Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: m3N/Jwp7OI0xMVjsxmo5mq4ezbBL7ZCDCDn7C70amgM=
Subject key identifier: 9F:AC:A9:3B:AD:FA:64:67:93:17:B5:0C:0E:72:B3:6B:2A:0B:E4:45
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2944850FB3997D53C54034F2D71FA082289AB3B0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:35 +0000
ROA not before: Mon 26 Sep 2022 07:56:35 +0000
ROA not after: Mon 25 Sep 2023 08:01:35 +0000
asID: 59282
IP address blocks: 2400:d680:41::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:44:85:0f:b3:99:7d:53:c5:40:34:f2:d7:1f:a0:82:28:9a:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:35 2022 GMT
Not After : Sep 25 08:01:35 2023 GMT
Subject: CN=9FACA93BADFA64679317B50C0E72B36B2A0BE445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:70:78:3d:f3:db:6d:45:2e:2b:54:78:fc:
db:1e:ea:e8:ed:52:b2:e9:51:5c:fe:88:ef:57:8b:
ed:0f:c3:e4:37:60:e4:12:8a:2f:cd:d6:3b:12:a0:
a1:67:21:67:2f:f8:47:47:d6:b3:4c:59:01:b5:35:
3d:bf:70:90:58:7c:65:77:c5:b2:3e:7d:cc:96:da:
fd:02:b5:4c:f1:77:85:1b:88:82:de:e3:cc:15:86:
3f:53:56:04:9f:da:77:7e:5d:17:7c:a5:39:ec:ad:
4f:bc:71:d2:d0:f0:a4:96:38:ec:33:6b:d6:d9:57:
45:d6:aa:bf:2b:76:2c:11:24:74:8e:d6:19:0d:8d:
7b:21:6c:5c:19:09:b8:c8:f6:6d:21:c4:35:cb:e5:
8f:6c:66:de:3b:44:4d:76:6a:3f:3a:58:d6:5a:9b:
01:51:6d:df:76:80:fd:14:52:b7:53:43:3f:3c:b5:
68:f8:50:d1:75:c6:d2:22:7f:55:b6:6f:b8:15:01:
9e:18:e1:11:4d:8c:99:dd:1f:0e:db:22:8b:7d:66:
52:fd:e9:88:c7:5a:b7:51:09:6c:e3:06:35:d4:98:
20:f6:95:b6:eb:d7:58:97:a1:04:23:04:33:b9:ef:
8e:93:2f:13:b1:26:b6:b8:f5:78:bd:03:c1:2c:d8:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:A9:3B:AD:FA:64:67:93:17:B5:0C:0E:72:B3:6B:2A:0B:E4:45
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:41::/48
Signature Algorithm: sha256WithRSAEncryption
52:a2:3c:8c:44:02:8f:dc:9d:b6:eb:21:fd:2f:46:82:d8:9e:
48:6d:4d:c1:2b:0e:1a:3b:80:51:14:b7:20:b9:0b:55:8b:5d:
1a:cc:ee:37:15:7d:bb:37:95:d8:70:1a:34:64:99:ae:b3:95:
99:90:0e:33:59:9f:d2:f4:60:9b:48:b9:e5:54:d7:aa:17:2c:
ae:6a:75:fc:f7:32:d3:a8:42:ae:fe:42:26:62:de:c4:99:27:
3e:b8:f8:85:d2:27:29:c0:d8:00:0d:45:bd:a9:b5:e7:bb:eb:
20:f9:8e:aa:c1:7f:87:29:52:c6:9c:e7:af:88:90:39:97:c7:
a5:6f:cc:32:ea:2d:f4:c4:91:3b:66:02:22:fe:44:13:2b:4a:
fb:e0:6e:6b:ae:0d:e2:fb:51:cf:85:83:74:cc:c0:8e:06:fe:
8c:82:f5:c6:73:66:6a:31:43:b5:b2:75:a9:20:c4:81:38:da:
53:5a:5d:d4:be:97:dc:42:2f:49:65:5d:d5:f9:03:48:59:e8:
1c:5f:3d:f9:59:9b:c5:07:d6:7d:42:94:75:35:2c:96:41:a5:
50:56:ae:69:8d:d4:35:99:e1:4d:f8:0e:8e:5e:8f:73:20:c8:
a3:65:70:73:6e:f0:85:8d:cd:22:d5:ef:55:07:55:53:eb:8d:
be:a6:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org