Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: vReeOxprd+jEuquV6XaAVHz5psf1d17FO72rBBOg/3A=
Subject key identifier: 83:33:49:AC:62:7B:D0:59:EF:9C:12:38:9C:7F:95:3E:5F:0E:04:CF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2CF7DF9B7B773D02806ACB481FE96D95F0360DDE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:29 +0000
ROA not before: Mon 26 Sep 2022 07:56:29 +0000
ROA not after: Mon 25 Sep 2023 08:01:29 +0000
asID: 59282
IP address blocks: 2400:d680:53::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f7:df:9b:7b:77:3d:02:80:6a:cb:48:1f:e9:6d:95:f0:36:0d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:29 2022 GMT
Not After : Sep 25 08:01:29 2023 GMT
Subject: CN=833349AC627BD059EF9C12389C7F953E5F0E04CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:a8:2b:76:9d:1e:3f:cf:8d:af:f3:79:0d:
55:94:b4:33:34:c1:22:a1:c3:22:99:d7:f3:63:80:
10:f3:76:9d:7b:da:82:2a:f1:f1:2b:f5:6d:30:c9:
31:a4:62:4e:11:9f:07:56:9e:61:7e:c1:b8:ce:e9:
5d:67:35:bb:d8:00:10:b6:85:6c:19:23:74:77:16:
98:1e:d9:a3:e8:fb:89:03:22:2b:4a:0c:fc:c0:00:
81:93:b2:6b:6e:bc:33:3a:f7:ff:75:5e:94:8e:18:
bd:31:9b:22:76:07:f2:f0:1e:8a:a7:6a:18:9a:16:
dd:f3:0b:fa:91:9f:d0:e1:31:ee:44:99:9f:22:51:
87:30:07:00:41:89:04:f0:ee:9a:c1:4e:65:5f:25:
ad:d6:54:19:1f:08:18:60:c2:e9:a7:29:9e:c2:cd:
f9:46:2f:86:40:88:b2:01:0d:38:29:1b:11:71:30:
f1:0c:34:7b:1d:5f:cf:2b:95:3b:76:c2:43:7e:0c:
5f:c6:05:fd:84:6c:46:24:91:7d:29:79:a7:86:f2:
7f:09:4c:e2:32:a5:56:09:44:83:5a:21:80:fa:72:
7a:95:e8:df:ff:b6:1a:a1:0c:24:5c:d9:63:bf:04:
69:44:e5:33:91:02:0c:e3:aa:b4:c3:ea:45:e3:29:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:33:49:AC:62:7B:D0:59:EF:9C:12:38:9C:7F:95:3E:5F:0E:04:CF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:53::/48
Signature Algorithm: sha256WithRSAEncryption
a3:ff:5d:70:86:c5:0a:28:3e:37:71:45:5e:b0:4a:f2:9d:09:
32:b5:91:b7:6a:ed:cd:a0:9a:df:3e:6f:58:db:b3:2c:93:1c:
74:18:88:80:cd:ac:8b:bd:b9:e3:1a:b5:97:a5:22:af:59:64:
c1:68:80:fa:10:37:69:82:ba:e8:c5:6b:6f:7c:a3:9e:45:25:
a7:57:1b:0f:5e:f9:b9:71:a1:ca:75:d3:7e:20:d3:96:d9:66:
9f:07:45:10:47:1f:df:03:2f:ef:b8:74:06:12:cb:29:1c:fd:
68:6c:e9:41:fa:b2:c1:48:a3:4c:e5:72:14:58:02:35:57:48:
8e:f1:cf:f8:1f:02:6b:f1:a2:82:f6:79:a9:41:95:92:8e:5e:
55:79:ef:fd:93:d8:d5:f8:be:0a:99:04:b3:3f:86:bc:4e:4c:
39:6d:a0:b9:c7:4c:ad:d9:70:cd:a0:6a:cd:76:84:95:c1:93:
0c:40:51:51:b2:86:8a:1d:34:49:d6:66:cd:44:7b:b5:c0:b9:
aa:7c:f8:c9:6c:f9:e2:65:a3:1c:6a:4c:67:2c:dc:bd:b4:9e:
66:60:6e:0b:06:95:da:86:97:7a:5b:ec:24:70:15:4a:ef:6c:
63:4f:e8:96:16:cc:46:52:85:7a:5d:13:0d:e3:75:85:a1:df:
96:05:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org