:1A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 34CCF9758576ED6932176EEA9191ECBBA7576DA5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:49 +0000
ROA not before: Mon 26 Sep 2022 07:56:49 +0000
ROA not after: Mon 25 Sep 2023 08:01:49 +0000
asID: 59282
IP address blocks: 2400:d680:40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cc:f9:75:85:76:ed:69:32:17:6e:ea:91:91:ec:bb:a7:57:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:49 2022 GMT
Not After : Sep 25 08:01:49 2023 GMT
Subject: CN=BA235F3DF16DA313C2295881B336AB09CADA5A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:8a:67:57:7a:34:39:5f:37:8c:04:70:24:
b4:1a:4d:86:09:ae:ce:6a:a9:ad:ca:ab:cd:cc:99:
9c:e0:a0:dc:fe:1b:60:59:81:cc:d1:c3:28:a4:29:
40:4c:f9:6f:ba:52:7e:b1:90:43:41:0a:b0:98:e3:
1e:df:74:d2:92:b7:49:37:e3:16:b3:2d:f2:5f:01:
5d:06:2f:0b:c6:36:43:9e:44:89:98:12:e8:fe:ac:
e5:15:2e:8c:c8:44:7d:f0:69:63:b8:7f:7f:4b:2b:
fb:61:c2:78:cb:7f:40:ee:80:d5:7e:21:a3:16:16:
45:11:65:d7:07:27:c9:87:ae:6c:c0:f5:b0:1f:c4:
52:11:a8:91:d2:96:ff:5c:58:20:c9:3a:72:6e:1f:
3e:c2:8f:df:db:b1:ce:a2:5e:2f:4c:72:3a:95:a0:
60:99:e7:97:67:4e:80:86:e3:de:b3:7f:16:aa:ec:
b3:54:ca:06:46:e5:52:48:9e:a0:24:03:dd:e0:55:
12:99:cf:a6:b9:89:e3:9f:71:33:9c:0c:57:3d:42:
b0:60:36:99:90:bf:89:da:1d:52:0e:36:c8:9f:06:
05:fb:45:04:a1:0c:4c:be:11:59:4a:c9:23:31:bf:
f3:e1:10:00:8f:45:18:9a:e4:11:2e:7f:08:d7:35:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:5F:3D:F1:6D:A3:13:C2:29:58:81:B3:36:AB:09:CA:DA:5A:1A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:40::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f8:72:5f:5a:2e:c8:72:2d:fa:f3:9f:7c:d6:42:a9:d8:84:
e5:cc:6f:5d:8b:2b:1f:9d:11:dd:a7:c0:d0:7a:41:29:b7:86:
3e:62:c3:4b:f9:05:fa:37:78:6c:fa:81:cd:6b:a3:c2:d0:a1:
43:9b:78:fd:03:36:97:bd:e1:c1:ab:1a:e9:f6:fa:bc:68:0b:
2c:90:1e:bf:0b:ee:c4:18:27:66:c5:03:d7:ec:6a:2b:31:bb:
75:5b:c0:99:86:35:9b:c6:c1:ae:d9:2a:87:12:0c:15:09:b9:
1e:94:4f:e2:99:84:bf:23:ae:01:85:69:81:75:c2:9b:5b:97:
b9:ba:ba:59:fe:9a:cb:4e:7c:cf:6a:59:db:b5:31:5b:1f:02:
fb:35:d4:c0:8f:3d:d4:f7:5e:f3:26:9d:54:e3:f5:f7:2a:39:
80:ab:78:95:26:a8:00:d7:91:16:b9:e0:f4:94:d7:ab:66:9b:
dc:13:60:b5:9d:87:32:e4:c6:8a:3f:0c:b3:a9:62:77:e2:cb:
33:5d:e1:2a:25:fd:e2:b2:b7:33:f4:80:69:a2:c5:f4:30:a7:
b6:b4:c8:2a:7d:09:13:79:da:2f:05:2a:5b:74:bf:a2:b5:c8:
0e:98:e0:5c:df:3b:c3:2d:d5:de:34:f3:59:70:92:a9:5d:50:
4d:d5:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org