Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: aYcK5BfBuUA5xCmR4F1bANQBcR3Bz0auJi+hSXOeRQw=
Subject key identifier: D0:B5:CB:46:33:E6:12:37:D4:9F:35:A7:CF:CF:F1:68:B7:AA:9C:6C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7EFD92A5E77DD457BEA6773C31B725E191F31D18
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:36 +0000
ROA not before: Mon 26 Sep 2022 07:56:36 +0000
ROA not after: Mon 25 Sep 2023 08:01:36 +0000
asID: 59282
IP address blocks: 2400:d680:5c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fd:92:a5:e7:7d:d4:57:be:a6:77:3c:31:b7:25:e1:91:f3:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:36 2022 GMT
Not After : Sep 25 08:01:36 2023 GMT
Subject: CN=D0B5CB4633E61237D49F35A7CFCFF168B7AA9C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:41:09:a7:7f:2f:13:c5:60:85:87:37:1c:
a1:a0:70:3c:86:59:a7:91:04:f2:31:3d:1a:95:6a:
b5:31:e0:47:ec:48:07:08:12:66:44:70:b3:48:9c:
cd:34:dc:85:be:fc:b2:06:13:b0:05:88:66:4b:78:
1b:ea:a0:1a:d5:e1:b8:37:b0:b0:6e:19:5c:33:00:
0a:7c:ad:a7:09:6f:6a:0a:2c:e6:02:b3:2f:83:f1:
5f:09:97:c1:94:a3:71:a8:2d:83:ec:76:50:de:1a:
29:be:58:48:d5:31:da:0c:3a:ca:ee:7a:23:68:8d:
3f:0b:f7:5c:9c:76:a2:32:66:cb:63:0c:6f:b6:f0:
ba:14:b3:33:15:e4:14:a6:b8:27:7d:58:b9:68:e3:
3a:0b:64:85:36:de:8f:b6:da:ff:a1:ea:bf:37:1f:
93:86:1a:5c:ec:ba:c7:b5:55:18:b0:33:56:b3:a9:
ca:07:a0:d2:6f:9a:e6:41:80:06:62:54:e6:0c:60:
d6:46:bc:80:62:f8:0c:f0:1d:85:10:70:a1:54:6d:
a8:1e:24:17:7f:61:1a:ee:2c:6f:b4:64:da:aa:fb:
be:b4:9e:31:4d:ec:30:48:35:3d:ef:13:e6:a3:0e:
39:2c:47:5f:a5:02:ef:a5:49:69:64:b9:81:fe:80:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:CB:46:33:E6:12:37:D4:9F:35:A7:CF:CF:F1:68:B7:AA:9C:6C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:5c::/48
Signature Algorithm: sha256WithRSAEncryption
03:1a:63:c7:62:5c:62:b5:3f:5e:c6:e4:08:df:30:d3:74:0d:
9d:c9:8f:99:10:9e:ef:ec:b7:4b:64:56:26:6d:fc:2a:06:7f:
c7:2e:35:c2:59:e7:fa:82:57:7d:df:77:02:84:36:2e:79:34:
4c:a6:1c:f5:9a:2b:34:bb:18:9e:cb:2e:66:2c:f7:fa:d0:b6:
4d:66:ba:e9:3c:23:95:cf:3a:bc:00:b0:19:c4:3b:e8:21:f5:
68:72:a1:57:02:7e:b2:f1:dd:bf:a7:08:41:3f:43:20:14:db:
57:83:17:ab:1c:d5:cb:4e:2d:b9:ed:1c:54:7b:52:c0:ea:05:
16:09:62:47:7a:4a:f4:2b:7a:c3:b6:fb:2d:fc:db:55:27:b4:
08:9e:c4:f2:01:60:bf:74:07:92:a9:e5:d2:1e:4f:a3:02:1f:
e3:75:66:45:00:01:b9:d3:ef:da:e3:3b:a4:9f:51:07:a5:32:
dc:9d:19:0e:5d:52:a7:f4:e3:55:5d:73:18:e3:68:eb:f5:cf:
e3:d8:11:1a:66:cd:8c:94:e6:d8:ae:cf:4e:3f:41:a5:9c:bd:
ce:bd:1b:77:43:fc:9e:b2:8d:02:fb:3a:5f:f6:e0:6e:30:ae:
8f:dc:50:5f:16:75:1b:0d:ac:c4:9f:87:e1:b3:c6:6c:60:4b:
a9:48:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org