Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /yeRo9qOhs52heNDdzYnWFTn/hRu2YgidEfdUaArmWM=
Subject key identifier: 57:5A:5C:BF:5C:18:3C:A3:43:97:D3:CB:0E:1A:5F:13:77:92:ED:32
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 323E3F5CA503147B19BD64A190B5A63891D30EEA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:49 +0000
ROA not before: Mon 26 Sep 2022 07:56:49 +0000
ROA not after: Mon 25 Sep 2023 08:01:49 +0000
asID: 59282
IP address blocks: 2400:d680:5b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:3f:5c:a5:03:14:7b:19:bd:64:a1:90:b5:a6:38:91:d3:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:49 2022 GMT
Not After : Sep 25 08:01:49 2023 GMT
Subject: CN=575A5CBF5C183CA34397D3CB0E1A5F137792ED32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:a7:2a:a7:df:f2:3c:6b:5a:46:dd:f8:ff:
fa:b7:d0:1f:40:3a:87:2c:2c:76:5b:ab:f7:8c:6f:
ba:4f:b4:6c:b0:2d:3e:c8:47:9d:75:ac:c4:54:5f:
9e:f7:65:c3:a0:58:e6:b8:11:00:60:fd:ad:c3:99:
3f:a6:93:b9:f0:1b:6b:05:ad:c6:01:ba:c7:d6:62:
f6:b4:0b:d4:85:ad:8f:17:ad:36:ba:13:33:87:f3:
4b:53:ad:3b:9d:5e:ab:e1:7c:c1:0c:10:7c:e8:8e:
52:f6:66:b3:6c:46:11:74:e4:35:f2:eb:21:34:c0:
ae:6a:aa:d7:c0:a4:b5:2a:4d:b5:0c:e8:ff:5b:8e:
a6:fb:e6:c7:60:7e:a3:10:23:4b:8b:e8:4a:81:33:
f0:a6:df:51:0f:0b:d8:3a:e1:de:02:7e:39:89:a2:
c4:ab:6c:d4:f0:91:b0:73:b4:4a:2c:7f:66:46:db:
e2:8a:bc:86:48:a1:52:7f:2d:e1:fe:23:cb:18:c3:
62:f1:b8:da:30:4a:6c:a6:4f:ea:39:ca:08:c6:e9:
cd:53:4a:9d:8e:60:86:53:42:71:bc:e9:d6:49:65:
94:3f:62:1c:60:e0:24:31:6f:b6:0a:83:da:a3:f5:
2f:2a:a0:89:07:2f:ce:fe:13:17:87:57:31:f5:df:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:5C:BF:5C:18:3C:A3:43:97:D3:CB:0E:1A:5F:13:77:92:ED:32
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:5b::/48
Signature Algorithm: sha256WithRSAEncryption
ab:63:e0:e8:ba:51:8c:17:30:f9:73:c5:cb:46:59:75:6b:ff:
e2:54:6a:5b:cf:dc:54:26:67:68:d6:50:34:a5:16:79:8b:b5:
3e:1b:e5:2a:14:db:d7:e1:2c:5d:e3:d1:39:c8:bb:00:5e:73:
17:7a:16:f6:2b:1d:61:e4:6f:ce:26:b8:86:d0:1e:65:e4:c3:
66:3e:ea:57:43:9b:b9:01:47:4e:3b:87:ed:75:82:0b:a5:87:
65:88:7b:fb:aa:18:a8:b2:76:41:9f:6c:02:e8:6b:2a:fd:80:
5c:e8:2c:cf:10:69:10:3a:94:c6:5a:51:44:eb:7b:e8:53:e0:
92:7a:fd:c6:a8:e9:7c:c0:0b:3b:1d:d2:f0:bc:ea:bb:d8:44:
6d:9f:9f:2e:91:e3:0d:2d:43:2f:3d:c7:6f:3c:da:a4:33:4b:
9d:33:76:be:46:e8:0b:4a:5b:0e:33:6a:d1:6d:0c:0c:9d:96:
85:66:35:1a:49:b5:62:bf:93:4b:48:ed:9b:36:f7:97:6a:69:
3f:a3:82:b9:c8:f9:43:9b:3a:ad:a0:23:36:6b:76:7a:1d:f2:
62:ed:54:d5:de:09:91:ec:fa:20:bb:67:1e:3b:b7:e2:8d:13:
a7:1a:86:32:ae:64:60:01:a0:c9:fb:ee:da:3e:2f:8e:73:29:
1d:d1:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org