Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a36323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: l1rs96KDGaebg9Hk9rpZrA549X5C5wiUAUaYER78V+0=
Subject key identifier: 48:93:F9:B1:71:2B:D9:CC:43:D1:18:80:20:4F:47:90:F2:AE:3E:93
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 316B20B97474687E706691A7327812A6170F49FE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:52 +0000
ROA not before: Mon 26 Sep 2022 07:56:52 +0000
ROA not after: Mon 25 Sep 2023 08:01:52 +0000
asID: 59282
IP address blocks: 2400:d680:62::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6b:20:b9:74:74:68:7e:70:66:91:a7:32:78:12:a6:17:0f:49:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:52 2022 GMT
Not After : Sep 25 08:01:52 2023 GMT
Subject: CN=4893F9B1712BD9CC43D11880204F4790F2AE3E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:7d:31:aa:3c:ba:e6:af:46:e0:5c:03:17:
7f:c8:cb:54:ea:ad:13:ab:cb:1e:e2:92:44:d5:03:
8d:df:fa:66:5b:7c:5a:5d:17:25:1d:f4:b2:dd:18:
a0:dd:de:ca:89:7d:c1:83:96:05:c8:56:6a:f4:0a:
35:f3:d5:dc:d8:e8:b3:88:c0:67:ba:dc:7b:47:ca:
bf:af:99:0e:66:95:a1:c6:ed:f8:2b:fe:89:dc:24:
ca:de:83:b1:7a:86:b1:b4:d2:d5:ad:eb:f6:f3:aa:
96:5e:8a:c4:c4:3d:9b:03:e5:0a:86:a1:5a:89:09:
25:99:64:d8:ea:89:de:f3:65:3a:f4:05:42:40:f2:
e3:87:f3:4e:55:ed:b0:99:6c:d8:71:e3:5d:7a:43:
5b:29:0f:63:a0:36:bc:c7:9b:31:49:8d:b6:2b:4f:
30:13:90:ad:6e:b3:ad:af:44:8d:ba:b1:db:f4:20:
16:c5:d6:78:62:56:12:91:4c:02:bd:20:52:64:5b:
fa:b5:4d:99:92:2f:20:ee:04:37:15:8a:a2:37:f5:
40:ed:42:05:26:ef:4d:59:46:65:d8:f0:8d:91:f3:
70:52:f3:f0:66:66:8f:60:fa:ed:84:ad:32:65:2d:
70:5d:02:53:45:6c:7e:15:61:b8:fb:1a:28:42:79:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:F9:B1:71:2B:D9:CC:43:D1:18:80:20:4F:47:90:F2:AE:3E:93
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:62::/48
Signature Algorithm: sha256WithRSAEncryption
5f:3c:78:a8:37:88:b5:ae:46:17:4d:90:28:41:d3:9b:c5:40:
7d:df:6b:b4:bd:79:0b:28:01:7b:37:a3:1d:cf:a9:f8:9b:8a:
e6:7b:c1:16:22:ba:09:31:31:fc:7a:7a:bd:8f:61:dd:09:d9:
e8:d5:7f:97:ea:fa:c0:5d:97:a8:c0:2c:e9:e8:38:f4:af:b0:
a5:34:e1:18:b9:2e:89:84:cd:9d:25:67:6e:0d:66:f7:fc:67:
9c:4d:a4:bd:26:e3:43:ba:42:56:78:b0:e5:47:36:e4:3b:67:
45:de:da:4f:93:18:11:21:87:6a:37:ea:f0:84:d4:59:0c:92:
c0:ae:53:31:74:73:a4:39:bd:9c:11:cb:18:9e:be:25:1d:34:
b1:d5:79:ba:01:12:cd:70:87:95:2e:eb:ae:33:1d:47:49:d2:
9c:2f:ce:18:7f:ca:e8:29:97:82:d9:09:f0:0f:06:2d:3c:d5:
bd:3b:85:f2:2a:03:00:fd:22:67:48:b2:71:96:0d:d6:01:55:
9d:05:26:2f:0b:ad:69:26:b2:4f:da:e3:d5:5a:85:87:1b:93:
59:b9:c8:cd:d9:54:53:9c:15:6f:29:80:02:75:24:8e:99:22:
a2:73:a1:3d:7b:1f:41:ab:97:47:84:4f:0f:24:06:43:9f:6b:
4e:2f:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org