Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 2PXwtzUgBzkueILYemkT/UIs4FHflVkq8Kv2VZkc5w4=
Subject key identifier: 61:5E:30:5D:28:B4:3E:0B:14:69:60:93:74:D3:4D:19:7E:87:72:14
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 168D8806EB0A94C2B8F0F388B874A828648342F6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:22 +0000
ROA not before: Mon 26 Sep 2022 07:56:22 +0000
ROA not after: Mon 25 Sep 2023 08:01:22 +0000
asID: 59282
IP address blocks: 2400:d680:45::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8d:88:06:eb:0a:94:c2:b8:f0:f3:88:b8:74:a8:28:64:83:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:22 2022 GMT
Not After : Sep 25 08:01:22 2023 GMT
Subject: CN=615E305D28B43E0B1469609374D34D197E877214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:a8:c3:b7:a7:96:f9:e1:dd:ff:4a:4a:9e:
4a:ce:12:e1:90:f6:bf:13:e2:98:d8:ec:37:e5:63:
aa:1f:c7:20:de:f0:d7:ec:c4:07:26:46:b1:39:99:
ae:79:8e:c1:6f:38:d7:6f:ce:a5:3a:78:09:75:16:
fa:ca:55:f6:ec:5c:2b:7e:1a:ab:c5:23:1b:2e:72:
a2:00:1c:1a:45:db:bb:c5:d0:55:9a:ae:73:7f:81:
ed:fb:54:58:39:07:18:31:7e:80:97:35:c5:31:ba:
20:13:b2:e8:67:ba:dd:5d:70:ef:2c:4e:8e:d6:40:
59:fc:51:c5:23:09:bb:7c:5f:f1:78:77:7c:29:b5:
a8:0c:a2:fc:66:3b:a0:dc:f9:89:0c:d4:08:88:4d:
1c:19:81:a9:70:03:97:b1:7f:ea:00:e2:aa:4c:04:
61:31:ed:d4:63:e3:b6:fd:e6:bd:94:c9:fa:a1:1e:
37:a4:95:87:eb:8a:de:79:da:4a:f6:5a:ae:16:6a:
57:08:df:aa:78:00:12:99:7e:58:2c:47:a1:b5:52:
d0:c2:cc:53:a8:97:95:7a:09:85:8b:ac:77:0c:8e:
e5:f1:14:29:f7:52:f0:a5:9f:f5:fb:f6:2b:7d:5c:
6e:db:85:bb:51:f5:80:15:8f:fe:b0:91:bc:d0:90:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:30:5D:28:B4:3E:0B:14:69:60:93:74:D3:4D:19:7E:87:72:14
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:45::/48
Signature Algorithm: sha256WithRSAEncryption
36:5a:50:d0:8b:57:9e:f1:1f:bd:1b:c4:84:3f:97:17:33:a0:
8f:3e:5b:4c:a1:eb:8e:2c:f6:7f:ee:06:6f:36:a8:ea:93:ce:
b9:84:6d:fd:99:50:14:e8:c2:7b:be:00:7b:d8:a1:ca:ae:e1:
82:b8:19:40:7f:ea:2b:e7:b3:a5:f4:44:ae:a8:22:0c:d1:07:
b0:e9:75:34:fa:c2:08:35:22:d6:13:55:1c:6f:95:cb:55:83:
a2:4e:04:c1:69:98:83:84:48:6c:8c:62:af:9f:3d:47:a7:30:
fe:cd:f3:f9:52:98:62:09:a1:61:26:b1:dd:49:54:dd:ee:1d:
2a:7d:2e:54:e0:28:d3:2c:8a:41:2d:92:54:ff:f6:da:ef:0e:
27:7e:65:7f:75:16:bd:9e:9d:ce:0e:2b:9a:db:2d:ba:74:f1:
70:1c:e7:40:aa:1d:e8:21:cc:5d:09:6e:1a:52:9d:b2:eb:78:
2f:91:c5:dc:73:88:7c:33:04:49:fb:32:24:93:00:f1:65:e9:
00:d4:ae:43:93:b2:25:59:91:01:8a:2c:ad:a9:fe:08:2a:2a:
8d:3b:86:55:c8:e5:3f:c4:c8:ba:75:b7:13:55:3b:76:ce:7d:
3a:b2:59:78:df:c6:77:2e:1c:40:1c:ea:3c:ef:83:bd:98:ae:
32:00:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org