Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: bldv6+hJbAO2fPJc/JFAAtTo5u+aUGQE2q4dTprv58Y=
Subject key identifier: 98:DB:1E:FE:23:29:44:F7:81:AF:96:EE:52:98:94:C3:4F:64:D7:95
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 132B7F22D44C746D548F87CEFEE45B26DB41DC0D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:16 +0000
ROA not before: Mon 26 Sep 2022 07:57:16 +0000
ROA not after: Mon 25 Sep 2023 08:02:16 +0000
asID: 59282
IP address blocks: 2400:d680:59::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2b:7f:22:d4:4c:74:6d:54:8f:87:ce:fe:e4:5b:26:db:41:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:16 2022 GMT
Not After : Sep 25 08:02:16 2023 GMT
Subject: CN=98DB1EFE232944F781AF96EE529894C34F64D795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:70:be:ab:39:d1:1b:d6:86:2e:5b:9a:41:
df:0c:bc:9a:e5:25:20:79:65:16:18:da:33:0d:85:
d1:e0:5a:6a:fb:af:b1:86:78:9b:31:c6:81:33:b3:
89:8a:af:34:79:dc:56:32:1f:1c:1f:96:8c:35:a3:
45:96:bd:ca:ce:f8:9f:43:d3:cf:b1:3d:88:7d:de:
a2:73:93:c7:8e:c5:05:b6:02:a2:88:a7:cd:ae:02:
ea:e6:57:41:04:08:a9:b3:0c:75:ec:82:11:ea:ab:
41:2f:a6:62:e3:f6:82:b9:47:83:84:7c:bf:d0:b6:
f9:80:ec:20:fe:64:f8:9e:f0:52:b9:68:e8:60:fb:
6f:71:7c:6a:2a:41:8c:b5:18:d9:fd:b5:a0:74:a3:
d3:f5:c9:5d:f2:e0:5b:3b:ff:eb:c5:a3:9c:3f:1a:
c9:e2:8f:c5:c2:f8:76:a1:c4:a1:44:5b:2f:e6:01:
28:8e:40:69:25:d5:21:3e:ab:0c:ca:09:8d:58:6c:
47:19:ec:7b:d2:d1:cb:a0:e8:81:a9:2f:8f:11:78:
ec:ca:85:4f:d3:74:9b:b4:2e:c2:b1:53:64:8f:98:
da:3b:2e:8d:2a:8e:5b:ca:bc:81:dd:5e:17:20:c6:
3a:4a:8f:df:e1:46:60:4d:0c:bf:ec:17:f9:2d:c7:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:1E:FE:23:29:44:F7:81:AF:96:EE:52:98:94:C3:4F:64:D7:95
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:59::/48
Signature Algorithm: sha256WithRSAEncryption
b5:1d:00:76:46:f8:8d:4e:0b:9e:62:a1:85:43:d2:ce:16:52:
d1:ab:91:ba:ca:ed:a5:8a:11:f3:6a:a5:90:12:56:66:7a:1b:
ea:f7:26:35:e9:2f:20:1a:3e:27:c6:06:53:63:03:9c:ef:15:
64:34:ab:81:ce:5d:7e:1e:1c:6d:31:8c:7f:70:db:98:14:29:
d2:32:af:2b:86:c7:42:c5:a9:e8:6e:d9:ec:0e:98:27:c9:c0:
d9:59:35:77:d7:83:26:9e:5d:ba:eb:d3:8e:dc:72:17:14:35:
78:9b:f5:25:51:0d:4b:19:71:19:3c:86:73:e2:be:eb:c1:b7:
03:d1:3b:bf:6b:03:eb:2a:e0:e2:fa:b3:5b:be:e3:7f:df:95:
62:85:94:20:d6:25:a2:f6:ed:80:d9:3e:0c:c0:c6:94:b1:f0:
45:6c:59:a8:f7:d1:32:46:c7:00:88:61:5f:75:85:75:9e:67:
a0:44:53:2e:b1:69:fe:cb:55:ca:3f:59:cf:60:97:51:73:9a:
7f:5e:62:89:ba:c4:20:fb:0b:d9:8e:44:4d:87:7c:f7:72:54:
1d:5b:e3:63:79:2c:d9:6a:aa:26:5c:7c:54:21:2b:78:85:bc:
1a:e9:c4:f2:5b:4d:57:44:ac:76:8f:aa:88:66:74:b7:5a:bd:
9b:cf:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org