Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: tQdCQznUjTtDWIVIAQ3JrKTYmfCvg2mxAcQ5rx1i1mY=
Subject key identifier: 8D:90:C2:39:E9:47:14:4A:BB:68:08:C3:FA:98:7C:6A:8A:FF:BC:B1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 426CC7B83F9424F27E35263E16EDD2A3E3948B9A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:49 +0000
ROA not before: Mon 26 Sep 2022 07:56:49 +0000
ROA not after: Mon 25 Sep 2023 08:01:49 +0000
asID: 59282
IP address blocks: 2400:d680:5e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6c:c7:b8:3f:94:24:f2:7e:35:26:3e:16:ed:d2:a3:e3:94:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:49 2022 GMT
Not After : Sep 25 08:01:49 2023 GMT
Subject: CN=8D90C239E947144ABB6808C3FA987C6A8AFFBCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:23:e2:1d:36:e4:74:fb:ef:da:ac:7a:5f:
14:bd:04:07:a6:58:3f:27:cf:b2:78:50:e5:73:e5:
ab:7e:e2:ee:c1:08:ad:3e:fc:bc:46:bb:91:1b:bd:
29:82:ca:3c:98:87:59:92:39:a8:39:cd:b9:e3:ec:
0e:b4:04:eb:05:d2:74:6d:02:de:6a:ae:83:d8:52:
42:1f:c2:2e:b1:13:7c:4e:19:b4:87:71:e9:a9:b1:
d6:27:a3:aa:8a:12:77:5f:10:5b:aa:4b:b2:c0:37:
db:1f:0d:74:85:c9:98:3f:b3:cc:8c:c8:ce:d3:1c:
12:8f:91:61:d4:9d:8b:bb:67:1f:f1:6f:fc:4b:9e:
5d:e3:10:da:3b:03:6d:a5:c9:24:1c:b5:52:2b:64:
54:86:67:d1:f9:70:2e:1d:27:5f:45:ba:fc:6e:59:
fc:41:34:fb:82:23:38:ac:f1:90:8b:2a:6a:ee:a3:
ea:02:fe:1c:25:c1:69:bd:bb:12:24:75:78:d1:77:
dd:13:63:b1:72:7c:b2:d5:93:ab:9c:0b:b7:9c:da:
9a:e1:89:65:4f:40:f4:73:e7:18:a1:ee:df:2d:02:
9f:e4:2b:0f:6c:45:2c:6f:9e:38:79:fa:0e:d0:bb:
64:8a:73:44:7e:c2:bb:ca:87:dd:f4:dd:33:3f:38:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:C2:39:E9:47:14:4A:BB:68:08:C3:FA:98:7C:6A:8A:FF:BC:B1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:5e::/48
Signature Algorithm: sha256WithRSAEncryption
40:2e:a8:7d:35:72:85:8c:39:6e:ed:77:80:27:76:42:31:a0:
86:d0:28:76:c9:06:42:cc:30:6d:c7:e8:f0:f4:e7:03:b5:4a:
3d:d7:83:dc:fa:38:af:2b:c0:c3:89:9c:ed:9f:65:01:d8:a9:
09:71:c3:24:16:a7:8d:83:da:dd:25:dc:41:f2:f9:82:f7:57:
e6:ed:20:1a:ae:5b:41:a2:1e:e8:c0:01:19:ca:b5:6d:c1:ee:
93:b9:c0:15:2b:0b:bf:c1:9e:1b:74:9b:c7:dd:bc:14:89:5b:
6f:f9:7b:82:29:e4:88:f8:5e:a9:70:8d:40:f2:fa:c8:c9:f2:
ad:db:d5:86:92:e3:97:3e:a6:11:f8:cf:f0:9d:07:ca:c5:86:
a2:db:1c:5d:25:8d:90:a1:cc:42:00:48:09:fb:94:77:d9:13:
16:84:cf:78:10:df:d9:1a:2b:2c:8d:44:10:d5:44:aa:01:19:
a9:f6:e0:07:e7:eb:ee:54:f0:94:d7:2e:72:4f:43:d6:1e:17:
5b:fa:f9:53:41:b5:d6:1c:a8:df:6f:8d:cb:26:d5:6a:3d:a2:
4c:37:67:71:97:f5:b4:14:fa:cf:9a:9e:e2:e7:ac:a7:4e:de:
5e:85:17:49:37:c3:16:ea:03:7b:ae:51:82:3f:fd:72:c8:d8:
1d:7a:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org