Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DD26Wye2C4bazsR0a3YjlBKxTNj7GLMa/iwEvPz6V4k=
Subject key identifier: A4:C1:D5:A5:3A:8F:18:69:0D:60:EC:39:28:E7:AF:26:5E:A2:6F:97
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1BC957302E26AB2F302A0A9A3D1F49A15A0F4634
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:18 +0000
ROA not before: Mon 26 Sep 2022 07:57:18 +0000
ROA not after: Mon 25 Sep 2023 08:02:18 +0000
asID: 59282
IP address blocks: 2400:d680:42::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c9:57:30:2e:26:ab:2f:30:2a:0a:9a:3d:1f:49:a1:5a:0f:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:18 2022 GMT
Not After : Sep 25 08:02:18 2023 GMT
Subject: CN=A4C1D5A53A8F18690D60EC3928E7AF265EA26F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6e:d5:bc:9e:9a:68:7a:0f:3c:40:6a:78:3b:
14:20:bd:74:e1:e4:b0:64:47:57:4d:4a:46:e2:18:
80:2e:e6:53:3b:b8:89:0b:51:f4:9e:e2:03:fc:4e:
2f:f9:2c:5b:b7:1a:3c:60:3c:5f:58:03:56:7e:a7:
80:cd:db:f4:6c:d0:0d:b8:24:be:05:4b:10:a7:a3:
78:3f:44:16:4d:69:68:8c:b6:6b:05:f7:ca:55:66:
47:82:03:6b:74:61:98:9b:2a:2c:54:ab:a4:0a:49:
3e:56:85:5c:d0:b1:8b:f6:52:35:77:35:e8:68:ab:
1e:cc:c7:a0:83:6e:4f:cc:d6:70:26:a3:e8:a7:98:
70:a7:75:dc:fd:97:0e:fd:fc:5e:ef:e5:9c:cc:80:
37:1a:b4:81:b5:8d:12:cf:20:12:26:13:a2:37:29:
67:85:1a:c3:f6:1c:aa:d6:13:25:c3:a2:88:04:d8:
8a:48:d9:19:4b:85:dc:a9:1d:ca:99:6b:8b:90:35:
4c:6c:fd:05:10:7d:d1:da:2c:50:3c:51:11:d8:8a:
af:79:34:d9:64:e2:be:b4:e3:45:08:f4:83:00:19:
87:6d:23:7b:cf:38:d4:1f:50:b0:22:b5:53:12:20:
11:fc:2b:b2:ba:24:5f:0a:9b:20:fa:95:aa:5f:41:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:D5:A5:3A:8F:18:69:0D:60:EC:39:28:E7:AF:26:5E:A2:6F:97
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:42::/48
Signature Algorithm: sha256WithRSAEncryption
37:bf:70:d6:31:8d:1e:65:12:86:9c:50:f6:38:c8:58:4d:24:
33:e1:52:8c:a7:7c:33:ab:a0:81:d1:8f:e3:8a:98:bf:95:2a:
9d:34:a3:4a:93:0b:cb:cc:bd:d5:dd:78:38:c5:e8:ac:20:bf:
49:f6:45:2e:1d:97:ac:11:b5:07:ca:89:22:74:17:bf:44:ef:
cc:9a:13:67:22:cd:6c:16:1d:38:ae:46:c0:97:a0:c4:18:83:
14:53:3d:99:7e:95:f0:98:80:84:67:01:3a:e7:57:55:02:fe:
f7:a6:c3:f3:e0:f2:be:7d:75:ec:95:c6:27:b4:24:3e:55:75:
ee:db:ab:eb:7c:49:d7:73:2e:2d:a8:ca:b5:91:38:51:10:5c:
bc:9a:ef:c3:21:30:aa:2d:41:cc:ed:2f:b4:a3:d9:43:24:e2:
8a:ef:d9:69:5a:b8:17:79:05:82:6a:c2:72:ad:77:5b:62:3f:
b8:be:71:df:a9:0d:86:39:6b:bd:03:d1:b9:de:a7:bf:0c:c0:
a8:4b:d4:8d:bd:d8:94:00:87:1e:26:27:de:a6:14:6e:c8:0e:
91:3b:42:5c:d2:1b:19:9b:ed:c0:0a:56:bc:66:18:c8:c1:78:
1b:48:0e:b2:3a:63:ae:46:c9:9c:74:69:4e:b9:53:6d:a6:fb:
9d:12:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org