Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: XJISjhKFqgcSOrhilcA4p8T5f8bHPs8tTou0R5HwcO4=
Subject key identifier: 82:86:2C:82:5C:E9:93:E4:43:E4:5A:D1:31:A4:3F:34:C5:4D:BC:74
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 64F368F8E84546F0176C3BA3535FEDD7A29D6CB0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:02 +0000
ROA not before: Mon 26 Sep 2022 06:55:02 +0000
ROA not after: Mon 25 Sep 2023 07:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f3:68:f8:e8:45:46:f0:17:6c:3b:a3:53:5f:ed:d7:a2:9d:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:02 2022 GMT
Not After : Sep 25 07:00:02 2023 GMT
Subject: CN=82862C825CE993E443E45AD131A43F34C54DBC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:6c:47:88:6f:9e:51:b7:00:b6:4a:be:6e:
21:5c:fd:0b:ea:58:a8:b7:70:ec:ff:d9:41:18:3b:
d8:e4:bb:cb:a2:f6:7a:a9:6e:0e:05:0e:db:7e:4f:
cd:cb:a9:b7:82:ff:95:5e:c1:16:f1:0f:9d:77:9d:
d1:72:9f:8d:8e:58:85:3c:7d:96:83:74:6d:85:ee:
1d:c2:21:ab:d4:4e:31:15:a9:70:f5:20:4b:24:2e:
97:e7:19:1e:46:ee:92:1c:93:92:ea:cb:ea:03:7a:
1f:ec:bb:ce:b2:76:5a:00:1a:f6:8e:9a:eb:32:ca:
a5:26:8e:39:19:7b:e2:18:bf:fc:09:89:7f:8c:1a:
0f:f7:eb:ee:6c:ba:11:89:81:59:50:7e:22:80:33:
00:86:48:26:04:11:dd:7c:81:16:8a:48:a4:bc:dd:
d8:e2:0c:66:42:06:b9:2b:c9:59:b8:e1:1f:a1:15:
df:b2:bd:b7:3b:a8:b7:9a:1b:17:4e:98:96:ff:6e:
1a:47:c6:93:3e:df:3b:45:82:c8:1e:93:34:2c:aa:
b8:48:16:89:3b:91:d4:62:3b:8f:6c:92:d4:99:66:
15:b8:5f:79:d8:65:8d:7a:0b:66:8f:61:1f:ad:61:
e7:0a:56:e5:c7:58:41:fc:a3:18:c4:11:e6:5b:e3:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:2C:82:5C:E9:93:E4:43:E4:5A:D1:31:A4:3F:34:C5:4D:BC:74
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:4::/48
Signature Algorithm: sha256WithRSAEncryption
36:94:ed:b3:1d:9d:d8:b3:88:62:2b:b1:d7:85:dd:10:0b:e4:
d3:4f:60:5e:77:be:3a:4b:12:ad:f1:37:16:ff:8c:36:62:8d:
6a:23:83:92:d6:db:33:72:d0:f7:70:ec:25:b9:e4:47:11:a4:
3c:e9:26:a8:bf:4a:f8:6b:1b:93:8f:de:5a:3a:1a:49:25:de:
7b:9b:8a:17:fa:db:23:33:19:48:ba:aa:8a:cc:99:eb:68:1d:
6b:58:75:aa:a8:af:0c:11:b8:d2:5b:7d:62:74:1c:86:d2:93:
8d:24:da:d2:a4:03:1c:0e:06:d2:0c:41:17:30:a0:28:0a:ea:
ae:0d:b9:ff:83:53:86:98:06:54:a6:ce:f9:cb:a8:8c:6d:d9:
33:3b:a0:58:be:5f:6f:4f:50:e2:88:c1:98:9b:00:50:a2:87:
aa:9f:4d:68:14:42:5a:cd:51:ef:49:64:2c:36:54:12:3a:ea:
e9:23:21:77:a0:ad:82:b5:7b:33:44:1c:48:91:e5:f1:37:23:
fc:f7:0a:42:12:16:b9:32:6f:72:39:86:c0:93:c8:58:05:7e:
27:9e:55:79:6c:aa:93:22:7a:46:cb:b2:3c:6e:ed:fd:f8:3c:
2a:89:4c:98:59:30:77:7c:7a:85:28:53:3b:7d:ec:51:ec:de:
0e:59:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org