Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: M2atqwWhq9Ujs7wKqrzZ1gDXgIhlNXMAT29JVvOo8oM=
Subject key identifier: DA:24:5C:7B:B9:73:E5:BC:F7:AE:FF:F5:FF:16:55:38:2E:E6:6E:54
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2994B5CEDFB5D0C95F2D0211EB0F0ABD500FC88F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:12 +0000
ROA not before: Mon 26 Sep 2022 07:57:12 +0000
ROA not after: Mon 25 Sep 2023 08:02:12 +0000
asID: 59282
IP address blocks: 2400:d680:49::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:94:b5:ce:df:b5:d0:c9:5f:2d:02:11:eb:0f:0a:bd:50:0f:c8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:12 2022 GMT
Not After : Sep 25 08:02:12 2023 GMT
Subject: CN=DA245C7BB973E5BCF7AEFFF5FF1655382EE66E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:b0:f2:c1:cc:76:6d:2c:cd:68:a1:9f:66:
e2:b6:de:7c:1e:40:65:4d:c0:16:6a:33:4d:fe:ea:
0e:23:90:f6:a1:bc:28:07:2e:37:0b:bd:c7:39:22:
a3:c2:63:73:cc:4c:fe:5d:28:61:fb:a9:d2:f8:f5:
8e:c6:f2:36:6a:dd:28:80:51:d3:60:5e:a6:52:77:
29:35:11:29:e5:6e:40:1e:31:aa:16:fe:9f:42:0f:
80:35:4e:fc:93:a9:78:b3:be:5a:a6:ae:92:3b:22:
cc:72:bc:da:c1:c1:9c:e2:07:ca:ad:d9:66:fb:cd:
1e:21:ce:09:c5:f8:58:d9:cd:c8:2a:f1:13:d7:a0:
7d:d4:6e:a4:7d:5c:3a:0a:cc:bb:2b:bb:67:8e:57:
25:51:3c:8f:4f:97:41:7f:a9:cd:26:32:44:e3:7c:
11:a8:cd:38:e1:d0:20:d9:0e:7e:be:2a:0e:38:49:
83:c2:77:e8:25:b4:0e:3f:f7:96:09:78:0a:e9:47:
21:95:6f:ac:2e:37:58:f0:12:d1:88:db:ab:57:15:
b2:d2:59:ed:a2:6f:1b:fe:a3:c1:fa:0a:f5:71:b0:
84:01:2f:c4:85:0c:54:b6:4a:0d:cc:8a:87:31:f2:
d1:67:f9:26:49:69:78:e0:93:a2:ee:22:43:75:54:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:5C:7B:B9:73:E5:BC:F7:AE:FF:F5:FF:16:55:38:2E:E6:6E:54
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:49::/48
Signature Algorithm: sha256WithRSAEncryption
3e:62:82:de:64:1e:26:e4:18:30:93:56:1e:3c:d8:d1:c2:7d:
04:ed:7f:36:d4:f5:7d:cc:ad:b1:cb:55:14:45:c0:3f:95:e0:
33:42:6d:0f:58:ee:53:57:f2:4f:5b:02:35:f2:2e:75:75:3d:
c0:49:cb:88:80:d8:b1:aa:90:fc:db:35:c8:a8:6a:62:d9:b0:
47:e7:6f:e8:f5:34:4d:61:90:52:41:f9:cd:6a:5e:ea:89:75:
a2:7d:f3:ea:0b:f8:ae:18:71:07:fe:7d:42:ab:7c:fc:b9:0c:
da:21:46:dc:c5:62:75:55:7a:f0:1b:fe:7c:42:86:d3:31:2a:
3c:69:41:2a:1b:53:31:9b:87:4a:aa:05:fe:67:59:68:eb:2a:
fe:b4:d9:b2:a9:b5:55:9c:c4:96:f0:fc:4a:42:47:83:01:a5:
d1:df:36:78:92:f0:b4:a3:0f:bf:ec:f5:b1:89:7c:e2:98:79:
fe:82:18:9b:df:38:f3:89:20:a1:7d:79:1a:d7:c1:97:e4:e4:
49:2e:95:0d:35:16:b4:7b:98:0c:e2:47:9e:31:ce:80:ed:34:
3d:b3:05:c5:20:5b:d6:06:9a:18:a5:dd:4f:2a:b2:e3:7c:f9:
35:8a:9b:67:47:03:08:39:cd:ae:af:42:bf:ee:64:40:d6:e9:
87:25:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org